Home Server on No Subject - nosubject.io -

Switching the Raspberry Pi WordPress Site to Hugo

Thu, 09 Jul 2026 00:00:00 +0900

I already wrote about migrating the article data from WordPress to Hugo in Migrating from WordPress to Hugo.

This article covers the next step: switching the actual WordPress environment running on my Raspberry Pi to Hugo.

Even when I built the environment myself, I forget the details after enough time passes. Looking back at my older notes, this site was not running WordPress directly on the host with PHP and MySQL. It was running through Docker.

Notes on Blocking Attacks Against Raspberry Pi SSH with Fail2Ban

Sun, 01 Sep 2024 23:16:45 +0900

Overview

I expose the SSH Server port so I can access my Raspberry Pi remotely, and when I looked at the logs, I saw that it was being attacked fairly often. Password login is disabled, so I could ignore it, but it felt unpleasant, so I configured Fail2Ban.

$ journalctl _COMM=sshd | grep "Invalid user"
Aug 11 09:23:53 pi4col sshd[1105]: Invalid user blank from 183.67.43.194 port 44130
Aug 11 09:44:30 pi4col sshd[1118]: Invalid user pi from 199.76.38.123 port 36840
Aug 11 09:44:30 pi4col sshd[1119]: Invalid user pi from 199.76.38.123 port 36844
Aug 11 09:45:33 pi4col sshd[1122]: Invalid user Admin from 138.75.192.20 port 52632
Aug 11 10:07:10 pi4col sshd[1197]: Invalid user blank from 61.83.254.100 port 38377
Aug 11 10:26:35 pi4col sshd[1268]: Invalid user nosubject from 152.136.41.3 port 55696
Aug 11 10:28:44 pi4col sshd[1270]: Invalid user admin from 121.7.26.195 port 50064
Aug 11 10:49:04 pi4col sshd[1282]: Invalid user babs from 81.70.27.122 port 45998
Aug 11 10:49:11 pi4col sshd[1284]: Invalid user zookeeper from 46.191.141.152 port 35283
...

What Is Fail2Ban?

Fail2Ban is a tool that checks access logs and bans addresses that repeatedly produce login errors, such as from brute-force attacks. This time, I use it to ban unauthorized SSH access.

[Raspberry Pi 4] USB Boot: Stop Using an SD Card and Boot from an SSD

Thu, 06 Jan 2022 17:12:07 +0900

This is a memo from migrating a Raspberry Pi web server that had been running from an SD card to an SSD with USB boot. I had written about something similar before; this time only the data-copying method is different. This procedure may be easier.
The steps are for Ubuntu, but I think almost the same method can be used with Raspberry Pi OS. This is amateur work, so follow it at your own risk if you use it as a reference.

[Raspberry Pi 4] Four-Channel Terrestrial Digital Recording Server on a Raspberry Pi: Docker + GPU Encoding Version

Sat, 18 Sep 2021 08:30:00 +0900

This is a memo for enabling hardware encoding in EPGStation running on a Raspberry Pi. It continues from the previous article, [Raspberry Pi 4] Four-Channel Terrestrial Digital Recording Server on Ubuntu with PX-Q1UD. Some parts still do not work perfectly, but the GPU appears to be usable, and it is mostly operational now.

This is amateur work, so follow it at your own risk if you use it as a reference.

[Raspberry Pi 4] Headless Install of 64-bit Raspberry Pi OS (No Monitor or Keyboard Needed)

Fri, 17 Sep 2021 00:24:18 +0900

I only recently noticed that Raspberry Pi OS has a 64-bit version, so I will install it on a Raspberry Pi 4. As usual, this assumes no keyboard, mouse, or display is connected to the Raspberry Pi.

Like when installing Ubuntu, this records the steps up to installing the OS and logging in from the host PC (Windows) over SSH. This time I use an SSD for storage instead of an SD card.

[Raspberry Pi 4] Install Docker on the 64-bit Version of Raspberry Pi OS

Tue, 14 Sep 2021 13:51:47 +0900

This is a memo. It is the same procedure as installing on Ubuntu. The repository URL is about the only difference.

Test Environment

Raspberry Pi 4, 8GB memory
*On this site, I use a SanDisk SSD and a Buffalo SSD for storage. (Reference: [Raspberry Pi 4] Change the Pi 4 Storage from an SD Card to an SSD)

[Raspberry Pi 4] Increase the Memory Allocated to the GPU

Thu, 09 Sep 2021 17:50:49 +0900

Overview

The Raspberry Pi GPU memory is shared with system memory.

I checked how to change the amount of memory allocated to the GPU.

