Debian integration exapmles
Homepage: https://sourceforge.net/u/seperepelov/profile/ Email: <seperepelov@mail.ru>
Local repositories on a KVM-based virtual server
Following article describes creating a KVM-based virtual Debian 10 repository inside organization's LAN. This repository contains mirrors of official repository, security updates one and personal repository with some custom packages and packages not present in official repositories (VirtualBox for example). The article describes creating such virtual machine step by step including not only the main services but protection the system too (access control lists, nftables firewall, systemd services automatic restart, nmap check, etc.).
In Russian kvm_reprepro_ru.pdf
In English kvm_reprepro_en.pdf
Laptop as highly protected WiFi router
Following article describes transformation of old laptop to a full-featured highly protected WiFi router inside LAN. Routing to Internet and organization's DMZ, traffic shaping, firewall protection, regular automatic WiFi password changing (with publishing the new password on laptop screen), DNS, SSH and NTP services are provided. Such router may be useful if you need to provide a WiFi network inside a room so that anybody in the room could connect to it whereas anybody outside the room would have big troubles with connection.
In Russian laptop_wifi_router_ru.pdf
In English laptop_wifi_router_en.pdf
Custom server for account department
- Following article describes creation of a custom server for a small account department. A wide set of features are provided by this server. The same time it plays roles of gateway, firewall, NAS (with RAID1), NTP, DNS and DHCP server, etc. Routing to Internet and organization's DMZ, traffic shaping, backup Internet connection through mobile network are provided too. Taking into account measures of protection the system itself and the network behind it is possible to say that this server provides everything needed for account department of the organization.
In Russian account_server_ru.pdf
In English account_server_en.pdf