Search Results

The track team currently has two shipping containers for storing equipment located just past the home bleachers near the track. However, there is no ventilation in these containers. This causes problems, especially in the summer, because the containers get ext...

kasad.com features a collection of web apps. Most of the web apps don't actually run on the kasad.com server. Instead, they are hosted in Docker containers on my laptop and are made accessible using Cloudflare's Zero Trust platform. Currently we host the foll...

Authelia has been replaced by Authentik for use in the kasad.com web apps. Authentik provides more customization, as well as a web-based user interface for managing users, which was my main gripe when using Authelia. Description Authelia is an open-source au...

Overview kasad.com features a secure, private WireGuard tunnel. The kasad.com server will route requests on the tunnel out to the internet, making the tunnel usable as a VPN. Structure Tunnel Service The WireGuard tunnel interface is wg0. wg-quick(8) is used t...

The server for kasad.com is a VPS hosted by Vultr. It costs $5/month. It's a pretty low-spec VPS, but that's what keeps it cheap. Specs/information Property Value OS GNU/Linux Distribution Debian 11 (bullseye) Vultr VPS type Regular Cloud Compute ...

kasad.com uses Cloudflare to provide DNS resolution. Most traffic to the kasad.com server is not proxied through Cloudflare's network. Traffic using Cloudflare's Zero Trust network (meaning all SWAG endpoints) is proxied through the Cloudflare edge network. To...

Description Apache Guacamole is a remote access gateway with a web frontend. It allows the user to connect to a device using SSH, VNC, or RDP using just a web browser. Deployment details Guacamole requires three separate Docker containers: (1) the backend serv...

Heimdall is no longer being hosted on kasad.com. It is in the process of being replaced with Homer. Description Heimdall is an app launcher / dashboard. It serves as the landing page for swag.kasad.com. Deployment details Access Heimdall is served by the S...

Paperless-NGX is no longer being hosted on kasad.com because it did not see much use. Description Paperless-NGX is a document management system that transforms your physical documents into a searchable online archive so you can keep, well, less paper. Depl...

Vikunja is no longer being hosted on kasad.com because it did not see much use. Description Vikunja is a task manager / to-do list application. It features organization, scheduling, and (my favorite part) Kanban boards. Access Vikunja is reverse-proxied by t...

Some of the kasad.com web apps (currently Vikunja, Bitwarden, Nextcloud, and BookStack) have the capability to send emails. All of these apps are hosted on their own subdomains, so it makes the most sense if emails sent by those apps originate from their respe...

The Secure Web Application Gateway (a.k.a. SWAG) is a reverse proxy service. It serves a reverse proxy for all the web apps on kasad.com. It runs as a Docker container using the lscr.io/linuxserver/swag:latest image. Access The SWAG container runs inside a NAT...

Some of the Docker containers read/write data to persistent storage volumes. They read/write using the UID/GID of the entrypoint process in the container. Expected behavior To allow for better access and administration of the files in these volumes, containers...

Portainer is a web interface for managing Docker (and Kubernetes) containers. Unfortunately, Portainer is not open-source. However, it's the best of its kind of software that I've found so far. Access Portainer is reverse-proxied by the Secure Web Application ...

Since our Docker containers are web services, they need to be running all the time in order to be useful. To ensure this happens, it's useful to automatically start them when the host machine boots. We can do this easily using systemd on Linux. TL;DR: if you d...

The kasad.com server runs a Syncthing relay server and discovery server. These services enable completely private file syncing by removing reliance on Syncthing's public servers for discovery and relaying. Purpose Each server provides a method of communication...

The kasad.com server runs an SSH server to provide remote access. It's the standard OpenSSH server provided with Debian, but it has some changes in configuration. Host key generation Since the kasad.com server uses the default Debian image template from Vultr,...

Send is no longer being hosted on kasad.com because it did not see much use. Send is a simple, private file sharing web service. It provides an interface for users to upload files temporarily for other users to download. Access Send is reverse-proxied by t...

Bitwarden is a password manager application. It has a public instance that can be used for free with limited features or with all features for a fee. I choose to self-host an instance with all the features for free. Access The Bitwarden instance is reverse-pro...

Jellyfin is a media streaming hub. It allows you to easily stream audio and video files to a web browser. Access Our Jellyfin instance is reverse-proxied by the Secure Web Application Gateway. It is published on media.kasad.com. Deployment Jellyfin runs as a s...