Linux Server Admin with Fexingo: Sysadmin, Bash, and Server Engineering

In episode 89 of Linux Server Admin with Fexingo, Lucas and Luna dive into load balancing Linux servers using HAProxy. They walk through a concrete setup: a pair of web servers behind a single HAProxy frontend, with health checks and round-robin distribution. The conversation covers why you might choose HAProxy over nginx for layer 4 balancing, how to configure backend pools with check intervals, and a quick demo of ensuring zero-downtime deployments by toggling servers in the stats socket. Real-world use cases like balancing a WordPress cluster or an API gateway are discussed. By the end, you'll know exactly how to set up a simple two-node HAProxy load balancer and monitor it from the CLI. No fluff, just practical sysadmin knowledge.

#LinuxServerAdmin #HAProxy #LoadBalancing #Sysadmin #Bash #ServerEngineering #Technology #Podcast #FexingoBusiness #Linux #Networking #HighAvailability #Layer4 #RoundRobin #HealthChecks #StatsSocket #DevOps #ServerAdmin

Keep every episode free: buymeacoffee.com/fexingo

In this episode of Linux Server Admin with Fexingo, Lucas and Luna dive into strace — the powerful Linux system call tracer. They explain what strace does, walk through a real-world example of diagnosing a slow web server using strace -c, and cover practical flags like -f for tracing child processes and -e for filtering specific syscalls. They also discuss common pitfalls, such as performance impact in production, and how to combine strace with lsof or tcpdump for deeper analysis. By the end, you'll have a concrete debugging workflow you can use today.

#Linux #Sysadmin #Strace #Troubleshooting #SystemCalls #Debugging #ServerAdmin #Bash #Performance #Technology #Podcast #FexingoBusiness #BusinessPodcast #Engineering #OpenSource #LinuxTips #CommandLine #SysadminLife

Keep every episode free: buymeacoffee.com/fexingo

In this episode of Linux Server Admin with Fexingo, Lucas and Luna dive into TCP Wrappers — a classic host-based access control system for Linux servers. They explain how TCP Wrappers work with the libwrap library, how to configure /etc/hosts.allow and /etc/hosts.deny to permit or deny connections by IP address or hostname, and the security implications for services like SSH and vsftpd. Lucas shares a real-world scenario from a university server environment where TCP Wrappers prevented an automated scanning attack. The hosts compare TCP Wrappers to modern alternatives like nftables and SELinux, and discuss why it's still relevant for legacy systems and simple perimeter control. Listeners will walk away understanding how to implement a fast, lightweight access control layer on their Linux servers today.

#LinuxServerAdmin #TCPWrappers #HostBasedAccessControl #LinuxSecurity #Sysadmin #libwrap #hostsAllow #hostsDeny #AccessControl #SSHSecurity #ServerHardening #NetworkSecurity #LinuxServer #Bash #ServerEngineering #FexingoBusiness #TechPodcast #Technology

Keep every episode free: buymeacoffee.com/fexingo

Episode 86 of Linux Server Admin with Fexingo dives into disk quotas on Linux servers. Lucas and Luna walk through setting up user and group quotas with the classic quota tools, configuring quota on an ext4 filesystem, using repquota and warnquota for monitoring and enforcement, and best practices for multi-user environments. They discuss real-world tradeoffs like performance overhead, NFS compatibility, and when to use filesystem-level quotas vs. container-level limits. Perfect for sysadmins managing shared server storage.

#LinuxServerAdmin #DiskQuotas #Sysadmin #Bash #ServerEngineering #Technology #Linux #Ext4 #QuotaTools #Repquota #Warnquota #StorageManagement #MultiUserServer #Fexingo #FexingoBusiness #Podcast #LinuxSysadmin #ServerStorage

Keep every episode free: buymeacoffee.com/fexingo

In this episode of Linux Server Admin with Fexingo, Lucas and Luna dive into systemd-journald as a centralized logging solution. They explain how to configure journald to forward logs to a remote server using systemd-journal-upload, enabling secure, encrypted log aggregation across your fleet without third-party tools. The hosts walk through setting up the receiving server with systemd-journal-remote, configuring TLS certificates with Let's Encrypt, and practical tips for log retention and storage. They also discuss common pitfalls like certificate renewal and network reliability. By the end, you'll know how to build a lightweight, built-in central logging system using only systemd components.

