Linux Server Admin with Fexingo: Sysadmin, Bash, and Server Engineering

In this episode of Linux Server Admin with Fexingo, Lucas and Luna dive into the practical side of using nftables, the modern replacement for iptables. They walk through a real-world scenario of setting up a firewall for a small web server, covering the syntax, the key differences from iptables, and common pitfalls. Lucas shares a tip about using nftables' built-in sets to efficiently manage IP lists, and Luna asks how to test the rules without locking yourself out. They also touch on the importance of logging and the future of nftables. A must-listen for any sysadmin looking to modernize their server's firewall.

#LinuxServerAdmin #nftables #Firewall #Sysadmin #ServerSecurity #NetworkSecurity #LinuxNetworking #iptables #ServerSetup #TechTips #LinuxAdministration #ServerFirewall #NetworkConfiguration #LucasAndLuna #FexingoBusiness #BusinessPodcast #Linux #ServerEngineering

Keep every episode free: buymeacoffee.com/fexingo

In this episode, Lucas and Luna dive into turning a Linux server into a high-performance router using nftables. They explain the core concepts of packet filtering, network address translation, and routing, then walk through a practical setup with a simple dual-NIC configuration. You'll learn how to configure nftables to forward traffic, set up NAT for internet sharing, and secure the router with basic firewall rules. They also discuss performance tuning tips, such as enabling IP forwarding and tweaking sysctl parameters, and touch on troubleshooting common issues. Whether you're building a home router or a small office gateway, this episode gives you the concrete steps and mental models to get it right. No prior nftables experience needed, but basic Linux command-line comfort is assumed.

#Linux #ServerAdmin #nftables #Router #Firewall #NAT #Sysadmin #Networking #LinuxServer #IPTables #NetworkSecurity #Tech #FexingoBusiness #BusinessPodcast #ServerEngineering #Bash #Cisco #OpenSource

Keep every episode free: buymeacoffee.com/fexingo

In this episode of Linux Server Admin, Lucas and Luna dig into the practical side of backup strategy for Linux servers. They break down the 3-2-1 rule, compare full, incremental, and differential backups, and walk through a real-world scenario using rsync and a LUKS-encrypted external drive. They also discuss testing restores, common pitfalls like silent corruption and backup drift, and share a quick tip on automating backups with systemd timer units. If you've ever wondered whether your backups would survive a real disaster, this episode is for you. The conversation stays grounded in day-to-day sysadmin reality, with concrete commands and thinking that you can apply immediately.

#LinuxServerAdmin #BackupStrategy #Rsync #LUKS #SystemdTimer #Sysadmin #ServerBackup #3-2-1Rule #DisasterRecovery #DataIntegrity #Automation #Technology #FexingoBusiness #BusinessPodcast #Linux #DevOps #Infrastructure #BackupTesting

Keep every episode free: buymeacoffee.com/fexingo

Episode 146 of Linux Server Admin dives into SSH jump hosts, a practical way to secure multi-server environments. Lucas and Luna walk through the setup of a bastion host, showing how to use ProxyJump to route connections safely, along with key-based authentication and agent forwarding done right. They ground the discussion in a real-world scenario of managing a small fleet of servers, and they share the exact ssh config entries that make it work. Along the way they touch on common pitfalls like agent forwarding risks and the importance of keeping the jump host itself locked down. If you've ever wanted to stop exposing every server to the internet and instead funnel access through one hardened entry point, this episode gives you the blueprint, plus a few commands you can start using today. It's a practical, hands-on look at a core sysadmin skill that scales from a few boxes to a data center.

#SSHJumpHost #BastionHost #LinuxServer #Sysadmin #ServerSecurity #SSHProxyJump #SecureAccess #SSHConfig #KeyAuthentication #AgentForwarding #NetworkSecurity #LinuxBasics #ServerManagement #Technology #FexingoBusiness #BusinessPodcast #LinuxAdmin #InfrastructureSecurity

Keep every episode free: buymeacoffee.com/fexingo

In this episode of Linux Server Admin, Lucas and Luna explore the power of auditd, the Linux audit daemon, for tracking security-relevant events on your servers. They walk through a practical setup for monitoring file access and user commands, explaining how audit rules work, how to interpret audit logs, and how to use ausearch and aureport to make sense of the data. They also discuss performance considerations and common pitfalls, such as log rotation and rule ordering. By the end, you'll know how to configure auditd to catch suspicious activity on your own systems, and why it beats simple logging for security monitoring. Whether you're hardening a production server or just curious about Linux internals, this episode gives you concrete steps to get started with auditd today.

