new notes
This commit is contained in:
@@ -4,7 +4,16 @@ $i\hbar \frac{\partial}{\partial t} \Large{|}\psi \Large{>} = \hat{H} \Large{|}\
|
||||
|
||||
## Timestamps
|
||||
|
||||
- 08:00 - 08:15: Neue OS einrichten, Teste gebrauchte tools auf Linux Client
|
||||
- 08:00 - 08:30: Neue OS einrichten, Teste gebrauchte tools auf Linux Client
|
||||
- 08:30 - 08:45: Mail an Phytron
|
||||
- 08:45 - 09:00: Plan fuer OPNsense Schulungen
|
||||
- 09:00 - 10:00: Phytron: Telefonat mit Herr Herrgesell
|
||||
- 10:00 - 10:30: Unterstuetzung Philipp zu DNS und VPN Thema bei der glt Netz der TUM
|
||||
- 10:30 - 11:00: Meeting mit Max zu M365 bei KWA
|
||||
- 11:00 - 12:30: Nextcloud LDAP
|
||||
- 12:30 - 13:30: Pause
|
||||
- 13:30 - 14:30: Gitlab LDAP
|
||||
- 16:30 - 17:30: Gitlab LDAP aktivieren und konfigurieren
|
||||
|
||||
## Tuesday
|
||||
|
||||
|
||||
101
diary/2025-03-06.md
Normal file
101
diary/2025-03-06.md
Normal file
@@ -0,0 +1,101 @@
|
||||
$i\hbar \frac{\partial}{\partial t} \Large{|}\psi \Large{>} = \hat{H} \Large{|}\psi \Large{>}$
|
||||
|
||||
|
||||
|
||||
## Timestamps
|
||||
|
||||
- 08:15 - 09:00: Fuer Markus versuchen BeA.exe Installation zu automatisieren, [x] 0815-0830: Backup in Sophos Firewal bei Trudering einspielen
|
||||
- 09:00 - 09:15: Pause
|
||||
- 09:15 - 09:45: [x] Firewall pruefen, Bakcup wurde eingespielt, Admin Passwort von Web-UI stimmt nicht
|
||||
- 09:45 - 10:00: Markus unterstuetzen bei Installation
|
||||
- 10:00 - 10:30: Phytron - design und it-glue doku anpassen
|
||||
- 10:30 - 11:00: Recherche: oauth2 zu office365 via postfix
|
||||
- 11:00 - 11:30: opnsense - schulung planen und termin aufstellen - notizen dazu erstellen,
|
||||
- 11:30 - 13:00: Pause
|
||||
- 13:00 - 13:30: Privat (linkedin, roundmail, linuxfoundation acc)
|
||||
- 13:30 - 14:00: Firewall Uebergabe an Michael, stunden eintragen
|
||||
- 14:00 - 14:30: OPNsense Schulung planen und Termin rausschicken
|
||||
- 14:30 - 15:00: Research Vectorwork 2023 problem [1.](https://appletoolbox.com/app-is-damaged-cannot-be-opened-mac/),[2](https://iboysoft.com/tips/app-is-damaged-and-cannot-be-opened.html)
|
||||
- 15:00 - 15:30: TUM - Firewall advanced threate protection hat Caddy markiert. Ueberpruefe Server und lasse lynis drueber laufen
|
||||
- 15:30 - 16:00: Hetzner PVE Server full boot partition - try to remove old kernels manually... do not find enough info
|
||||
- 16:00 - 16:15: OPNsense Firewallregel erstellung besprechen in Anlehung an Problem bei der Radiochemie
|
||||
- 16:30 - 17:00:
|
||||
|
||||
## Wednesday
|
||||
|
||||
- 08:00 - 08:30: Neue OS einrichten, Teste gebrauchte tools auf Linux Client
|
||||
- 08:30 - 08:45: [x] Mail an Phytron
|
||||
- 08:45 - 09:00: Plan fuer OPNsense Schulungen
|
||||
- 09:00 - 10:00: Phytron: Telefonat mit Herr Herrgesell
|
||||
- 10:00 - 10:30: Unterstuetzung Philipp zu DNS und VPN Thema bei der glt Netz der TUM
|
||||
- 10:30 - 11:00: Meeting mit Max zu M365 bei KWA
|
||||
- 11:00 - 12:30: Nextcloud LDAP
|
||||
- 12:30 - 13:30: Pause
|
||||
- 13:30 - 14:30: Gitlab LDAP
|
||||
- 16:30 - 17:30: Sophos XGS fuer Trudering: Ersteinrichtung und Firmware aktuallisieren
|
||||
|
||||
## Tuesday
|
||||
|
||||
- 08:00 - 08:30: Linux Server updaten und rebooten, welche schon laenger als 90 Tage Laufzeit hatten, Ticketpflege
|
||||
- 08:30 - 09:00: Telfonat mit Dominik Thoma
|
||||
- 09:15 - 09:45: Telefonat mit Sebastian und Dominik: Punkte notieren und Max deshalb schreiben, Versuchen Herrn Fuechsle zu erreichen, Mail verfassen an Herrn Kurz wegen Phishing Mail
|
||||
- 09:45 - 10:15: [x] Juri Telefonat: Outlook einrichten
|
||||
- 10:15 - 10:30: Mit Patryk Muell entsorgen und Labor etwas aufraeumen
|
||||
- 10:30 - 11:00: Aldi
|
||||
- 11:00 - 11:45: Pause
|
||||
- 11:45 - 14:15: VZ iso installation weiter machen
|
||||
- 14:15 - 15:30: Phytron VM erstellen fuer Gitlab Instanz
|
||||
- 15:30 - 15:45: NeoSphere: Firewall anschauen weil eine Cluster Node down ist; versuche noden zu pingen (ueber vpn) und versuche noden ueber web zu erreichen, nicht moeglich
|
||||
- 15:45 - 16:00: Phytron weiter machen
|
||||
- 16:00 - 16:30: Kommunikation mit Martin
|
||||
- 16:30 - 17:00: Gitlab aufsetzen, installation, passwort aendern von root, it-glue anpassen. Fortsetzung: <https://docs.gitlab.com/omnibus/installation/>
|
||||
|
||||
## todo
|
||||
|
||||
- [ ] smtp relay - oauth2: <https://github.com/tarickb/sasl-xoauth2>
|
||||
- [ ] herr fuechsle wegen homepage (kwa/ssr)
|
||||
- [ ] discopharma kontakt
|
||||
- [ ] vz iso weitermachen
|
||||
|
||||
- [ ] bind/named anleitung schreiben; named slave instanz aufsetzen
|
||||
|
||||
- [ ] radiochemie - irgendwie http challenge automatisieren
|
||||
- [ ] verbraucherzentrale cybercns ueberpruefung - kw ab dem 16.01 wegen baldiger sicherheitspruefung
|
||||
|
||||
### Today
|
||||
|
||||
### General
|
||||
|
||||
- [ ] plan for beta automatic os deployment/windows 10 to 11 upgrade
|
||||
|
||||
- [ ] mailstore update ssr/kwa
|
||||
- [=] filewave - integrate new admin user - integrated in filewave - need to be tested and then deployed on all macs
|
||||
- [ ] kwa/ssr snmp karten fuer usv
|
||||
- [ ] update filewave admin und central
|
||||
|
||||
### SBX
|
||||
|
||||
- [ ] check if possible to monitor vsphere passwd expiration
|
||||
- [ ] create obsidian templates (Meetings, People, )
|
||||
- [ ] raci matrix - plan fuer monitoring und automation (pxe boot; win autoconfig; test server for ad; test firewalls; services; vlan std im buero mit Ordnung; pikvm fuer einfachere installation)
|
||||
- [ ] sbx - opsreportcad summary for action plan
|
||||
- [ ] sbx - disney workshop - planung
|
||||
|
||||
- [ ] fuege bharchitekten zu connectsecure hinzu
|
||||
- [ ] erstelle connectsecure report fuer grasslfing
|
||||
- [ ] cybercns bei heilmaier
|
||||
|
||||
- [ ] Fuer Synology Monitoring smtp einrichten wegen HyperBackups
|
||||
|
||||
#### OPNsense
|
||||
|
||||
1. check franke rieger firewall setup
|
||||
2. replicate config on opncentral (IDS/IPS, OpenVPN, Web Proxy, antivirus, acme ground {needs specific manual how to setup on spot}, ...)
