Introduction

In the age of increasing cyber threats and privacy concerns, it has become crucial for individuals to secure their home networks. While most people rely on default routers provided by their Internet Service Providers (ISPs), these devices often lack essential features and may not receive timely updates. In this blog post, we will explore two powerful open-source firewall solutions, pfSense and OPNsense, and the compelling reasons to use them to fortify your home network’s security.

1. Comprehensive Security Features

Unlike default routers, pfSense and OPNsense are specialized firewall distributions based on FreeBSD. They offer a plethora of advanced security features that go beyond the capabilities of regular consumer-grade routers. These include stateful packet filtering, intrusion detection/prevention, Virtual Private Network (VPN) support, DNS filtering, and more. By employing these robust features, users can effectively protect their networks from malicious activities and unauthorized access.

2. Regular Updates and Security Patches

One of the most significant drawbacks of using default routers is the infrequent or non-existent software updates. Cyber threats evolve rapidly, and without timely updates, your router becomes vulnerable to new exploits and vulnerabilities. Both pfSense and OPNsense have active communities that continuously work on improving the security and stability of their platforms. Regular updates ensure that your firewall remains up-to-date with the latest security patches, safeguarding your home network from potential threats.

3. Flexibility and Customization

One of the key advantages of open-source solutions like pfSense and OPNsense is their high level of flexibility and customization options. Users can tailor their firewall settings and rules according to their specific needs, creating a personalized security infrastructure. Whether it’s setting up VLANs for segmented networks, creating access controls, or integrating third-party plugins, the ability to customize your firewall enhances the overall security posture of your home network.

4. Enhanced VPN Capabilities

In today’s interconnected world, the need for secure remote access is more prominent than ever. Both pfSense and OPNsense offer powerful VPN capabilities, allowing users to establish secure connections between remote devices and the home network. Whether you need to access your home resources while traveling or want to encrypt your online activities, these firewall solutions provide a reliable and straightforward VPN setup.

5. Community Support and Documentation

pfSense and OPNsense boast vibrant communities that actively contribute to user forums, offer advice, and share their expertise. If you encounter any issues or need guidance on setting up specific features, chances are you’ll find a wealth of information through their community support channels. Furthermore, both projects maintain extensive documentation, making it easier for users to understand and utilize the vast array of features these firewalls offer.

6. Transparency and Open-Source Assurance

Default routers typically run on closed-source firmware, making it challenging for users to scrutinize the code for potential security flaws or backdoors. In contrast, pfSense and OPNsense are open-source projects, which means their source code is publicly available for review by anyone. This level of transparency fosters trust among users, ensuring that there are no hidden vulnerabilities or privacy concerns within the firewall software.

Conclusion

In conclusion, upgrading from a default router to a robust and feature-rich firewall like pfSense or OPNsense can significantly enhance your home network’s security. By leveraging their comprehensive security features, receiving regular updates, and enjoying the flexibility of customization, you can better protect your network and data from potential cyber threats. Additionally, the strong community support, extensive documentation, and open-source assurance offer an added layer of confidence in the security of these firewall solutions. So, why settle for an outdated and vulnerable router when you can empower your home network with the cutting-edge protection of pfSense or OPNsense?

Step 1: Create Docker Volume for Yacht

To create a Docker volume for Yacht, use the following command:

docker volume create yacht

Step 2: Install and Run Yacht

To install Yacht and run it in Docker, execute the following command:

docker run -d -p 8000:8000 \
  -v /var/run/docker.sock:/var/run/docker.sock \
  -v yacht:/config \
  selfhostedpro/yacht

Explanation of options used:

• -d: Run the container in the background (detached mode).
• -p 8000:8000: Map port 8000 from the container to port 8000 on the host system. This allows you to access Yacht’s web interface at http://localhost:8000.
• -v /var/run/docker.sock:/var/run/docker.sock: Mount the Docker socket inside the container to allow Yacht to interact with Docker on the host system.
• -v yacht:/config: Create a Docker volume named “yacht” and mount it to the “/config” directory inside the container. This volume allows you to persist Yacht’s configuration and data.

Step 3: First Login

Once Yacht is up and running, you can log in to the web interface using the following credentials:

• URL: http://localhost:8000
• Username: admin@yacht.local
• Password: pass

Step 4: Import Template (Optional)

If you wish to import a template for pre-configured containers, use the following URL:
Template URL: https://raw.githubusercontent.com/SelfhostedPro/selfhosted_templates/yacht/Template/template.json

Conclusion:
By following these steps, you have successfully installed Yacht, a self-hosted web interface for managing Docker containers. You can now access the Yacht web interface and start managing your Docker containers with ease.

