Home

Cups-1

CPU: AMD EPYC™ 7702 (6 Threads)

Arch: AMD64

Ram: 16 GB

Host: Netcup

Location: Nectup Nuremberg

OS: Debian 12 Bullseye

Tailscale setup

curl -fsSL https://tailscale.com/install.sh | sh
sudo tailscale up --ssh

Then login from the main Aosus account

Auto updates

Debian

Debian auto updates have been setup to apply upgrades at 12AM UTC+3, which is 21:00 in UTC.

https://wiki.debian.org/UnattendedUpgrades

steps to setup upgrades at 21:00 UTC time:

- sudo systemctl edit apt-daily-upgrade.timer

add this between the comment lines

[Timer]

OnCalendar=

OnCalendar=21:00

RandomizedDelaySec=0

- sudo systemctl restart apt-daily-upgrade.timer

- sudo systemctl status apt-daily-upgrade.timer

check when the services is going to be activated

then follow this guide:

https://linuxiac.com/how-to-set-up-automatic-updates-on-debian/

add "Docker:${distro_codename}" and "Tailscale:${distro_codename}" to allowed origins to update docker and Tailscale

docker don't stop containers when daemon is updating

https://docs.docker.com/config/containers/live-restore/

Enable IPv6 in docker

https://docs.docker.com/config/daemon/ipv6/#use-ipv6-for-the-default-bridge-network/

/etc/docker/daemon.json

{
  "ipv6": true,
  "fixed-cidr-v6": "fd00::/80",
  "experimental": true,
  "ip6tables": true,
  "default-address-pools": [
    { "base": "172.17.0.0/16", "size": 16 },
    { "base": "172.18.0.0/16", "size": 16 },
    { "base": "172.19.0.0/16", "size": 16 },
    { "base": "172.20.0.0/14", "size": 16 },
    { "base": "172.24.0.0/14", "size": 16 },
    { "base": "172.28.0.0/14", "size": 16 },
    { "base": "192.168.0.0/16", "size": 20 },
    { "base": "fd2d:f14e::/104", "size": 112 }
  ],
  "userland-proxy": false,
  "live-restore": true
}

I disabled userland-proxy because native iptables networking should be much faster, without too many issues. https://franckpachot.medium.com/high-cpu-usage-in-docker-proxy-with-chatty-database-application-disable-userland-proxy-415ffa064955 https://github.com/moby/moby/issues/14856