|
||||
3. test management via opncentral
|
||||
4. write manual for on-boarding
|
||||
- setup wan manually
|
||||
- couple to opncentral
|
||||
- send generic config via opncentral
|
||||
- use manual for missing specific configs
|
||||
- check workings of everything
|
||||
|
||||
109
diary/2025-03-07.md
Normal file
109
diary/2025-03-07.md
Normal file
@@ -0,0 +1,109 @@
|
||||
$i\hbar \frac{\partial}{\partial t} \Large{|}\psi \Large{>} = \hat{H} \Large{|}\psi \Large{>}$
|
||||
|
||||
|
||||
|
||||
## Timestamps
|
||||
|
||||
- 08:30 - 09:00: Ankunft;, pxe boot auf pve aufsetzen; sbx it-glue sortieren und archivieren; pve.lab.softbox.net einrichten, pxe aufsetzen und testen (fail)
|
||||
- 09:00 - 09:30: Debug pxe boot fail, probiere efi und legacy boot aus, efi geht nicht, legacy klappt, installiere testweise rocky linux
|
||||
- 09:30 - 11:00: Pruefe Ninja Link fuer die VZ, neu erzeugter link identisch, gehe mit micahel iso installation durch, test ninja installation klappt, teste aenderung des computernamens und sync durch ninja, bespreche vorgehen mit hannah, fange rezept liste an zu schreiben,
|
||||
- 11:00 - 12:00: Pause
|
||||
- 12:30 - 13:00: VZ usb sticks bestellen (20x), besprechung mit michael, teste ninja installation
|
||||
- 12:30 - 13:00: OPNsense Cluster mit CARP, docs.opnsense.org lesen,
|
||||
|
||||
## Thursday
|
||||
|
||||
- 08:15 - 09:00: Fuer Markus versuchen BeA.exe Installation zu automatisieren, [x] 0815-0830: Backup in Sophos Firewal bei Trudering einspielen
|
||||
- 09:00 - 09:15: Pause
|
||||
- 09:15 - 09:45: [x] Firewall pruefen, Bakcup wurde eingespielt, Admin Passwort von Web-UI stimmt nicht
|
||||
- 09:45 - 10:00: Markus unterstuetzen bei Installation
|
||||
- 10:00 - 10:30: Phytron - design und it-glue doku anpassen
|
||||
- 10:30 - 11:00: Recherche: oauth2 zu office365 via postfix
|
||||
- 11:00 - 11:30: opnsense - schulung planen und termin aufstellen - notizen dazu erstellen,
|
||||
- 11:30 - 13:00: Pause
|
||||
- 13:00 - 13:30: Privat (linkedin, roundmail, linuxfoundation acc)
|
||||
- 13:30 - 14:00: Firewall Uebergabe an Michael, stunden eintragen
|
||||
- 14:00 - 14:30: OPNsense Schulung planen und Termin rausschicken
|
||||
- 14:30 - 15:00: Research Vectorwork 2023 problem [1.](https://appletoolbox.com/app-is-damaged-cannot-be-opened-mac/),[2](https://iboysoft.com/tips/app-is-damaged-and-cannot-be-opened.html)
|
||||
- 15:00 - 15:30: TUM - Firewall advanced threate protection hat Caddy markiert. Ueberpruefe Server und lasse lynis drueber laufen
|
||||
- 15:30 - 16:00: Hetzner PVE Server full boot partition - try to remove old kernels manually... do not find enough info
|
||||
- 16:00 - 16:15: OPNsense Firewallregel erstellung besprechen in Anlehung an Problem bei der Radiochemie
|
||||
- 16:30 - 17:00:
|
||||
|
||||
## Wednesday
|
||||
|
||||
- 08:00 - 08:30: Neue OS einrichten, Teste gebrauchte tools auf Linux Client
|
||||
- 08:30 - 08:45: [x] Mail an Phytron
|
||||
- 08:45 - 09:00: Plan fuer OPNsense Schulungen
|
||||
- 09:00 - 10:00: Phytron: Telefonat mit Herr Herrgesell
|
||||
- 10:00 - 10:30: Unterstuetzung Philipp zu DNS und VPN Thema bei der glt Netz der TUM
|
||||
- 10:30 - 11:00: Meeting mit Max zu M365 bei KWA
|
||||
- 11:00 - 12:30: Nextcloud LDAP
|
||||
- 12:30 - 13:30: Pause
|
||||
- 13:30 - 14:30: Gitlab LDAP
|
||||
- 16:30 - 17:30: Sophos XGS fuer Trudering: Ersteinrichtung und Firmware aktuallisieren
|
||||
|
||||
## Tuesday
|
||||
|
||||
- 08:00 - 08:30: Linux Server updaten und rebooten, welche schon laenger als 90 Tage Laufzeit hatten, Ticketpflege
|
||||
- 08:30 - 09:00: Telfonat mit Dominik Thoma
|
||||
- 09:15 - 09:45: Telefonat mit Sebastian und Dominik: Punkte notieren und Max deshalb schreiben, Versuchen Herrn Fuechsle zu erreichen, Mail verfassen an Herrn Kurz wegen Phishing Mail
|
||||
- 09:45 - 10:15: [x] Juri Telefonat: Outlook einrichten
|
||||
- 10:15 - 10:30: Mit Patryk Muell entsorgen und Labor etwas aufraeumen
|
||||
- 10:30 - 11:00: Aldi
|
||||
- 11:00 - 11:45: Pause
|
||||
- 11:45 - 14:15: VZ iso installation weiter machen
|
||||
- 14:15 - 15:30: Phytron VM erstellen fuer Gitlab Instanz
|
||||
- 15:30 - 15:45: NeoSphere: Firewall anschauen weil eine Cluster Node down ist; versuche noden zu pingen (ueber vpn) und versuche noden ueber web zu erreichen, nicht moeglich
|
||||
- 15:45 - 16:00: Phytron weiter machen
|
||||
- 16:00 - 16:30: Kommunikation mit Martin
|
||||
- 16:30 - 17:00: Gitlab aufsetzen, installation, passwort aendern von root, it-glue anpassen. Fortsetzung: <https://docs.gitlab.com/omnibus/installation/>
|
||||
|
||||
## todo
|
||||
|
||||
- [ ] smtp relay - oauth2: <https://github.com/tarickb/sasl-xoauth2>
|
||||
- [ ] herr fuechsle wegen homepage (kwa/ssr)