#Linux #Systemd #Journald #CentralizedLogging #SystemdJournalUpload #SystemdJournalRemote #LogManagement #ServerAdministration #Sysadmin #DevOps #TechPodcast #Technology #FexingoBusiness #BusinessPodcast #LogForwarding #TLS #LetEncrypt #Infrastructure

Keep every episode free: buymeacoffee.com/fexingo

In this episode of Linux Server Admin with Fexingo, Lucas and Luna dive into logrotate, the indispensable tool for managing server log files. They explain why log rotation prevents disk-full disasters, break down the configuration syntax with a real-world example from an Nginx server handling 50,000 requests per day, and show how to set compression, retention policies, and post-rotation scripts. Lucas shares a tip for testing logrotate with debug mode, and Luna warns about the pitfalls of missing copytruncate for busy services. Whether you're a sysadmin managing hundreds of servers or just running a single Raspberry Pi, this episode gives you a concrete, repeatable method to keep logs under control without losing historical data.

#Logrotate #LinuxServerAdmin #Sysadmin #LogManagement #Nginx #ServerOps #Bash #Linux #TechPodcast #FexingoBusiness #BusinessPodcast #ServerEngineering #LogRotation #Compression #DevOps #Automation #DiskManagement #SystemAdministration

Keep every episode free: buymeacoffee.com/fexingo

In this episode of Linux Server Admin with Fexingo, Lucas and Luna dive into Tailscale as a modern solution for secure remote access to Linux servers without traditional VPN complexity. They walk through setup on Ubuntu 24.04, discuss subnet routing for reaching devices behind a server, and compare Tailscale's approach to WireGuard and OpenVPN. The conversation covers authentication via SSO providers, ACLs for access control, and practical considerations like exit nodes and MagicDNS. By the end, you'll understand how Tailscale simplifies zero-trust networking for sysadmins. The episode also includes a brief, sincere moment about listener support keeping the show ad-free.

#Tailscale #WireGuard #OpenVPN #LinuxServer #RemoteAccess #VPN #ZeroTrust #Networking #Ubuntu #SSO #ACL #Sysadmin #MagicDNS #SubnetRouting #ExitNode #Technology #FexingoBusiness #BusinessPodcast

Keep every episode free: buymeacoffee.com/fexingo

Learn how to use Falco, the open-source runtime security tool, to detect threats on Linux servers in real time. Lucas and Luna walk through installing Falco, writing custom rules, and interpreting alerts to catch suspicious behavior like reverse shells or privilege escalation. They use a concrete example of a compromised web server to show how Falco's output can be integrated with systemd journal for centralized alerting. This episode is for sysadmins who want proactive security monitoring without a full SIEM. Perfect for anyone running Linux in production and wanting to detect intrusions faster.

#Falco #LinuxSecurity #RuntimeSecurity #ThreatDetection #Sysadmin #ServerSecurity #OpenSource #CNCF #Containers #IntrusionDetection #LinuxServer #InformationSecurity #DevSecOps #SecurityMonitoring #Technology #FexingoBusiness #BusinessPodcast #Podcast

Keep every episode free: buymeacoffee.com/fexingo

In episode 81 of Linux Server Admin with Fexingo, Lucas and Luna explore Logwatch, the lightweight log analysis tool that sends daily server reports via email. They walk through installation, basic configuration, service-specific filtering for SSH, Apache, and fail2ban, and tuning report verbosity. Lucas shares a real-world example where Logwatch caught a brute-force attack on a staging server before it escalated. They also discuss alternatives like lnav and Graylog, and when Logwatch makes sense versus a full SIEM. Perfect for sysadmins who want a quick daily health check without deploying heavy monitoring.

#Logwatch #LinuxServer #Sysadmin #LogAnalysis #ServerMonitoring #DailyReport #Security #BruteForce #OpenSource #Bash #Technology #Podcast #FexingoBusiness #BusinessPodcast #ServerAdmin #Linux #FailedSSH #LogManagement

Keep every episode free: buymeacoffee.com/fexingo

In this episode, Lucas and Luna dive into HashiCorp Vault for Linux server secret management. They cover initializing and unsealing Vault, setting up a secret backend for database credentials, and integrating with applications via the Vault Agent. Using a concrete example of rotating PostgreSQL credentials, they explain why Vault is essential for modern server security — especially in multi-server environments. They also touch on the trade-offs versus simpler tools like encrypted config files, and share a practical workflow for dynamic secrets. Whether you're a sysadmin looking to eliminate hardcoded credentials or just exploring secret management, this episode gives you a clear, actionable starting point.

#HashicorpVault #LinuxServerAdmin #DevOps #SRE #SecretsManagement #CyberSecurity #PostgreSQL #SystemAdministration #Technology #ServerSecurity #DynamicSecrets #InfrastructureAsCode #VaultAgent #DatabaseCredentials #Linux #Sysadmin #FexingoBusiness #BusinessPodcast

Keep every episode free: buymeacoffee.com/fexingo