Test Environment

Raspberry Pi 4 with 8GB RAM, running Ubuntu.

$ cat /proc/device-tree/model Raspberry Pi 4 Model B Rev 1.4

$ lsb_release -a No LSB modules are available. Distributor ID: Ubuntu Description: Ubuntu 21.04 Release: 21.04 Codename: hirsute

Configuration

Check the current GPU memory size. By default, the allocation to the GPU seems to be 76MB.
There is plenty of system memory available, so I will increase the GPU allocation.

Building a Compact Desktop PC with the Popular ASRock DeskMini Barebone Kit

Mon, 12 Jul 2021 19:19:26 +0900

Overview

I built a compact, quiet PC. I could have bought Dospara's mini Regulus II AR5, but I already had an OS and SSD on hand, and I was able to buy memory cheaply on Mercari, so this time I bought an ASRock DeskMini X300 barebone kit and assembled it myself.

The photos show the finished build. The front panel is just a little larger than an iPhone 8.

If you want something even more compact and low-power, ASUS's Mini PC PN51 looks good. If you do not want to build one yourself, I think buying a finished mini PC such as Dospara's mini Regulus is probably the way to go.

[Raspberry Pi 4] Four-Channel Simultaneous Terrestrial Digital TV Recording Server on Ubuntu with PX-Q1UD

Sat, 19 Jun 2021 00:21:28 +0900

These are notes. I tried something called a recording server. Since I already had a Docker environment, it was easy to create. I also tried hardware encoding, but it was not stable, so these notes only cover building the normal setup. This is amateur work, so if you use it as a reference, do so at your own risk.

Update: In a separate article, I wrote about operating it with H/W encoding.
[Raspberry Pi 4] [Redo] Four-channel simultaneous terrestrial digital TV recording server on Raspberry Pi

[Raspberry Pi 4] Install Docker on Ubuntu Server 21.04

Tue, 08 Jun 2021 02:10:55 +0900

This is a memo. Since Ubuntu Hirsute 21.04 is already installed on the Raspberry Pi, installing Docker only requires following the procedure on the official site.

Test Environment

Raspberry Pi 4, 4GB memory

Ubuntu Server 21.04

Install Docker

# 旧バージョン等のクリーンアップ
$ sudo apt-get remove docker docker-engine docker.io containerd runc

# Set up the repository
$ sudo apt-get update
$ sudo apt-get install -y 

apt-transport-https 

ca-certificates 

curl 

gnupg 

lsb-release



[Raspberry Pi 4] Headless Installation of Ubuntu Server 21.04 Over Wi-Fi Only (No Monitor or Keyboard) 🐣 Beginner-Friendly 🐣
Mon, 07 Jun 2021 11:48:41 +0900
I got a 4 GB memory version of the Raspberry Pi 4, so I tried a headless installation of Ubuntu Server 21.04. For now, I will record the steps from installing the OS to logging in by SSH from the host PC.
Environment Tested
Raspberry Pi 4, 4 GB memory
Transcend microSD 128GB










Write the Ubuntu Image to the SD Card
Prepare the environment on the host PC.
Write Ubuntu to the SD card from Windows, Mac, or Linux.


[Raspberry Pi] I Thought /var/log Was Safe on a Ramdisk, but Docker Logs Were Being Written to the SD Card
Tue, 23 Mar 2021 00:01:29 +0900
To extend the life of the SD card, I configured /var/log to live on a Ramdisk. But Docker logs are output to /var/lib/docker/containers, so of course that did nothing for Docker logs.
Test Environment
Raspberry Pi 4 (8GB RAM)
Ubuntu 20.10 64-bit
$ cat /etc/fstab
LABEL=writable / ext4 defaults 0 0
LABEL=system-boot /boot/firmware vfat defaults 0 1
tmpfs /tmp tmpfs defaults,size=128m 0 0
tmpfs /var/tmp tmpfs defaults,size=128m 0 0
tmpfs /var/log tmpfs defaults,size=64m 0 0
What I Changed
Change Docker's logging driver settings. Check the official site for details.
Reference: Configure logging drivers


[Raspberry Pi] After Setting Up a Ramdisk, nginx Stopped Starting, So I Handled It with rc-local
Fri, 19 Mar 2021 08:06:00 +0900
This is just about trying an earlier article, [Ubuntu] After Setting Up a Ramdisk on Raspberry Pi, nginx and MySQL Stopped Starting, So I Handled It with rc-local, on a Raspberry Pi 4 as well. These days MySQL runs in a Docker container, so the only target this time is /var/log/nginx.