|
||||
- [ ] vz iso weitermachen
|
||||
|
||||
- [ ] bind/named anleitung schreiben; named slave instanz aufsetzen
|
||||
|
||||
- [ ] radiochemie - irgendwie http challenge automatisieren
|
||||
- [ ] verbraucherzentrale cybercns ueberpruefung - kw ab dem 16.01 wegen baldiger sicherheitspruefung
|
||||
|
||||
### Today
|
||||
|
||||
### General
|
||||
|
||||
- [ ] plan for beta automatic os deployment/windows 10 to 11 upgrade
|
||||
|
||||
- [ ] mailstore update ssr/kwa
|
||||
- [=] filewave - integrate new admin user - integrated in filewave - need to be tested and then deployed on all macs
|
||||
- [ ] kwa/ssr snmp karten fuer usv
|
||||
- [ ] update filewave admin und central
|
||||
|
||||
### SBX
|
||||
|
||||
- [ ] check if possible to monitor vsphere passwd expiration
|
||||
- [ ] create obsidian templates (Meetings, People, )
|
||||
- [ ] raci matrix - plan fuer monitoring und automation (pxe boot; win autoconfig; test server for ad; test firewalls; services; vlan std im buero mit Ordnung; pikvm fuer einfachere installation)
|
||||
- [ ] sbx - opsreportcad summary for action plan
|
||||
- [ ] sbx - disney workshop - planung
|
||||
|
||||
- [ ] fuege bharchitekten zu connectsecure hinzu
|
||||
- [ ] erstelle connectsecure report fuer grasslfing
|
||||
- [ ] cybercns bei heilmaier
|
||||
|
||||
- [ ] Fuer Synology Monitoring smtp einrichten wegen HyperBackups
|
||||
|
||||
#### OPNsense
|
||||
|
||||
1. check franke rieger firewall setup
|
||||
2. replicate config on opncentral (IDS/IPS, OpenVPN, Web Proxy, antivirus, acme ground {needs specific manual how to setup on spot}, ...)
|
||||
3. test management via opncentral
|
||||
4. write manual for on-boarding
|
||||
- setup wan manually
|
||||
- couple to opncentral
|
||||
- send generic config via opncentral
|
||||
- use manual for missing specific configs
|
||||
- check workings of everything
|
||||
|
||||
66
diary/2025-03-10.md
Normal file
66
diary/2025-03-10.md
Normal file
@@ -0,0 +1,66 @@
|
||||
$i\hbar \frac{\partial}{\partial t} \Large{|}\psi \Large{>} = \hat{H} \Large{|}\psi \Large{>}$
|
||||
|
||||
|
||||
|
||||
## Timestamps
|
||||
|
||||
- 08:45 - 09:30: Ticketpflege
|
||||
- 09:30 - 10:00: Recherche Hardware fuer OPNsense Cluster
|
||||
- 10:00 - 10:30: Studium: Security Zones und Spamhaus DROP fuer OPNsense
|
||||
- 10:30 - 11:00: Telefonat mit Marko: Ninja Installtion auf Mac Book
|
||||
- 11:00 - 12:00: Discopharma: Metabase compose file schrieben, setze teste vm auf, installiere docker und security features, instalilere postgres und metabase via docker compose, metabase erstkonfiguration
|
||||
- 12:00 - 13:00: Pause
|
||||
- 13:30 - 14:15: Bind dns in lab aufsetzen
|
||||
- 14:15: - 14:45: Metabase https via nginx/traefik/or something different??
|
||||
- 14:45 - 16:45: Anleitung verfassen fuer NeoSphere: Qumulus und Ice Installation
|
||||
- 16:45 - 17:00: Zeiten eintragen
|
||||
|
||||
## todo
|
||||
|
||||
- [ ] teste discopharma docker installation von metabase
|
||||
- [ ] smtp relay - oauth2: <https://github.com/tarickb/sasl-xoauth2>
|
||||
- [ ] herr fuechsle wegen homepage (kwa/ssr)
|
||||
- [ ] vz iso weitermachen
|
||||
|
||||
- [ ] bind/named anleitung schreiben; named slave instanz aufsetzen
|
||||
|
||||
- [ ] radiochemie - irgendwie http challenge automatisieren
|
||||
- [ ] verbraucherzentrale cybercns ueberpruefung - kw ab dem 16.01 wegen baldiger sicherheitspruefung
|
||||
|
||||
### Today
|
||||
|
||||
### General
|
||||
|
||||
- [ ] plan for beta automatic os deployment/windows 10 to 11 upgrade
|
||||
|
||||
- [ ] mailstore update ssr/kwa
|
||||
- [=] filewave - integrate new admin user - integrated in filewave - need to be tested and then deployed on all macs
|
||||
- [ ] kwa/ssr snmp karten fuer usv
|
||||
- [ ] update filewave admin und central
|
||||
|
||||
### SBX
|
||||
|
||||
- [ ] check if possible to monitor vsphere passwd expiration
|
||||
- [ ] create obsidian templates (Meetings, People, )
|
||||
- [ ] raci matrix - plan fuer monitoring und automation (pxe boot; win autoconfig; test server for ad; test firewalls; services; vlan std im buero mit Ordnung; pikvm fuer einfachere installation)
|
||||
- [ ] sbx - opsreportcad summary for action plan
|
||||
- [ ] sbx - disney workshop - planung
|
||||
|
||||
- [ ] fuege bharchitekten zu connectsecure hinzu
|
||||
- [ ] erstelle connectsecure report fuer grasslfing
|
||||
- [ ] cybercns bei heilmaier
|
||||
|
||||
- [ ] Fuer Synology Monitoring smtp einrichten wegen HyperBackups
|
||||
|
||||
#### OPNsense
|
||||
|
||||
1. check franke rieger firewall setup
|
||||
2. replicate config on opncentral (IDS/IPS, OpenVPN, Web Proxy, antivirus, acme ground {needs specific manual how to setup on spot}, ...)
