Email security with Google Workspace

TL;DR; What records needs to be added to DNS? v=spf1 include:_spf.google.com -all v=DKIM1; k=rsa; p=MIIBI...6lwIDAQAB google._domainkey v=DMARC1; p=reject; rua=mailto:[email protected] default._bimi v=BIMI1; l=https://fizjoterapia.uk/bimi.svg SPF Sender Policy Framework (SPF) is an email authentication method which ensures the sending mail server is authorized to originate mail from the email sender’s domain. It is absolutely necessary to have SPF entry in DNS zone - otherwise your email will end-up in SPAM folder or even will be discarded....

July 23, 2023 · 5 min · Bart Prokop

PEN fault device

Disclaimer Electricity can kill or severely injure people and cause damage to property. I’m not a qualified electrician. I accept no responsibility for anything you decide to do. I’m just posting this up for information only. This page reflects my own research and experiments. In most jurisdictions you must be a competent person to carry electrical work. If you are not confident in what you are doing, you should employ the services of a qualified electrician....

May 6, 2023 · 6 min · Bart Prokop

Kopia remote backup

I lease Kimsufi dedicated server. It has large enough HDD to use it as offsite backup. https://kopia.io/ is the new backup tool, I want to try out. Prerequisites Remote server I want a new kopia regular user account that will allow SFTP access and will be locked otherwise. The scponly pseudo-shell can be used to achieve that. sudo pacman -S scponly sudo useradd -m -s /usr/bin/scponly kopia sudo mkdir /home/kopia/.ssh sudo chown kopia:kopia /home/kopia/....

December 27, 2022 · 2 min · Bart Prokop

OCI Setup

Oracle provides generous “free-tier” for its CLoud. This article describes the basic setup to maximize OCI “always free” tier. Prerequisites Run Oracle Cloud Shell and generate SSH keypair, that you will use with OCI instances. Here come surprise… My preferred key type is ed25519, it is the most recommended public-key algorithm available today! But if I try to create it, the following error is presented: ED25519 keys are not allowed in FIPS mode Apparently, Oracle is part of FIPS / NIST security theater (or NSA collaborator) and follows non-sense compliance rules by letter and spirit, ignoring this [https://csrc....

December 27, 2022 · 6 min · Bart Prokop

Media Player for Christmas

This Christmas decided to gift to my significant other a Game Of Thrones Blu Ray set (4k, UHD - 33 discs total). This post cover all what I needed to do to get it watched on living room’s TV (which is LG OLED). The first obvious obstacle has ocurred - I do not have the Blu Ray Player (not even mentioning UHD Blue Ray). It is 2022/23 and physical media are slightly a thing of past....

December 25, 2022 · 1 min · Bart Prokop