Crunchbanglinux

The unit file

A minimal service has three sections — [Unit], [Service] and [Install]:

[Unit] Description=My app After=network.target [Service] ExecStart=/usr/bin/myapp User=myapp Restart=on-failure [Install] WantedBy=multi-user.target Install and enable sudo cp myapp.service /etc/systemd/system/ sudo systemctl daemon-reload sudo systemctl enable --now myapp Check it wor...

Create a key pair ssh-keygen -t ed25519 -C "[email protected]"

Ed25519 is fast, small and secure. Set a passphrase when prompted — it encrypts the private key on disk.

Copy the public key to a server ssh-copy-id user@host

This appends your public key to the server’s ~/.ssh/authorized_keys. Now ssh user@host logs you in without a password.

Harden the server

Once ke...

Update, then upgrade

apt update refreshes the list of available packages; apt upgrade then installs newer versions. Run them together:

sudo apt update && sudo apt upgrade Install and remove sudo apt install ripgrep sudo apt remove ripgrep

Search for a package with apt search term and see details with apt show name.

Clean up

sudo apt autoremove deletes de...

The problem with plain DNS

By default, the name lookups your computer makes are unencrypted. Anyone on the path — your network, your ISP — can see every domain you visit, and in some cases tamper with the answers.

Encrypt it

DNS over TLS and DNS over HTTPS both encrypt lookups to a resolver you choose. On a systemd distribution, edit /etc/systemd/resolved...

Start with the apps, not the OS

Replacing the operating system is powerful but risky and not for everyone. Most of the privacy benefit comes from what you install: a de-Googled browser, an alternative app store, and private defaults.

Practical swaps

Use F-Droid for open-source apps, a privacy-respecting browser, an Aurora Store for the apps you still need...