|
||||
3. test management via opncentral
|
||||
4. write manual for on-boarding
|
||||
- setup wan manually
|
||||
- couple to opncentral
|
||||
- send generic config via opncentral
|
||||
- use manual for missing specific configs
|
||||
- check workings of everything
|
||||
|
||||
81
diary/2025-03-11.md
Normal file
81
diary/2025-03-11.md
Normal file
@@ -0,0 +1,81 @@
|
||||
$i\hbar \frac{\partial}{\partial t} \Large{|}\psi \Large{>} = \hat{H} \Large{|}\psi \Large{>}$
|
||||
|
||||
|
||||
|
||||
## Timestamps
|
||||
|
||||
- 08:30 - 09:15: Emails pruefen, discopharma, anleitung lesen fuer metabase, separate datenbank besser in production
|
||||
- 09:15 - 09:30: Pause
|
||||
- 09:30 - 09:45: Mail an KWA zu Firewall Thema, Pruefe KWA wildcard cert: Expiration 20.04
|
||||
- 09:45 - 10:00: Beobachte mit Michael dir Installation bei der VZ von Martin
|
||||
- 10:00 - 10:30: Gespraech mit Thilo zu Anleitung zu Setup von Neosphre, Recherche zu wildcard Zertifikat bei KWA
|
||||
- 10:30 - 11:00: VZ beobachten mit Michael
|
||||
- 11:00 - 12:00: Meeting mit DiscoPharma
|
||||
- 12:00 - 12:30: Gespraech mit Oli zu KWA/SSR (Firewall, Telefonie, Lizenzen, MacBook Einrichtung)
|
||||
- 12:30 - 13:30: Pause
|
||||
- 13:30 - 17:00: DiscoPharam Netzwerkstruktur - write manual, import vm image to proxmox, disk.raw mounten und auslesen, db suchen und einbinden, leer, import disk in proxmox, no passwd
|
||||
|
||||
## Monday
|
||||
|
||||
- 08:45 - 09:30: Ticketpflege
|
||||
- 09:30 - 10:00: Recherche Hardware fuer OPNsense Cluster
|
||||
- 10:00 - 10:30: Studium: Security Zones und Spamhaus DROP fuer OPNsense
|
||||
- 10:30 - 11:00: Telefonat mit Marko: Ninja Installtion auf Mac Book
|
||||
- 11:00 - 12:00: Discopharma: Metabase compose file schrieben, setze teste vm auf, installiere docker und security features, instalilere postgres und metabase via docker compose, metabase erstkonfiguration
|
||||
- 12:00 - 13:00: Pause
|
||||
- 13:30 - 14:15: Bind dns in lab aufsetzen
|
||||
- 14:15: - 14:45: Metabase https via nginx/traefik/or something different??
|
||||
- 14:45 - 16:45: Anleitung verfassen fuer NeoSphere: Qumulus und Ice Installation
|
||||
- 16:45 - 17:00: Zeiten eintragen
|
||||
|
||||
## todo
|
||||
|
||||
- [ ] kwa/ssr - offene Rechungen zu MacBook Ersteinrichtungen
|
||||
- [ ] neosphere - ueberblick anleitung zum qumulus und dem computing cluster
|
||||
- [ ] teste discopharma docker installation von metabase
|
||||
- [ ] smtp relay - oauth2: <https://github.com/tarickb/sasl-xoauth2>
|
||||
- [ ] herr fuechsle wegen homepage (kwa/ssr)
|
||||
- [ ] vz iso weitermachen
|
||||
|
||||
- [ ] bind/named anleitung schreiben; named slave instanz aufsetzen
|
||||
|
||||
- [ ] radiochemie - irgendwie http challenge automatisieren
|
||||
- [ ] verbraucherzentrale cybercns ueberpruefung - kw ab dem 16.01 wegen baldiger sicherheitspruefung
|
||||
|
||||
### Today
|
||||
|
||||
### General
|
||||
|
||||
- [ ] plan for beta automatic os deployment/windows 10 to 11 upgrade
|
||||
|
||||
- [ ] mailstore update ssr/kwa
|
||||
- [=] filewave - integrate new admin user - integrated in filewave - need to be tested and then deployed on all macs
|
||||
- [ ] kwa/ssr snmp karten fuer usv
|
||||
- [ ] update filewave admin und central
|
||||
|
||||
### SBX
|
||||
|
||||
- [ ] check if possible to monitor vsphere passwd expiration
|
||||
- [ ] create obsidian templates (Meetings, People, )
|
||||
- [ ] raci matrix - plan fuer monitoring und automation (pxe boot; win autoconfig; test server for ad; test firewalls; services; vlan std im buero mit Ordnung; pikvm fuer einfachere installation)
|
||||
- [ ] sbx - opsreportcad summary for action plan
|
||||
- [ ] sbx - disney workshop - planung
|
||||
|
||||
- [ ] fuege bharchitekten zu connectsecure hinzu
|
||||
- [ ] erstelle connectsecure report fuer grasslfing
|
||||
- [ ] cybercns bei heilmaier
|
||||
|
||||
- [ ] Fuer Synology Monitoring smtp einrichten wegen HyperBackups
|
||||
|
||||
#### OPNsense
|
||||
|
||||
1. check franke rieger firewall setup
|
||||
2. replicate config on opncentral (IDS/IPS, OpenVPN, Web Proxy, antivirus, acme ground {needs specific manual how to setup on spot}, ...)
|
||||
3. test management via opncentral
|
||||
4. write manual for on-boarding
|
||||
- setup wan manually
|
||||
- couple to opncentral
|
||||
- send generic config via opncentral
|
||||
- use manual for missing specific configs
|
||||
- check workings of everything
|
||||
|
||||
88
diary/2025-03-12.md
Normal file
88
diary/2025-03-12.md
Normal file
@@ -0,0 +1,88 @@
|
||||
$i\hbar \frac{\partial}{\partial t} \Large{|}\psi \Large{>} = \hat{H} \Large{|}\psi \Large{>}$
|
||||
|
||||
|
||||
|
||||
## Timestamps
|
||||
|
||||
- 08:30 - 09:00: Disco check
|
||||
- 09:00 - 09:15: Telefonat mit Nina. T20250312.0008
|
||||
- 09:15 - 11:00: Discopharma. Versuche postgres database zu exportieren und in neue datenbank zu importieren
|
||||
- 11:00 - 12:00: Meeting mit Discopharam und Fortsetzung
|
||||
- 12:00 - 13:00: Pause
|
||||
- 13:00 - 13:30: Delete existing database entries on my own instance. Import the dump of the old ps database
|
||||
- 13:30 - 16:30: Setup new metabase isntance: pkgs to install, docker, setup docker; import old application database; test accessability of metabase; harden vm; setup unattended upgrades, allow in firewall communication between all VMs via private ips
|
||||
|
||||
## Wednesday
|
||||
|
||||
- 08:30 - 09:15: Emails pruefen, discopharma, anleitung lesen fuer metabase, separate datenbank besser in production
|
||||
- 09:15 - 09:30: Pause
|
||||
- 09:30 - 09:45: Mail an KWA zu Firewall Thema, Pruefe KWA wildcard cert: Expiration 20.04
|
||||
- 09:45 - 10:00: Beobachte mit Michael dir Installation bei der VZ von Martin
|
||||
- 10:00 - 10:30: Gespraech mit Thilo zu Anleitung zu Setup von Neosphre, Recherche zu wildcard Zertifikat bei KWA
|
||||
- 10:30 - 11:00: VZ beobachten mit Michael
|
||||
- 11:00 - 12:00: Meeting mit DiscoPharma
|
||||
- 12:00 - 12:30: Gespraech mit Oli zu KWA/SSR (Firewall, Telefonie, Lizenzen, MacBook Einrichtung)
|
||||
- 12:30 - 13:30: Pause
|
||||
- 13:30 - 17:00: DiscoPharam Netzwerkstruktur - write manual, import vm image to proxmox, disk.raw mounten und auslesen, db suchen und einbinden, leer, import disk in proxmox, no passwd
|
||||
|
||||
## Monday
|
||||
|
||||
- 10:30 - 11:00: Telefonat mit Marko: Ninja Installtion auf Mac Book
|
||||
- 11:00 - 12:00: Discopharma: Metabase compose file schrieben, setze teste vm auf, installiere docker und security features, instalilere postgres und metabase via docker compose, metabase erstkonfiguration
|
||||
|
||||
- 13:30 - 14:15: Bind dns in lab aufsetzen
|
||||
- 14:15: - 14:45: Metabase https via nginx/traefik/or something different??