#LinuxServerAdmin #Auditd #LinuxSecurity #Sysadmin #ServerEngineering #LinuxAudit #SecurityMonitoring #FileIntegrity #Ausearch #Aureport #LinuxLogs #ServerHardening #Bash #Technology #FexingoBusiness #BusinessPodcast #CyberSecurity #LinuxAdmin

Keep every episode free: buymeacoffee.com/fexingo

In this episode of Linux Server Admin, Lucas and Luna dive into the often-overlooked world of I/O schedulers on modern NVMe drives. With the rise of NVMe storage, traditional schedulers like CFQ and even deadline are becoming less relevant, and the choice between none, mq-deadline, and bfq can have a real impact on latency and throughput. Lucas shares a production story from a busy PostgreSQL server where switching from the default none scheduler to mq-deadline reduced write latency by 15 percent under heavy load. Luna asks the practical questions: how do you check your current scheduler, and when should you bother changing it? They walk through the sysfs interface, explain the difference between single-queue and multi-queue schedulers, and give concrete tuning advice for NVMe-backed servers. If you've ever wondered why your NVMe drive feels laggy under load or why some workloads prefer bfq, this episode gives you the tools to diagnose and tune. It's a focused, practical look at a topic that's easy to skip but hard to ignore when you're chasing that last bit of performance.

#LinuxServerAdmin #IOScheduler #NVMe #Sysadmin #Bash #ServerEngineering #PerformanceTuning #Storage #Kernel #PostgreSQL #MqDeadline #Bfq #Technology #FexingoBusiness #BusinessPodcast #Linux #ServerTuning #StorageLatency

Keep every episode free: buymeacoffee.com/fexingo

In this episode of Linux Server Admin, Lucas and Luna dive into the practical differences between cron and systemd timer units for scheduling jobs on modern Linux servers. They explore why timers offer better logging, dependency handling, and reliability, using a real-world scenario of a backup job that failed silently under cron. The discussion covers how to configure a simple timer unit, trigger jobs based on service activity, and leverage the built-in integration with journald and systemd's resource management. If you've ever wondered whether it's time to move your scheduled tasks away from cron, this episode gives you concrete arguments and a clear migration path. By the end, you'll know exactly when a timer unit is the right tool and how to make the switch without breaking your existing workflows.

#Systemd #Cron #LinuxServer #Scheduling #Sysadmin #Bash #ServerEngineering #Technology #Backup #Journald #Timers #Automation #DevOps #LinuxAdmin #SystemdTimers #FexingoBusiness #BusinessPodcast #ServerAdministration

Keep every episode free: buymeacoffee.com/fexingo

In this episode, Lucas and Luna dive into the practical use of Linux namespaces for process isolation, going beyond the usual container talk. They focus on the mount namespace and how it can prevent a runaway process from clobbering your server's filesystem. You'll hear how a simple unshare command can give you a sandboxed view of the filesystem, and why pivot_root is the missing piece for truly isolated environments. They also touch on how systemd uses namespaces under the hood for service hardening, and how you can test it all safely on a throwaway VM. If you've ever wanted to understand namespaces without the container abstraction, this episode gives you a concrete, hands-on starting point.

#LinuxNamespaces #ProcessIsolation #MountNamespace #UnshareCommand #PivotRoot #SystemdHardening #ServerAdmin #Sysadmin #Bash #Technology #FexingoBusiness #BusinessPodcast #LinuxServer #ContainerSecurity #DevOps #Virtualization #Kernel #CommandLine

Keep every episode free: buymeacoffee.com/fexingo

In this episode of Linux Server Admin, Lucas and Luna dive into disk quotas on Linux servers, focusing on XFS quota management. They explain the difference between user and project quotas, how to set up quota accounting on XFS, and practical tools like xfs_quota and quotaon. They also discuss common pitfalls like inode limits, journaled quotas, and how to avoid performance hits. Perfect for sysadmins managing multi-user servers or shared hosting environments. The conversation includes real-world examples and a quick look at why project quotas are underused. Plus, a candid moment about how listener support keeps the podcast ad-free.

#LinuxServer #DiskQuotas #XFS #Sysadmin #ServerEngineering #Bash #StorageManagement #QuotaTools #ProjectQuotas #UserQuotas #InodeLimits #Filesystem #Technology #Business #FexingoBusiness #BusinessPodcast #ServerAdmin #LinuxTips

Keep every episode free: buymeacoffee.com/fexingo

In this episode of Linux Server Admin, Lucas and Luna dive into the often-overlooked but critical task of keeping server clocks accurate using Chrony. They walk through real-world failures caused by time drift — from authentication errors to broken log sequencing — and explain how Chrony addresses the shortcomings of older NTP implementations. You'll learn basic configuration with pool and iburst directives, how to verify synchronization with chronyc sources, and how to set up authentication with symmetric keys. Whether you run a single server or a fleet, this episode gives you the practical steps to ensure your systems agree on what time it is.

#Chrony #NTP #TimeSync #LinuxServerAdmin #ServerClocks #Sysadmin #ServerEngineering #Bash #NetworkTime #TimeSynchronization #Infrastructure #DevOps #Linux #Chronyc #ServerSecurity #Technology #FexingoBusiness #BusinessPodcast

Keep every episode free: buymeacoffee.com/fexingo