Alpine Linux - User contributions [en]

DNSCrypt-Proxy

2021-08-02T19:37:13Z

Ianu: Updated configuration options for some existing and new features

{{TOC right}}

= Overview =

This article provides a short guide to setting up a DNSCrypt-Proxy server on Alpine Linux.

Also see [https://dnscrypt.info dnscrypt.info]. Source code on [https://github.com/jedisct1/dnscrypt-proxy github.com/jedisct1/dnscrypt-proxy]

= Features =
* DNS traffic encryption and authentication.
* Supports DNSCrypt, DNS-over-HTTPS (DoH) using TLS 1.3, Anonymized DNS and Oblivious DoH (ODoH).
* Local DOH Server
* DNS query monitoring, with separate log files for regular and suspicious queries
* Filtering: block ads, malware, and other unwanted content. Compatible with all DNS services
* Time-based filtering, with a flexible weekly schedule
* Transparent redirection of specific domains to specific resolvers
* DNS caching, to reduce latency and improve privacy
and more...

Both the dnscrypt and DoH protocols achieve the same goal of encrypting DNS traffic, keeping the data private from your ISP, or the owners of a public HotSpot.
It can be run on local machines, or setup as the DNS Resolver for a house, office, or any other size group; it scales well and uses minimal resources.
The user need not be concerned about 'choosing' services with either dnscrypt or DoH protocols - dnscrypt-proxy can pick the fastest resolvers that meet criteria for logging and filtering.
Additionally, it supports protocols for tunneling requests using either Anonymized DNS or ODoH.

== Installation ==
Install the {{Pkg|dnscrypt-proxy}} package:
{{Cmd|apk add dnscrypt-proxy dnscrypt-proxy-openrc}}

Also see [https://wiki.alpinelinux.org/wiki/Alpine_Linux_package_management Alpine Linux package management ].

== Service commands ==
Enable the dnscrypt-proxy service so that it starts at boot:
{{Cmd|rc-update add dnscrypt-proxy}}

Start the dnscrypt-proxy service immediately:
{{Cmd|/etc/init.d/dnscrypt-proxy start}}

{{Note|If you are running from RAM, ensure you save your settings using the 'lbu ci' command as necessary. See [https://wiki.alpinelinux.org/wiki/Alpine_local_backup Alpine local backup].}}
{{Note|Configuration options are shown in '''/etc/dnscrypt-proxy/dnscrypt-proxy.toml'''. The file includes comments that explain many of the options.}}
Also see [https://wiki.alpinelinux.org/wiki/Alpine_Linux_Init_System Alpine Linux Init System].

== Exposing the service on the local network ==
The main configuration file is '''/etc/dnscrypt-proxy/dnscrypt-proxy.toml'''. Any line starting with "#" will be ignored by ''dnscrypt-proxy''.
Replace
listen_addresses = ['127.0.0.1:53', '[::1]:53']
With
listen_addresses = [':53']
Then restart the service with
{{Cmd|/etc/init.d/dnscrypt-proxy restart}}

== Enable local DOH Server ==
This feature is available from version 2.0.34 onwards.
Firefox can be configured to use dnscrypt-proxy as a local DOH server. To do this, a certifcate needs to be generated with

{{Cmd|openssl req -x509 -nodes -newkey rsa:2048 -days 5000 -sha256 -keyout \
localhost.pem -out localhost.pem}}
Then copy to the dnscrypt-proxy folder
{{Cmd|sudo cp localhost.pem /etc/dnscrypt-proxy}}

Next, edit the main configuration file is '''/etc/dnscrypt-proxy/dnscrypt-proxy.toml'''.
Remove the "#" from the beginning of the following lines

[local_doh]
listen_addresses = [':3000']
path = "/dns-query"
cert_file = "localhost.pem"
cert_key_file = "localhost.pem"

In this example, the URL of the local DoH server will be '''https://<host ip address>:3000/dns-query''

Start by trying to open this full URL as a regular website with Firefox. The first time, Firefox will notice that the certificate is self-signed and complain about it. This is expected. Click "Advanced" and "I accept the risks". This is okay, you are only going to connect to your own machine.
Next, type about:config in the URL bar, search for trr and make the following changes:
Set network.trr.custom_uri and network.trr.uri to https://127.0.0.1:3000/dns-query
Set network.trr.mode to 2

Search for esni and make the following change:
Set network.security.esni.enabled to true

The ESNI specification and implementations in Firefox (and Chrome/Brave/Chromium) are still experimental, so it might break some websites. Test if its working here https://www.cloudflare.com/ssl/encrypted-sni/
(don't pay attention to the "Secure DNS" column, the green mark will only be shown when using Cloudflare).