|
||||
- 14:45 - 16:45: Anleitung verfassen fuer NeoSphere: Qumulus und Ice Installation
|
||||
- 16:45 - 17:00: Zeiten eintragen
|
||||
|
||||
## todo
|
||||
|
||||
- [ ] kwa/ssr - offene Rechungen zu MacBook Ersteinrichtungen
|
||||
- [ ] neosphere - ueberblick anleitung zum qumulus und dem computing cluster
|
||||
- [ ] teste discopharma docker installation von metabase
|
||||
- [ ] smtp relay - oauth2: <https://github.com/tarickb/sasl-xoauth2>
|
||||
- [ ] herr fuechsle wegen homepage (kwa/ssr)
|
||||
- [ ] vz iso weitermachen
|
||||
|
||||
- [ ] bind/named anleitung schreiben; named slave instanz aufsetzen
|
||||
|
||||
- [ ] radiochemie - irgendwie http challenge automatisieren
|
||||
- [ ] verbraucherzentrale cybercns ueberpruefung - kw ab dem 16.01 wegen baldiger sicherheitspruefung
|
||||
|
||||
### Today
|
||||
|
||||
### General
|
||||
|
||||
- [ ] plan for beta automatic os deployment/windows 10 to 11 upgrade
|
||||
|
||||
- [ ] mailstore update ssr/kwa
|
||||
- [=] filewave - integrate new admin user - integrated in filewave - need to be tested and then deployed on all macs
|
||||
- [ ] kwa/ssr snmp karten fuer usv
|
||||
- [ ] update filewave admin und central
|
||||
|
||||
### SBX
|
||||
|
||||
- [ ] check if possible to monitor vsphere passwd expiration
|
||||
- [ ] create obsidian templates (Meetings, People, )
|
||||
- [ ] raci matrix - plan fuer monitoring und automation (pxe boot; win autoconfig; test server for ad; test firewalls; services; vlan std im buero mit Ordnung; pikvm fuer einfachere installation)
|
||||
- [ ] sbx - opsreportcad summary for action plan
|
||||
- [ ] sbx - disney workshop - planung
|
||||
|
||||
- [ ] fuege bharchitekten zu connectsecure hinzu
|
||||
- [ ] erstelle connectsecure report fuer grasslfing
|
||||
- [ ] cybercns bei heilmaier
|
||||
|
||||
- [ ] Fuer Synology Monitoring smtp einrichten wegen HyperBackups
|
||||
|
||||
#### OPNsense
|
||||
|
||||
1. check franke rieger firewall setup
|
||||
2. replicate config on opncentral (IDS/IPS, OpenVPN, Web Proxy, antivirus, acme ground {needs specific manual how to setup on spot}, ...)
|
||||
3. test management via opncentral
|
||||
4. write manual for on-boarding
|
||||
- setup wan manually
|
||||
- couple to opncentral
|
||||
- send generic config via opncentral
|
||||
- use manual for missing specific configs
|
||||
- check workings of everything
|
||||
|
||||
98
diary/2025-03-13.md
Normal file
98
diary/2025-03-13.md
Normal file
@@ -0,0 +1,98 @@
|
||||
$i\hbar \frac{\partial}{\partial t} \Large{|}\psi \Large{>} = \hat{H} \Large{|}\psi \Large{>}$
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
## Timestamps
|
||||
|
||||
- 07:45 - 08:15: Ankunft, Privates: HomeLab DNS Infrastructure
|
||||
- 08:15 - 08:45: Ticketpflege, Traeumen
|
||||
- 09:00 - 09:45: Meeting mit KWA (max, nina, dominik, sebastian) zu M365 Migration
|
||||
- 09:45 - 10:00: Aftermeeting Meeting mit Max
|
||||
- 10:00 - 10:30: Meeting mit Thilo, Ticketpflege
|
||||
- 10:30 - 11:00: Meeting mit Patryk
|
||||
- 11:00 - 11:45: [x] Status Update mit DiscoPharma, Certs issue, Configure Firewall in Gcloud
|
||||
- 11:45 - 12:00: Kommunikation mit Holger zu neoSphere
|
||||
- 12:00 - 12:30: Racuhen, versuche bjoern zu erreichen
|
||||
- 12:30 - 12:45: Bond zwischen 2 25Gbit Interfaces am ubt02 konfigurieren und testen - netplan config setzen
|
||||
- 12:45 - 13:15: TUM mit philipp: smtp auf port 25 mit nextcloud geht nicht: config.php anpassen, sodass self signed allowed
|
||||
- 13:15 - 13:45: Puase
|
||||
- 13:45 - 14:15: Gespraech mit Sebastian: Radiochemie: IMC server kann firewall nicht monitoren: snmp service an fw geht nicht und ssh authentication failed
|
||||
- 14:15 - 16:00: VZ autoinstall
|
||||
- 16:00 - 16:30: Sebastian snmp und ssh communication between imc and opnsense
|
||||
|
||||
## Wednesday
|
||||
|
||||
- 09:00 - 09:15: Telefonat mit Nina. T20250312.0008
|
||||
|
||||
- 13:00 - 13:30: Delete existing database entries on my own instance. Import the dump of the old ps database
|
||||
- 13:30 - 16:30: Setup new metabase isntance: pkgs to install, docker, setup docker; import old application database; test accessability of metabase; harden vm; setup unattended upgrades, allow in firewall communication between all VMs via private ips
|
||||
|
||||
## Tuesday
|
||||
|
||||
- 08:30 - 09:15: Emails pruefen, discopharma, anleitung lesen fuer metabase, separate datenbank besser in production
|
||||
|
||||
- 09:30 - 09:45: Mail an KWA zu Firewall Thema, Pruefe KWA wildcard cert: Expiration 20.04
|
||||
- 09:45 - 10:00: Beobachte mit Michael dir Installation bei der VZ von Martin
|
||||
- 10:00 - 10:30: Gespraech mit Thilo zu Anleitung zu Setup von Neosphre, Recherche zu wildcard Zertifikat bei KWA
|
||||
- 10:30 - 11:00: VZ beobachten mit Michael
|
||||
|
||||
- 12:00 - 12:30: Gespraech mit Oli zu KWA/SSR (Firewall, Telefonie, Lizenzen, MacBook Einrichtung)
|
||||
|
||||
## Monday
|
||||
|
||||
- 10:30 - 11:00: Telefonat mit Marko: Ninja Installtion auf Mac Book
|
||||
|
||||
- 13:30 - 14:15: Bind dns in lab aufsetzen
|
||||
|
||||
## todo
|
||||
|
||||
- [ ] kwa/ssr - offene Rechungen zu MacBook Ersteinrichtungen
|
||||
- [ ] neosphere - ueberblick anleitung zum qumulus und dem computing cluster
|
||||
- [ ] smtp relay - oauth2: <https://github.com/tarickb/sasl-xoauth2>
|
||||
- [ ] herr fuechsle wegen homepage (kwa/ssr)
|
||||
- [ ] vz iso weitermachen
|
||||
|
||||
- [ ] bind/named anleitung schreiben; named slave instanz aufsetzen
|
||||
|
||||
- [ ] radiochemie - irgendwie http challenge automatisieren
|
||||