[Raspberry Pi 4] Run WordPress with Docker
Sat, 13 Mar 2021 13:19:49 +0900
Overview
These are notes from setting up WordPress with Docker. Nginx is already running on the host side, and an SSL certificate has already been obtained, so WordPress will ride on that setup too.
Related Past Articles
Connect with PPPoE on Ubuntu 19.10 and open ports.
[RaspberryPi] I switched from Docomo Hikari to Nuro Hikari, so I stopped using PPPoE and changed to normal port forwarding
[Raspberry Pi 4] Headless installation of Ubuntu 20.10. How to install without a keyboard or display
[Raspberry Pi 4] Install Nginx and obtain an SSL server certificate from Let's Encrypt
[Raspberry Pi 4] Build a mail server with Docker. 
[Raspberry Pi 4] Run WordPress with Docker. ★ You are here
Environment Tested
Raspberry Pi 4 Ubuntu 20.10 (arm64)


[Raspberry Pi 4] Build a Mail Server (Postfix + Dovecot) with Docker
Tue, 02 Feb 2021 09:55:54 +0900
This time, I use Docker to start a mail server and handle the various settings around it.
Overview
I use Postfix and Dovecot for my home mail server, but when installed as native packages, the initial configuration is complicated. When rebuilding the server or moving it to another PC, I completely forget what was configured and how. On top of that, I also need to configure other tools such as spam countermeasures and Fail2Ban, so it is a real hassle. This time the goal is an easy installation using Docker.


[Raspberry Pi 4] Install Nginx and Obtain an SSL Server Certificate from Let's Encrypt
Sat, 23 Jan 2021 17:54:14 +0900
Overview
Since I installed Ubuntu 20.10 on a Raspberry Pi 4, I migrated the mail server and WordPress running on my current home server over to the Raspberry Pi. These are my notes.
Environment Tested
Raspberry Pi 4 Ubuntu 20.10 (arm64)
$ nginx -v
nginx version: nginx/1.18.0 (Ubuntu)
$ certbot --version
certbot 1.11.0
Prerequisites and Preparation
Complete the Ubuntu installation, PPPoE settings, and domain settings in advance. This is the same as what I did previously on the Pi 3, so I will omit the details.


[Raspberry Pi 4] Headless Installation of Ubuntu 20.10: Installing Without a Keyboard or Display
Tue, 12 Jan 2021 08:07:00 +0900
Overview
This is about installing Ubuntu 20.10 on a Raspberry Pi 4. I did not have a MicroHDMI cable, so I installed and performed the initial setup without connecting a keyboard or display.
I install Ubuntu and make it possible to log in by SSH from a PC, while using the Cloud-init (user-data) mechanism so that as little work as possible is needed after boot.
In a previous article, after installing and booting Ubuntu, various settings still had to be done. This procedure automates that part: [Raspberry Pi 3] Installing Ubuntu 18.04 LTS (no keyboard or display required)


[Raspberry Pi 3] Initial Ubuntu Settings on Raspberry Pi, Including How to Change the Hostname
Sun, 15 Mar 2020 00:27:03 +0900
A memo series for Raspberry Pi-related work. This continues the initial setup: changing the hostname, setting a static IP address, and creating a swap file.
Test Environment
Raspberry Pi 3
Ubuntu 18.04.04 LTS 32-bit
Change the Hostname
$ sudo hostnamectl set-hostname rpi3.nosubject.io
Configure a Static IP Address
I wrote about configuring this from a PC before booting in [Raspberry Pi 3] Installing Ubuntu 18.04 LTS (No Keyboard or Display Required), but if you are already logged in to Ubuntu, do the following.


[Raspberry Pi 3] How to Change Only the Ubuntu Username Without Changing the User ID (uid)
Sat, 14 Mar 2020 20:09:17 +0900
This continues from [Raspberry Pi 3] Installing Ubuntu 18.04 LTS (No Keyboard or Display Required).
Leaving the user and password as ubuntu/ubuntu is dangerous, so this is about changing them for now.
Creating a new user and then deleting the ubuntu user would be fine too, but I tried changing only the name while keeping uid=1000 and gid=1000.
Test Environment
Raspberry Pi 3
Ubuntu 18.04.04 LTS 32-bit
How to Do It
You need to log in as root before doing the work, so it may be a little more troublesome than adding a new user and deleting the ubuntu user.