Enjoy the benefits of Yacht’s user-friendly interface and simplified Docker container management! Happy sailing!

Introduction:
WordPress is a popular content management system for building websites and blogs. In this guide, we’ll show you how to set up WordPress with MariaDB (MySQL database) using Docker, allowing you to easily create and manage your website.

Step 1: Install and Run MariaDB Container

To install MariaDB and run it in Docker, use the following command:

docker run -e MYSQL_ROOT_PASSWORD=wordpress -e MYSQL_DATABASE=wordpress \
  --name wordpressdb -v mariadb_data:/var/lib/mysql -d mariadb:latest

Explanation of options used:

• -e MYSQL_ROOT_PASSWORD=wordpress: Set the root password for the MariaDB database to “wordpress”.
• -e MYSQL_DATABASE=wordpress: Create a database named “wordpress” for the WordPress installation.
• --name wordpressdb: Assign the name “wordpressdb” to the MariaDB container for easy management.
• -v mariadb_data:/var/lib/mysql: Create a Docker volume named “mariadb_data” and mount it to the “/var/lib/mysql” directory inside the container. This volume allows you to persist MariaDB’s data.

Step 2: Install and Run WordPress Container

To install WordPress and run it in Docker, use the following command:

docker run -e WORDPRESS_DB_USER=root -e WORDPRESS_DB_PASSWORD=wordpress \
  --name wordpress --link wordpressdb:mysql -p 80:80 -v wordpress_data:/var/www/html -d wordpress:latest

Explanation of options used:

• -e WORDPRESS_DB_USER=root: Set the WordPress database user to “root” (linked to the MariaDB container).
• -e WORDPRESS_DB_PASSWORD=wordpress: Set the WordPress database password to “wordpress” (linked to the MariaDB container).
• --name wordpress: Assign the name “wordpress” to the WordPress container for easy management.
• --link wordpressdb:mysql: Link the WordPress container to the MariaDB container, allowing WordPress to connect to the database.
• -p 80:80: Map port 80 from the container to port 80 on the host system. This allows you to access WordPress at http://localhost.
• -v wordpress_data:/var/www/html: Create a Docker volume named “wordpress_data” and mount it to the “/var/www/html” directory inside the container. This volume allows you to persist WordPress’s data.

Conclusion:
By following these steps and using Docker, you have successfully set up WordPress with MariaDB on your system. You can now access and manage your WordPress website by visiting http://localhost in your web browser.

Enjoy creating and managing your WordPress website with ease using Docker! Happy blogging!

Introduction:
Unattended Upgrades is a package that automates the process of installing security updates on your Raspberry Pi. In this guide, we’ll walk you through the steps to install and configure Unattended Upgrades, ensuring your Raspberry Pi stays up-to-date with the latest patches automatically.

Step 1: Install Unattended Upgrades

To install Unattended Upgrades on your Raspberry Pi, update the package list and install it with the following commands:

sudo apt-get update
sudo apt-get install unattended-upgrades -y

Step 2: Test Unattended Upgrades (Dry Run)

Before enabling Unattended Upgrades, it’s a good idea to test it with a dry run to see what updates would be applied. Use the following command:

sudo unattended-upgrade -d -v --dry-run

This will show you the pending updates without actually installing them.

Step 3: Enable Unattended Upgrades

To enable Unattended Upgrades, use the following command to reconfigure the package with priority set to low:

sudo dpkg-reconfigure --priority=low unattended-upgrades

Follow the prompts to enable automatic updates.

Step 4: Information

With Unattended Upgrades enabled, your Raspberry Pi will now automatically download and install security updates, keeping your system protected with the latest patches.

Conclusion:
By following these steps, you have successfully installed and configured Unattended Upgrades on your Raspberry Pi. This means your Raspberry Pi will now automatically update itself with security patches, ensuring that it remains secure and up-to-date without manual intervention.

Enjoy the peace of mind knowing that your Raspberry Pi is being kept secure and up-to-date automatically! Happy computing!

Introduction:
Searxng is a privacy-friendly and open-source metasearch engine that aggregates search results from various sources. In this guide, we’ll walk you through the process of installing Searxng on an ARM64 architecture using Docker, allowing you to set up your own search engine.