- [ ] verbraucherzentrale cybercns ueberpruefung - kw ab dem 16.01 wegen baldiger sicherheitspruefung
|
||||
|
||||
### Today
|
||||
|
||||
### General
|
||||
|
||||
- [ ] plan for beta automatic os deployment/windows 10 to 11 upgrade
|
||||
|
||||
- [ ] mailstore update ssr/kwa
|
||||
- [=] filewave - integrate new admin user - integrated in filewave - need to be tested and then deployed on all macs
|
||||
- [ ] kwa/ssr snmp karten fuer usv
|
||||
- [ ] update filewave admin und central
|
||||
|
||||
### SBX
|
||||
|
||||
- [ ] check if possible to monitor vsphere passwd expiration
|
||||
- [ ] create obsidian templates (Meetings, People, )
|
||||
- [ ] raci matrix - plan fuer monitoring und automation (pxe boot; win autoconfig; test server for ad; test firewalls; services; vlan std im buero mit Ordnung; pikvm fuer einfachere installation)
|
||||
- [ ] sbx - opsreportcad summary for action plan
|
||||
- [ ] sbx - disney workshop - planung
|
||||
|
||||
- [ ] fuege bharchitekten zu connectsecure hinzu
|
||||
- [ ] erstelle connectsecure report fuer grasslfing
|
||||
- [ ] cybercns bei heilmaier
|
||||
|
||||
- [ ] Fuer Synology Monitoring smtp einrichten wegen HyperBackups
|
||||
|
||||
#### OPNsense
|
||||
|
||||
1. check franke rieger firewall setup
|
||||
2. replicate config on opncentral (IDS/IPS, OpenVPN, Web Proxy, antivirus, acme ground {needs specific manual how to setup on spot}, ...)
|
||||
3. test management via opncentral
|
||||
4. write manual for on-boarding
|
||||
- setup wan manually
|
||||
- couple to opncentral
|
||||
- send generic config via opncentral
|
||||
- use manual for missing specific configs
|
||||
- check workings of everything
|
||||
|
||||
88
diary/2025-03-14.md
Normal file
88
diary/2025-03-14.md
Normal file
@@ -0,0 +1,88 @@
|
||||
$i\hbar \frac{\partial}{\partial t} \Large{|}\psi \Large{>} = \hat{H} \Large{|}\psi \Large{>}$
|
||||
|
||||
|
||||
|
||||
## Timestamps
|
||||
|
||||
- 08:30 - 08:45: Alle Projekte aufschreiben
|
||||
- 08:45 - 09:00: Pruefe NAS von KWA wegen fehlgeschlagenem Backup
|
||||
- 09:00 - 09:30: Ticketpflege, Gespraech mit Sebastian zu OPNsense und IMC
|
||||
- 09:30 - 09:45: Sebastian unterstuetzen: OPNsense SNMP in IMC Server einbinden
|
||||
- 09:45 - 10:30: OPNsense: Schriebe Anleitung fuer SNMP Server bei OPNsense. Fuege Anleitung in Ordner in TI-Glue hinzu
|
||||
- 10:30 - 10:35: Gespraech mit Dominik Thoma
|
||||
- 10:45 - 10:50: Bjoern Schwalb anrufen
|
||||
- 10:50 - 11:00: Gespraech mit Oli zu KWA Firewall Migration
|
||||
- 11:00 - 11:15: Stelle Failover Bond ein bei ubt02: Machine ID zweimal aendern, neustarten
|
||||
- 11:15 - 11:30: Termin planen fuer Firewall Migration und rausschicken
|
||||
- 11:30 - 11:45: Bond bei ubt02 aktivieren und pruefen, dass MAC adresse nicht gleich ist zu ubt03. bond scheint zu funktionieren. Reboot und nachdem pruefen
|
||||
- 11:45 - 12:30: KWA Mail; Zaehle Anzahl der Kontakte, welche nicht direkt im Kontakte Ordner hinterlegt waren, schreibe skript um alle kontakte aus den projektordnern zu kopieren, exportiere
|
||||
- 12:30 - 13:30: Pause
|
||||
- 13:30 - 14:00: Meeting with disopharma: Discussion fw rules and network tags
|
||||
- 14:00 - 15:00: Clean https configs in disco reverse proxy, restart web server, http://metabase.discopharma.de now reachable, test new certificates: not working
|
||||
- 15:00 - 17:00: draw.io. network diagram for qumulo
|
||||
|
||||
## Tuesday
|
||||
|
||||
- 09:30 - 09:45: Mail an KWA zu Firewall Thema, Pruefe KWA wildcard cert: Expiration 20.04
|
||||
|
||||
- 10:15 - 10:30: Recherche zu wildcard Zertifikat bei KWA
|
||||
|
||||
- 12:00 - 12:30: Gespraech mit Oli zu KWA/SSR (Firewall, Telefonie, Lizenzen, MacBook Einrichtung)
|
||||
|
||||
## Monday
|
||||
|
||||
- 10:30 - 11:00: Telefonat mit Marko: Ninja Installtion auf Mac Book
|
||||
|
||||
## todo
|
||||
|
||||
- [ ] kwa/ssr - offene Rechungen zu MacBook Ersteinrichtungen
|
||||
- [ ] neosphere - ueberblick anleitung zum qumulus und dem computing cluster
|
||||
- [ ] herr fuechsle wegen homepage (kwa/ssr)
|
||||
|
||||
- [ ] bind/named anleitung schreiben; named slave instanz aufsetzen
|
||||
|
||||
- [ ] radiochemie - irgendwie http challenge automatisieren
|
||||
- [ ] verbraucherzentrale cybercns ueberpruefung - kw ab dem 16.01 wegen baldiger sicherheitspruefung
|
||||
|
||||
### KWA
|
||||
|
||||
- KWA: Dominik teams Berechtigungen noch nicht freigegeben
|
||||
- KWA: Veraendere Bild Groesse von anhaengen (bild format)
|
||||
- KWA: Bei teilen direkt mit Outlook teilen
|
||||
|
||||
### Today
|
||||
|
||||
### General
|
||||
|
||||
- [ ] plan for beta automatic os deployment/windows 10 to 11 upgrade
|
||||
|
||||
- [ ] mailstore update ssr/kwa
|
||||
- [=] filewave - integrate new admin user - integrated in filewave - need to be tested and then deployed on all macs
|
||||
- [ ] kwa/ssr snmp karten fuer usv
|
||||
- [ ] update filewave admin und central
|
||||
|
||||
### SBX
|
||||
|
||||
- [ ] check if possible to monitor vsphere passwd expiration
|
||||
- [ ] create obsidian templates (Meetings, People, )
|
||||
- [ ] sbx - opsreportcard summary for action plan
|
||||
- [ ] sbx - disney workshop - planung
|
||||
|
||||
- [ ] fuege bharchitekten zu connectsecure hinzu
|
||||
- [ ] erstelle connectsecure report fuer grasslfing
|
||||
- [ ] cybercns bei heilmaier
|
||||
|
||||
- [ ] Fuer Synology Monitoring smtp einrichten wegen HyperBackups
|
||||
|
||||
#### OPNsense
|
||||
|
||||
1. check franke rieger firewall setup
|
||||
2. replicate config on opncentral (IDS/IPS, OpenVPN, Web Proxy, antivirus, acme ground {needs specific manual how to setup on spot}, ...)
