Docker on Planet Hawleywood

Self-hosting LanguageTool

Wed, 31 Aug 2022 00:00:00 +0000

Summary

LanguageTool is a free online proofreading service for English, Spanish, and 20 other languages. Instantly check your text for grammar and style mistakes. It’s a free alternative to similar sites/services like Grammarly. While I’m not sure that Grammarly is a Privacy Nightmare, I don’t like the idea of sending everything I write to a third party service for inspection.

The free version of LanguageTool has a much better reputation, although that may be because it’s less well-known. It’s also nice that it’s an open-source project that publishes the code.

Uncomplicated Firewall / Docker Workaround

Wed, 10 Aug 2022 00:00:00 +0000

To get UFW to work well with Docker, you have to add some rules to the bottom of

/etc/ufw/after.rules

# BEGIN UFW AND DOCKER
*filter
:ufw-user-forward - [0:0]
:ufw-docker-logging-deny - [0:0]
:DOCKER-USER - [0:0]
-A DOCKER-USER -j ufw-user-forward
-A DOCKER-USER -j RETURN -s 10.0.0.0/8
-A DOCKER-USER -j RETURN -s 172.16.0.0/12
-A DOCKER-USER -j RETURN -s 192.168.0.0/16
-A DOCKER-USER -p udp -m udp --sport 53 --dport 1024:65535 -j RETURN
-A DOCKER-USER -j ufw-docker-logging-deny -p tcp -m tcp --tcp-flags FIN,SYN,RST,ACK SYN -d 192.168.0.0/16
-A DOCKER-USER -j ufw-docker-logging-deny -p tcp -m tcp --tcp-flags FIN,SYN,RST,ACK SYN -d 10.0.0.0/8
-A DOCKER-USER -j ufw-docker-logging-deny -p tcp -m tcp --tcp-flags FIN,SYN,RST,ACK SYN -d 172.16.0.0/12
-A DOCKER-USER -j ufw-docker-logging-deny -p udp -m udp --dport 0:32767 -d 192.168.0.0/16
-A DOCKER-USER -j ufw-docker-logging-deny -p udp -m udp --dport 0:32767 -d 10.0.0.0/8
-A DOCKER-USER -j ufw-docker-logging-deny -p udp -m udp --dport 0:32767 -d 172.16.0.0/12
-A DOCKER-USER -j RETURN
-A ufw-docker-logging-deny -m limit --limit 3/min --limit-burst 10 -j LOG --log-prefix "[UFW DOCKER BLOCK] "
-A ufw-docker-logging-deny -j DROP
COMMIT

Adding Rules

Then you can add rules. Always add rules with comments. Examples below:

Doctor Docker (or "How I Learned to Stop Worrying and Tolerate the Container")

Wed, 24 Nov 2021 00:00:00 +0000

Backstory: I’ve been either paying for or using 3rd part apps for Read-It-Later (Pocket), Hosted Bookmarks (Raindrop.io) and an RSS Feedreader (Inoreader) for about a year. In the interest of 1) teaching myself Docker and 2) decoupling from hosted solutions I have finally replaced all three of the above apps with docker containers.

I am using Portainer to manage my docker nodes (I have two) and containers. I recommend learning at least the basics on how to build and modify containers via the command line before using a GUI tool to manage them, but Portainer came highly recommended and abstracts a lot of the drudgery into simple point and clicks.