Step 1: Install Searxng with Docker

To install Searxng and run it in Docker on ARM64, execute the following command:

docker run -d -p 8888:8080 \
  --name=searxng \
  -v "searxng_data:/etc/searx" \
  -v "searxng_data:/etc/searxng" \
  -e "BASE_URL=http://192.168.0.224:8888" \
  -e "INSTANCE_NAME=searxng" \
  searxng/searxng:latest

Explanation of options used:

• -d: Run the container in the background (detached mode).
• -p 8888:8080: Map port 8080 from the container to port 8888 on the host system. This allows you to access Searxng’s web interface at http://localhost:8888.
• --name=searxng: Assign the name “searxng” to the container for easy management.
• -v "searxng_data:/etc/searx": Create a Docker volume named “searxng_data” and mount it to the “/etc/searx” directory inside the container. This volume allows you to persist Searxng’s data and configurations.
• -e "BASE_URL=http://192.168.0.224:8888": Set the base URL for the Searxng instance. Replace “192.168.0.224” with the IP address or domain name of your server.
• -e "INSTANCE_NAME=searxng": Specify a custom name for the Searxng instance.

Step 2: Access Searxng Web Interface

Once the Searxng container is up and running, open a web browser and navigate to http://localhost:8888. You will be directed to Searxng’s web interface, where you can perform searches and explore the search engine’s features.

Conclusion:
By following these steps and using Docker, you have successfully installed Searxng on an ARM64 architecture. You now have your own private search engine, Searxng, up and running, allowing you to search the web with enhanced privacy and control.

Enjoy the benefits of Searxng and have fun searching! Happy exploring!

Introduction:
Prometheus is a widely-used open-source monitoring and alerting toolkit. In this guide, we’ll show you how to set up Prometheus using Docker, allowing you to monitor your applications and systems efficiently.

Step 1: Install Prometheus with Docker

To install Prometheus and run it in Docker, execute the following command:

docker run --restart always -d --name prometheus -p 9090:9090 -v prometheus_data:/prometheus prom/prometheus

Explanation of options used:

• --restart always: Configure the Prometheus container to restart automatically if it stops unexpectedly.
• -d: Run the container in the background (detached mode).
• --name prometheus: Assign the name “prometheus” to the container for easy management.
• -p 9090:9090: Map port 9090 from the container to port 9090 on the host system. This allows you to access Prometheus’s web interface at http://localhost:9090.
• -v prometheus_data:/prometheus: Create a Docker volume named “prometheus_data” and mount it to the “/prometheus” directory inside the container. This volume allows you to persist Prometheus’s data and configurations.

Step 2: Access Prometheus Web Interface

Once the Prometheus container is up and running, open a web browser and navigate to http://localhost:9090. You will be directed to Prometheus’s web interface, where you can explore and configure the monitoring system.

Step 3: Add Prometheus Data Source

To use Prometheus as a data source in visualization tools like Grafana, follow these steps:

1. Open Grafana’s web interface, which should be available at http://192.168.0.223:3000 (assuming Grafana is running on port 3000).
2. Log in to Grafana using your credentials.
3. Click on the “Configuration” (gear) icon in the sidebar and select “Data Sources.”
4. Click on “Add data source.”
5. Choose “Prometheus” from the list of available data sources.
6. In the “HTTP” section, set the “URL” field to http://localhost:9090 or the IP address of your Prometheus instance.
7. Optionally, provide a custom name for the data source in the “Name” field.
8. Click on “Save & Test” to save the data source configuration.

Congratulations! You have successfully set up Prometheus with Docker and added it as a data source in Grafana. You can now use Prometheus to monitor your applications and systems, as well as create dashboards and visualizations in Grafana.

Enjoy the power and flexibility of Prometheus for monitoring and alerting in your Docker environment! Happy monitoring!

Introduction:
Adding a power-on/off button to your Raspberry Pi 4B can provide a convenient way to manage the device’s power state. In this guide, we’ll show you how to configure a power-on/off button using the GPIO pins on the Raspberry Pi 4B.