[Raspberry Pi 3] Installing Ubuntu 18.04 LTS (No Keyboard or Display Required)
Sat, 14 Mar 2020 14:04:21 +0900
A memo from setting up a home server on a Raspberry Pi.
This covers installing Ubuntu on the Raspberry Pi and logging in from a PC over SSH.
Update: I wrote the memo from trying this on a Raspberry Pi 4 here.[Raspberry Pi 4] Headless Install of Ubuntu 20.10: How to Install Without a Keyboard or Display


Regularly Update Dynamic DNS for a Custom Domain Registered with Onamae.com from Ubuntu
Sat, 07 Dec 2019 16:05:27 +0900
I registered a domain with Onamae.com, so I set up DDNS to automatically register the IP address of my home server.
Configuration
Updating Onamae.com DDNS from a script
You can do this easily by borrowing the knowledge from the site above.
(I modified it a little for my own use.)

Set it in cron and you are done.
*/15 * * * * root /usr/local/bin/onamae.com_dns_update.py > /var/log/onamae_dns_update.log 2>&1 
Test Environment
Ubuntu 18.04
Raspberry Pi 3
Me
Thanks for the convenient script. It makes this very easy.


Firewall Settings on Ubuntu 19.10
Fri, 06 Dec 2019 21:14:37 +0900
Since the machine connects directly to an external network over PPPoE, I enable the firewall.
$ sudo ufw allow 80
$ sudo ufw allow 443
$ sudo ufw limit 22
$ sudo ufw enable
I exposed the web server and SSH. SSH password login was disabled beforehand.
/etc/ssh/sshd_config
PasswordAuthentication no
Me
Check the settings with an online nmap  site or similar.


Connect with PPPoE and Open Ports on Ubuntu 19.10
Fri, 06 Dec 2019 20:51:41 +0900
This is a memo from researching what to do when I wanted to run a home server in an environment with IPv6 but could not open arbitrary ports.
If you want to run a mail server, web server, or similar, the easiest approach was to create a separate PPPoE session and expose that.
Test Environment
docomo Hikari
Provider: GMO Tokutoku BB
HGW: PR-S300HI
Wi-Fi router: WXR-1750DHP2
OS: Ubuntu 19.10 EOAN 
$ cat /etc/lsb-release
DISTRIB_ID=Ubuntu
DISTRIB_RELEASE=19.10
DISTRIB_CODENAME=eoan
DISTRIB_DESCRIPTION="Ubuntu 19.10"
Install PPPoE
$ sudo apt-get install -y pppoe pppoeconf
Reading package lists... Done
Building dependency tree
Reading state information... Done
The following additional packages will be installed:
 ifupdown
Suggested packages:
 rdnssd xdialog
The following NEW packages will be installed:
 ifupdown pppoe pppoeconf
0 upgraded, 3 newly installed, 0 to remove and 1 not upgraded.
Need to get 149 kB of archives.
After this operation, 632 kB of additional disk space will be used.
Get:1 http://archive.ubuntu.com/ubuntu eoan/universe amd64 ifupdown amd64 0.8.35ubuntu1 [60.5 kB]
Get:2 http://archive.ubuntu.com/ubuntu eoan/universe amd64 pppoe amd64 3.12-1.2ubuntu2 [73.2 kB]
Get:3 http://archive.ubuntu.com/ubuntu eoan/universe amd64 pppoeconf all 1.21ubuntu1 [14.8 kB]
Fetched 149 kB in 2s (77.3 kB/s)
Selecting previously unselected package ifupdown.
(Reading database ... 155407 files and directories currently installed.)
Preparing to unpack .../ifupdown_0.8.35ubuntu1_amd64.deb ...
Unpacking ifupdown (0.8.35ubuntu1) ...
Selecting previously unselected package pppoe.
Preparing to unpack .../pppoe_3.12-1.2ubuntu2_amd64.deb ...
Unpacking pppoe (3.12-1.2ubuntu2) ...
Selecting previously unselected package pppoeconf.
Preparing to unpack .../pppoeconf_1.21ubuntu1_all.deb ...
Unpacking pppoeconf (1.21ubuntu1) ...
Setting up pppoe (3.12-1.2ubuntu2) ...
Setting up ifupdown (0.8.35ubuntu1) ...
Creating /etc/network/interfaces.
Created symlink /etc/systemd/system/multi-user.target.wants/networking.service → /lib/systemd/system/networking.service.
Created symlink /etc/systemd/system/network-online.target.wants/networking.service → /lib/systemd/system/networking.service.
Setting up pppoeconf (1.21ubuntu1) ...
Processing triggers for man-db (2.8.7-3) ...
Processing triggers for mime-support (3.63ubuntu1) ...
Processing triggers for systemd (242-7ubuntu3.2) ...

Configure and Connect
With one command, it handles connection settings, the first connection attempt, and automatic execution on reboot.