Debian Jobs

Necesito ayuda para configurar el acceso de AWS S3 en mi aplicación Plane que está desplegada en un servidor Hetzner con arquitectura ARM64 (aarch64). Contexto: Tengo una aplicación Plane (self-hosted) corriendo en un servidor ARM64 Tengo un bucket S3 en AWS (región eu-south-2) llamado "coolify-tools" La aplicación muestra el error: "Access to the bucket 'coolify-tools' is forbidden. Check permissions" Ya tengo configurados IAM users, roles, policies y un Trust Anchor en IAM Roles Anywhere Lo que necesito: Diagnosticar por qué Plane no puede acceder al bucket S3 Configurar correctamente las credenciales de AWS en Plane (Access Keys o IAM Roles Anywhere) Verificar que los permisos de IAM están correctame...

I’m spinning up a fresh Ubuntu VPS and need it turned into a rock-solid hub for my IoT fleet. The box must host two main services—Mosquitto for messaging and a Mender server for over-the-air firmware updates—without compromising security, performance, or future maintainability. Here’s the picture • Mosquitto will run behind TLS with mutual authentication. I’ll give you the root CA; you generate and stage broker and client certs so the standard mosquitto_pub / mosquitto_sub TLS test passes. • Mender must be installed in its open-source edition, set to distribute only signed artifacts. I already sign firmware; the server simply has to enforce signature checking before rollout. • fail2ban on the host should block any source IP after three ba...

I’m running a Debian server and need the system language switched from its current setting to Ko-kr. Your task is to: • Reconfigure the server’s locale so all system messages, man pages, and default environment variables use Ko-kr. • Verify the change persists after a reboot and is applied for both root and regular SSH sessions. • Provide a brief set of commands or a script so I can repeat the process on future servers if needed. Please work directly on Debian, avoid disrupting running services, and share a short confirmation (e.g., output of locale and localectl) once the change is complete.

I already have a Linux machine running k3s and want to deploy an open source application in the cluster. For this, I need a complete and easy-to-follow configuration, including all necessary preparations for HTTPS with Let’s Encrypt and the appropriate Nginx settings. Scope Install or verify the Nginx Ingress Controller in the k3s cluster (Traefik is not used). Create all required namespaces, deployments, services, and ingress resources so that: – The application in the cluster is reachable via a defined path (e.g. /app). Set up TLS certificates with Let’s Encrypt (including automated renewal) and integrate them into the ingress. Document all commands and YAML files in such a way that I can repeat the installation and configuration step by step on another system at a...

I have a Lenovo ThinkPad T480 waiting for a fresh, security-first Debian installation. The goal is a fully hardened, privacy-respecting daily-driver that ships with BOTH Mozilla Firefox and Brave, each pre-tuned for strong tracking-protection and fingerprint-resistance. This is an ADVANCED hardening job. Beyond the base install I’ll need full-disk LUKS2 encryption, secure boot/Libreboot if the hardware permits, locked-down BIOS settings, kernel and sysctl tweaks, AppArmor (or comparable MAC), DNS proxy with encrypted queries, and a firewall configured to best practice levels. I did not select a specific firewall in the form, so feel free to recommend whether UFW, iptables or firewalld is the right fit for an always-on laptop that roams between trusted and untrusted networks. Delive...

I need an open-source fax solution deployed on a Linux host so I can both send and receive faxes from the network. Every incoming fax must be archived automatically as a PDF, and all administration—including queue monitoring, user setup, and log review—has to be handled through a clean, browser-based interface. Any stack that meets those points is fine Like ICTFax as long as it runs on a recent Debian/Ubuntu or CentOS release with no licensing fees. I will supply SSH access to a fresh VM and either a Class 1/2 USB modem or a T.38 SIP trunk you can register against. Fax server installation & system hardening SIP trunk / FoIP gateway integration Incoming & outgoing fax routing and testing Web-based fax send, receive & management Automatic PDF conversion for all...