Step 1: Edit the /boot/config.txt File

To configure the power-on/off button, you need to edit the /boot/config.txt file on your Raspberry Pi. Open the file using the following command:

sudo vi /boot/config.txt

Step 2: Enable Shutdown Functionality

To enable the shutdown functionality of the power button (green LED turns off when shutting down), add the following line to the config file:

dtoverlay=gpio-shutdown

Step 3: Enable Power-Off Functionality

To enable the power-off functionality of the power button (both green and red LEDs turn off when powered off), add the following lines to the config file:

dtoverlay=gpio-shutdown,gpio_pin=3
dtoverlay=gpio-poweroff,gpio_pin=24,active_low=0

Explanation of options used:

• dtoverlay=gpio-shutdown: Enables the GPIO shutdown overlay to manage the shutdown functionality.
• gpio_pin=3: Specifies the GPIO pin (BCM numbering) to use for the shutdown function (default is GPIO3).
• dtoverlay=gpio-poweroff: Enables the GPIO power-off overlay to manage the power-off functionality.
• gpio_pin=24: Specifies the GPIO pin (BCM numbering) to use for the power-off function (default is GPIO24).
• active_low=0: Sets the active_low parameter to 0, which means the GPIO pin is active high (low signal triggers the action).

Step 4: Save and Reboot

Save the changes to the /boot/config.txt file, and then reboot your Raspberry Pi for the changes to take effect:

sudo reboot

Conclusion:
By following these steps and editing the /boot/config.txt file, you can easily configure a power-on/off button for your Raspberry Pi 4B. The power button will provide you with convenient control over the device’s power state, allowing for a smooth and efficient experience in managing your Raspberry Pi.

For more detailed information and the source of this guide, you can visit the provided link: Reviving Borkin Power On/Off Button for the Raspberry Pi 4B.

Introduction:
Portainer Business Edition offers advanced features and enterprise-grade capabilities for Docker container management. In this guide, we’ll walk you through the installation process for Portainer Business Edition using Docker.

Step 1: Stop Existing Portainer Container (Optional)

If you have an existing Portainer container that you want to replace, you can stop it using the following command:

docker stop portainer

Step 2: Create Docker Volume for Portainer Data

Create a Docker volume to store Portainer’s data persistently:

docker volume create portainer_data

Step 3: Install Portainer Business Edition

Run the Portainer Business Edition container with the following command:

docker run -d -p 9000:9000 \
  --name=portainer \
  --restart=always \
  --pull=always \
  -v /var/run/docker.sock:/var/run/docker.sock \
  -v portainer_data:/data \
  portainer/portainer-ee:latest

Explanation of options used:

• -d: Run the container in the background (detached mode).
• -p 9000:9000: Map port 9000 from the container to port 9000 on the host system. This allows you to access Portainer’s web interface at http://localhost:9000.
• --name=portainer: Assign the name “portainer” to the container for easy management.
• --restart=always: Configure the container to automatically restart if it stops unexpectedly.
• --pull=always: Always pull the latest version of the Portainer Business Edition image before starting the container.
• -v /var/run/docker.sock:/var/run/docker.sock: Mount the Docker socket on the host to the container. This allows Portainer to interact with the Docker engine on the host.
• -v portainer_data:/data: Mount the Docker volume “portainer_data” to the “/data” directory inside the container. This volume stores Portainer’s data, ensuring persistence across container restarts.
• portainer/portainer-ee:latest: Specifies the Docker image to use for running Portainer Business Edition.

Step 4: Access Portainer Web Interface

Once the Portainer container is up and running, open a web browser and navigate to http://localhost:9000. You will be directed to Portainer’s web interface. Follow the setup wizard to create an admin user and configure Portainer.

Congratulations! You have successfully installed Portainer Business Edition using Docker. With Portainer Business Edition’s advanced features, you can now manage your Docker containers and services with enhanced capabilities and support.

Experience the full potential of Docker management with Portainer Business Edition! Happy containerizing!

Introduction:
Portainer is a powerful open-source container management tool that simplifies Docker deployment and administration. In this guide, we’ll walk you through the installation process for Portainer Community Edition using Docker.

