Monitoring OpenBSD with Grafana and Prometheus

By Finde Labs |  Jan 26, 2020  | openbsd, prometheus, grafana, monitoring, node_exporter

With any deployment of OpenBSD, it is always advisable to have some sort of monitoring enabled. In the past, I have used zabbix as the monitoring solution for both public findelabs servers, as well as my personal OpenBSD servers. I was going to write an article about the installation and configuration of the web frontend and the postures backend, but I kept putting it off as the configuration was rather clunky. Last week, I ended up moving over to a Grafana dashboard with prometheus as the monitoring system.

Continue Reading...

OpenBSD GCP Bootstrap

By Finde Labs |  Nov 15, 2019  | openbsd, gcp, scripting, ansible

Since I have been recently experimenting with OpenBSD 6.6 on Google Cloud Compute, I put together a small bootstrap script to help with new deployments to GCP. It is still in it’s infant stages, but so far it will deploy a couple different scripts on top of the typical basic findelabs OpenBSD bootstrap.

Continue Reading...

Relayd with SNI and TLS keypairs

By Finde Labs |  Nov 2, 2019  | openbsd, relayd, sni, httpd

Back when this article was written, on setting up a relayd load-balancer with two back-end httpd servers, relayd did not have the capability of handling multiple tls relays with unique domain names. This meant that each tls relay required a unique IP per domain. This was in part due to the fact that relayd had no SNI support. I am happy to say that with OpenBSD 6.6, this is no longer the case.

Continue Reading...

Configuring DNS for a Mail Server

By Finde Labs |  Sep 23, 2019  | openbsd, dns, smtpd

Years ago, I always felt that creating a functioning mail server was a project full of pitfalls and speedbumps. Luckily OpenBSD makes the configuration of a working mail server relatively easy. However, creating a working server is only one piece of the puzzle. DNS must also be properly configured to help ensure that your emails actually reach their destinations. This article highlights some of the lessons I learned while creating the mail server for this domain.

Continue Reading...

Automatic Key Import with ssh-agent/ssh-add

By Finde Labs |  Jun 29, 2019  | openbsd, ssh-agent, ssh-add, scripting

If you are like me, then you probably use git as the primary way to manage your code repositories. I also tend to use my own ssh keys to access and manage my repo, so I do not have to remember more passwords. One simple way to manage ssh keys is with the ssh-agent and ssh-add utilities. Things are made easier still be automating the ssh-agent initialization process through bashrc, but this can also lead to complications if one is using a terminal multiplexer.

Continue Reading...

Creating an IKEv1 IPSec VPN on OpenBSD

By Finde Labs |  Jun 7, 2019  | openbsd, ike, vpn, ipsec

Today I will be going over how to bring up a L2TP+IPSec VPN on OpenBSD. I am doing this because while I have been operating my own WireGuard VPN servers for the past few months now, I have experienced issues when the WireGuard server initiates over 100 connections. I know WireGuard is obviously still beta software, and that the issues could be caused by multiple things, but I wanted to give another option a shot.

Continue Reading...

Recursive grep'ing with bash

By Finde Labs |  May 8, 2019  | openbsd, scripting, bash

How many times have grep’d a file, and then piped the output in order to grep again, and then piped that again to grep? Sometimes when I am search a file, I could end up piping maybe a dozen times while searching the file. Just for fun, I wanted to write a recursive grep program, rgrep in rust. However, as a first step, I figured I could write it in bash first.

Continue Reading...