|
||||
3. test management via opncentral
|
||||
4. write manual for on-boarding
|
||||
- setup wan manually
|
||||
- couple to opncentral
|
||||
- send generic config via opncentral
|
||||
- use manual for missing specific configs
|
||||
- check workings of everything
|
||||
|
||||
59
diary/2025-03-16.md
Normal file
59
diary/2025-03-16.md
Normal file
@@ -0,0 +1,59 @@
|
||||
$i\hbar \frac{\partial}{\partial t} \Large{|}\psi \Large{>} = \hat{H} \Large{|}\psi \Large{>}$
|
||||
|
||||
|
||||
|
||||
## Timestamps
|
||||
|
||||
## todo
|
||||
|
||||
- [ ] kwa/ssr - offene Rechungen zu MacBook Ersteinrichtungen
|
||||
- [ ] neosphere - ueberblick anleitung zum qumulus und dem computing cluster
|
||||
- [ ] herr fuechsle wegen homepage (kwa/ssr)
|
||||
|
||||
- [ ] bind/named anleitung schreiben; named slave instanz aufsetzen
|
||||
|
||||
- [ ] radiochemie - irgendwie http challenge automatisieren
|
||||
- [ ] verbraucherzentrale cybercns ueberpruefung - kw ab dem 16.01 wegen baldiger sicherheitspruefung
|
||||
|
||||
### KWA
|
||||
|
||||
- KWA: Dominik teams Berechtigungen noch nicht freigegeben
|
||||
- KWA: Veraendere Bild Groesse von anhaengen (bild format)
|
||||
- KWA: Bei teilen direkt mit Outlook teilen
|
||||
|
||||
### Today
|
||||
|
||||
### General
|
||||
|
||||
- [ ] plan for beta automatic os deployment/windows 10 to 11 upgrade
|
||||
|
||||
- [ ] mailstore update ssr/kwa
|
||||
- [=] filewave - integrate new admin user - integrated in filewave - need to be tested and then deployed on all macs
|
||||
- [ ] kwa/ssr snmp karten fuer usv
|
||||
- [ ] update filewave admin und central
|
||||
|
||||
### SBX
|
||||
|
||||
- [ ] check if possible to monitor vsphere passwd expiration
|
||||
- [ ] create obsidian templates (Meetings, People, )
|
||||
- [ ] sbx - opsreportcard summary for action plan
|
||||
- [ ] sbx - disney workshop - planung
|
||||
|
||||
- [ ] fuege bharchitekten zu connectsecure hinzu
|
||||
- [ ] erstelle connectsecure report fuer grasslfing
|
||||
- [ ] cybercns bei heilmaier
|
||||
|
||||
- [ ] Fuer Synology Monitoring smtp einrichten wegen HyperBackups
|
||||
|
||||
#### OPNsense
|
||||
|
||||
1. check franke rieger firewall setup
|
||||
2. replicate config on opncentral (IDS/IPS, OpenVPN, Web Proxy, antivirus, acme ground {needs specific manual how to setup on spot}, ...)
|
||||
3. test management via opncentral
|
||||
4. write manual for on-boarding
|
||||
- setup wan manually
|
||||
- couple to opncentral
|
||||
- send generic config via opncentral
|
||||
- use manual for missing specific configs
|
||||
- check workings of everything
|
||||
|
||||
73
diary/2025-03-17.md
Normal file
73
diary/2025-03-17.md
Normal file
@@ -0,0 +1,73 @@
|
||||
$i\hbar \frac{\partial}{\partial t} \Large{|}\psi \Large{>} = \hat{H} \Large{|}\psi \Large{>}$
|
||||
|
||||
|
||||
|
||||
## Timestamps
|
||||
|
||||
- 08:30 - 08:45: Linux Server manuell updaten wo ninja failed
|
||||
- 08:45 - 09:00: Bereinige boot partition von hetzner pve: manuelles loschen von alten kernel
|
||||
- 09:00 - 09:15: Tagesaufgaben planen
|
||||
- 09:15 - 09:30: Rauchen
|
||||
-
|
||||
- 09:30 - 10:30: [x] Vorlagen Tabelle OPNsense Migration auffuellen: 32 Stunden Arbeit Notizen machen zu dem Projekt
|
||||
- 10:45 - 11:00 DiscoPharma Meeting Vorbereitung
|
||||
- 11:00 - 11:15: Meeting mit DiscoPharma
|
||||
- 11:15 - 11:30: Rauchen
|
||||
- 11:30 - 12:30: Pause
|
||||
- 12:30 - 13:30: [x] Recherche: "OPnsense in industry": [zenarmor-opnsense_vs_fortinet](https://www.zenarmor.com/docs/network-security-tutorials/opnsense-vs-fortinet), [opnsense forum discussion](https://forum.opnsense.org/index.php?topic=43572.0),
|
||||
- 13:30 - 14:00: [x] Meeting mit Oli zu KWA Firewall Migration Erst Meeting
|
||||
- 14:15 - 15:15: Meeting mit Patryk zu seiner Projektarbeit und ConnectSecure
|
||||
- 15:15 - 15:30: Pause
|
||||
- 15:30 - 16:00: [x] Vergleiche Sophos und OPNsense verfasssen (Preise, Features, Vor und Nachteile )
|
||||
- 16:00 - 16:30: Discopharma Postgres Backup
|
||||
- 16:30 - 17:00: [x] Ticketpflege
|
||||
|
||||
## todo
|
||||
|
||||
- [ ] opnsense schulung planen
|
||||
|
||||
- [ ] kwa/ssr - offene Rechungen zu MacBook Ersteinrichtungen
|
||||
- [ ] neosphere - ueberblick anleitung zum qumulus und dem computing cluster
|
||||
- [ ] herr fuechsle wegen homepage (kwa/ssr)
|
||||
|
||||
- [ ] bind/named anleitung schreiben; named slave instanz aufsetzen
|
||||
|
||||
- [ ] radiochemie - irgendwie http challenge automatisieren
|
||||
- [ ] verbraucherzentrale cybercns ueberpruefung - kw ab dem 16.01 wegen baldiger sicherheitspruefung
|
||||
|
||||
### Today
|
||||
|
||||
### General
|
||||
|
||||
- [ ] plan for beta automatic os deployment/windows 10 to 11 upgrade
|
||||
|
||||
- [ ] mailstore update ssr/kwa
|
||||
- [=] filewave - integrate new admin user - integrated in filewave - need to be tested and then deployed on all macs
|
||||
- [ ] kwa/ssr snmp karten fuer usv
|
||||
- [ ] update filewave admin und central
|
||||
|
||||
### SBX
|
||||
|
||||
- [ ] check if possible to monitor vsphere passwd expiration
|
||||
- [ ] create obsidian templates (Meetings, People, )
|
||||
- [ ] sbx - opsreportcard summary for action plan
|
||||
- [ ] sbx - disney workshop - planung
|
||||
|
||||
- [ ] fuege bharchitekten zu connectsecure hinzu
|
||||
- [ ] erstelle connectsecure report fuer grasslfing
|
||||
- [ ] cybercns bei heilmaier
|
||||
|
||||
- [ ] Fuer Synology Monitoring smtp einrichten wegen HyperBackups
|
||||
|
||||
#### OPNsense
|
||||
|
||||
1. check franke rieger firewall setup
|
||||
2. replicate config on opncentral (IDS/IPS, OpenVPN, Web Proxy, antivirus, acme ground {needs specific manual how to setup on spot}, ...)