Step 1: Stop Existing Portainer Container (Optional)

If you have an existing Portainer container that you want to replace, you can stop it using the following command:

docker stop portainer

Step 2: Create Docker Volume for Portainer Data

Create a Docker volume to store Portainer’s data persistently:

docker volume create portainer_data

Step 3: Install Portainer Community Edition

Run the Portainer Community Edition container with the following command:

docker run -d -p 9000:9000 \
  --name=portainer \
  --restart=always \
  -v /var/run/docker.sock:/var/run/docker.sock \
  -v portainer_data:/data \
  portainer/portainer-ce

Explanation of options used:

• -d: Run the container in the background (detached mode).
• -p 9000:9000: Map port 9000 from the container to port 9000 on the host system. This allows you to access Portainer’s web interface at http://localhost:9000.
• --name=portainer: Assign the name “portainer” to the container for easy management.
• --restart=always: Configure the container to automatically restart if it stops unexpectedly.
• -v /var/run/docker.sock:/var/run/docker.sock: Mount the Docker socket on the host to the container. This allows Portainer to interact with the Docker engine on the host.
• -v portainer_data:/data: Mount the Docker volume “portainer_data” to the “/data” directory inside the container. This volume stores Portainer’s data, ensuring persistence across container restarts.
• portainer/portainer-ce: Specifies the Docker image to use for running Portainer Community Edition.

Step 4: Access Portainer Web Interface

Once the Portainer container is up and running, open a web browser and navigate to http://localhost:9000. You will be directed to Portainer’s web interface. Follow the setup wizard to create an admin user and configure Portainer.

Congratulations! You have successfully installed Portainer Community Edition using Docker. You can now start managing your Docker containers and services through the intuitive Portainer interface.

Enjoy the simplicity and power of Docker management with Portainer Community Edition! Happy containerizing!

Introduction:
Pi-hole is a popular network-level ad blocker that helps you block advertisements at the DNS level. With Docker, you can easily deploy Pi-hole on your network for ad-free browsing on all your connected devices. In this guide, we’ll walk you through the process of setting up Pi-hole using Docker.

Step 1: Install Pi-hole with Docker

To install Pi-hole and run it in Docker, execute the following command:

docker run -d --name=pihole \
  -e TZ=Europe/Copenhagen \
  -e WEBPASSWORD=xxxxxxx \
  -e SERVERIP=192.168.0.224 \
  -e FTLCONF_LOCAL_IPV4=192.168.0.227 \
  -v pihole_data:/etc/pihole \
  -v pihole_dnsmasq:/etc/dnsmasq.d \
  -p 81:80 \
  -p 53:53/tcp \
  -p 53:53/udp \
  --net=host \
  --restart=unless-stopped \
  pihole/pihole:latest

Explanation of options used:

• -d: Run the container in the background (detached mode).
• --name=pihole: Assign the name “pihole” to the container for easy management.
• -e TZ=Europe/Copenhagen: Set the timezone to “Europe/Copenhagen” inside the container.
• -e WEBPASSWORD=xxxxxxx: Set a custom web admin password for Pi-hole. Replace “xxxxxxx” with your desired password.
• -e SERVERIP=192.168.0.224: Set the IP address of the Docker host (Raspberry Pi) where Pi-hole will run. Replace “192.168.0.224” with your Raspberry Pi’s IP address.
• -v pihole_data:/etc/pihole: Create a Docker volume named “pihole_data” and mount it to the “/etc/pihole” directory inside the container. This volume allows you to persist Pi-hole’s data and configurations.
• -v pihole_dnsmasq:/etc/dnsmasq.d: Create a Docker volume named “pihole_dnsmasq” and mount it to the “/etc/dnsmasq.d” directory inside the container. This volume is used to customize DNS settings and blocklists.
• -p 81:80: Map port 80 from the container to port 81 on the host system. This allows you to access Pi-hole’s web interface at http://localhost:81.
• -p 53:53/tcp -p 53:53/udp: Map port 53 from the container to both TCP and UDP port 53 on the host system. This enables Pi-hole to handle DNS requests. Or “–net=host \” for local network install.
• --restart=unless-stopped: Configure the container to automatically restart if it stops unexpectedly.
• pihole/pihole:v5.6: Specifies the Docker image to use for running Pi-hole (version 5.6).

Step 2: Access Pi-hole Web Interface

Once the Pi-hole container is up and running, open a web browser and navigate to http://localhost:81. You will be directed to Pi-hole’s web interface. Use the custom web admin password you set in the Docker command to log in.

Congratulations! You have successfully deployed Pi-hole on your network using Docker. Your network devices will now benefit from network-wide ad blocking, providing a seamless and ad-free browsing experience.

Remember to configure your devices to use your Raspberry Pi’s IP address (192.168.0.224) as the DNS server to take advantage of Pi-hole’s ad-blocking capabilities.

Enjoy ad-free browsing and network-level ad blocking with Pi-hole and Docker! Happy browsing!