|
||||
3. test management via opncentral
|
||||
4. write manual for on-boarding
|
||||
- setup wan manually
|
||||
- couple to opncentral
|
||||
- send generic config via opncentral
|
||||
- use manual for missing specific configs
|
||||
- check workings of everything
|
||||
|
||||
83
diary/2025-03-18.md
Normal file
83
diary/2025-03-18.md
Normal file
@@ -0,0 +1,83 @@
|
||||
$i\hbar \frac{\partial}{\partial t} \Large{|}\psi \Large{>} = \hat{H} \Large{|}\psi \Large{>}$
|
||||
|
||||
|
||||
|
||||
## Timestamps
|
||||
|
||||
- 08:30 - 08:45: Ticketpflege
|
||||
- 08:45 - 09:00: Meeting mit KWA vorbereiten. XGS136 specs recherchieren
|
||||
- 09:00 - 10:15: Meeting mit KWA: Sophos vs. OPNsense
|
||||
- 10:15 - 10:30: Pause
|
||||
- 10:30 - 10:45: Mailstore Lizenz bei KWA nachschauen und Angebot anfragen. Infos fuer Angebot fuer Firewall Migration einholen
|
||||
- 11:00 - 11:15: Juri anrufen
|
||||
- 11:15 - 12:15: Kalkulation erstellen fuer KWA
|
||||
- 12:30 - 12:45: KWA IT-Glue sortieteren
|
||||
- 12:45 - 13:45: Pause
|
||||
- 13:45 - 14:15: SSR IT-Glue sortieren und neue Ordner anlegen
|
||||
|
||||
## Monday
|
||||
|
||||
- 08:30 - 08:45: [x] Linux Server manuell updaten wo ninja failed
|
||||
- 08:45 - 09:00: [x] Bereinige boot partition von hetzner pve: manuelles loschen von alten kernel
|
||||
- 09:00 - 09:15: [x] Tagesaufgaben planen
|
||||
|
||||
- 09:30 - 10:30: [x] Vorlagen Tabelle OPNsense Migration auffuellen: 32 Stunden Arbeit Notizen machen zu dem Projekt
|
||||
- 10:45 - 11:00: [x] DiscoPharma Meeting Vorbereitung
|
||||
- 11:00 - 11:15: [x] Meeting mit DiscoPharma
|
||||
- 12:30 - 13:30: [x] Recherche: "OPnsense in industry": [zenarmor-opnsense_vs_fortinet](https://www.zenarmor.com/docs/network-security-tutorials/opnsense-vs-fortinet), [opnsense forum discussion](https://forum.opnsense.org/index.php?topic=43572.0),
|
||||
- 13:30 - 14:00: [x] Meeting mit Oli zu KWA Firewall Migration Erst Meeting
|
||||
- 14:15 - 15:15: Meeting mit Patryk zu seiner Projektarbeit und ConnectSecure
|
||||
- 15:15 - 15:30: Pause
|
||||
- 15:30 - 16:00: [x] Vergleiche Sophos und OPNsense verfasssen (Preise, Features, Vor und Nachteile )
|
||||
- 16:00 - 16:30: [x] Discopharma Postgres Backup
|
||||
- 16:30 - 17:00: [x] Ticketpflege
|
||||
|
||||
## todo
|
||||
|
||||
- [ ] opnsense schulung planen
|
||||
|
||||
- [ ] kwa/ssr - offene Rechungen zu MacBook Ersteinrichtungen
|
||||
- [ ] neosphere - ueberblick anleitung zum qumulus und dem computing cluster
|
||||
- [ ] herr fuechsle wegen homepage (kwa/ssr)
|
||||
|
||||
- [ ] bind/named anleitung schreiben; named slave instanz aufsetzen
|
||||
|
||||
- [ ] radiochemie - irgendwie http challenge automatisieren
|
||||
- [ ] verbraucherzentrale cybercns ueberpruefung - kw ab dem 16.01 wegen baldiger sicherheitspruefung
|
||||
|
||||
### Today
|
||||
|
||||
### General
|
||||
|
||||
- [ ] plan for beta automatic os deployment/windows 10 to 11 upgrade
|
||||
|
||||
- [ ] mailstore update ssr/kwa
|
||||
- [=] filewave - integrate new admin user - integrated in filewave - need to be tested and then deployed on all macs
|
||||
- [ ] kwa/ssr snmp karten fuer usv
|
||||
- [ ] update filewave admin und central
|
||||
|
||||
### SBX
|
||||
|
||||
- [ ] check if possible to monitor vsphere passwd expiration
|
||||
- [ ] create obsidian templates (Meetings, People, )
|
||||
- [ ] sbx - opsreportcard summary for action plan
|
||||
- [ ] sbx - disney workshop - planung
|
||||
|
||||
- [ ] fuege bharchitekten zu connectsecure hinzu
|
||||
- [ ] erstelle connectsecure report fuer grasslfing
|
||||
- [ ] cybercns bei heilmaier
|
||||
|
||||
- [ ] Fuer Synology Monitoring smtp einrichten wegen HyperBackups
|
||||
|
||||
#### OPNsense
|
||||
|
||||
1. check franke rieger firewall setup
|
||||
2. replicate config on opncentral (IDS/IPS, OpenVPN, Web Proxy, antivirus, acme ground {needs specific manual how to setup on spot}, ...)
|
||||
3. test management via opncentral
|
||||
4. write manual for on-boarding
|
||||
- setup wan manually
|
||||
- couple to opncentral
|
||||
- send generic config via opncentral
|
||||
- use manual for missing specific configs
|
||||
- check workings of everything
|
||||
|
||||
Reference in New Issue
Block a user