To disable, make the following changes:
Set network.trr.mode to 0

== Forwarding internal traffic to a local DNS server ==
You'd want to do this if you use hostnames on your local network - normally this is managed by your home router.
The main configuration file is '''/etc/dnscrypt-proxy/dnscrypt-proxy.toml'''.
Remove the "#" from the beginning of this line
# forwarding_rules = '/etc/dnscrypt-proxy/forwarding-rules.txt'
forwarding_rules = '/etc/dnscrypt-proxy/forwarding-rules.txt'

The copy the example file
{{Cmd|cp /usr/share/dnscrypt-proxy/example-forwarding-rules.txt /etc/dnscrypt-proxy/forwarding-rules.txt}}
Then edit the file, and add a line for your local network. If your network is configured as ".home", and your home router is at 192.168.1.1 then add
home 192.168.1.1

Then restart the service with
{{Cmd|/etc/init.d/dnscrypt-proxy restart}}

== Creating a Family Friendly DNS Service ==
Some providers have their own adult content blocking filters. They don't all use the same system, so researching may be worthwhile. The list of providers can be found here [https://dnscrypt.info/public-servers public-servers].
It might be unwise to select only one service in case it becomes unavailable. Edit '''/etc/dnscrypt-proxy/dnscrypt-proxy.toml''' and make an adjustment like this in the Global Settings
# server_names = ['scaleway-fr', 'google', 'yandex', 'cloudflare']
server_names = ['cleanbrowsing-family']

Cloaking rules can also be used to mask certain URIs. For instance to redirect google to enforce safe search. The main configuration file is '''/etc/dnscrypt-proxy/dnscrypt-proxy.toml'''.
Remove the "#" from the beginning of this line
# cloaking_rules = 'cloaking-rules.txt'
cloaking_rules = 'cloaking-rules.txt'

Then copy the example file
{{Cmd|cp /usr/share/dnscrypt-proxy/example-cloaking-rules.txt /etc/dnscrypt-proxy/cloaking-rules.txt}}
Then edit the file, and add the lines you like
www.google.* forcesafesearch.google.com
www.youtube.com restrictmoderate.youtube.com
m.youtube.com restrictmoderate.youtube.com
youtubei.googleapis.com restrictmoderate.youtube.com
youtube.googleapis.com restrictmoderate.youtube.com
www.youtube-nocookie.com restrictmoderate.youtube.com

Then restart the service with
{{Cmd|/etc/init.d/dnscrypt-proxy restart}}

== More General Filtering ==
More general filtering can be made based on properties of the server, for instance only choosing servers that don't log; google will log queries made to their servers, even encrypted ones.
This is explained here: [https://github.com/DNSCrypt/dnscrypt-proxy/wiki/Configuration-Sources].

A selection can be made on the following properties:

# Use servers reachable over IPv4
ipv4_servers = true

# Use servers reachable over IPv6 -- Do not enable if you don't have IPv6 connectivity
ipv6_servers = false

# Use servers implementing the DNSCrypt protocol
dnscrypt_servers = true

# Use servers implementing the DNS-over-HTTPS protocol
doh_servers = true

# Do not use servers implementing the Oblivious DNS-over-HTTPS protocol
odoh_servers = false

# Server must support DNS security extensions (DNSSEC)
require_dnssec = false

# Server must not log user queries (declarative)
require_nolog = true

# Server must not enforce its own blacklist (for parental control, ads blocking...)
require_nofilter = true

# Skip resolvers incompatible with anonymization instead of using them directly
skip_incompatible = false

== Anonymized DNS and Oblivious DoH ==
Anonymized DNS is specified for the dnscrypt protocol; configuration is detailed here: [https://github.com/DNSCrypt/dnscrypt-proxy/wiki/Anonymized-DNS]

Anonymized DNS uses 'relays' to pass on requests. The request is encrypted first for the target resolver, and then for a 'relay' node. The relay has no knowledge of the request (since it's encrypted for the eventual resolver). The resolver has no idea of the source of the request (since the source is the 'relay'). The response is similarly encrypted, so neither the relay nor the resolver are able to map queries to clients.

Oblivious DoH achieves the same end for a variant of the DoH protocol and it's configuration is explained here: [https://github.com/DNSCrypt/dnscrypt-proxy/wiki/Oblivious-DoH]

The referenced links are kept up to date with compliant servers and configuration options.

[[Category:Networking]]

DNSCrypt-Proxy

2019-12-03T18:14:23Z

Ianu:

DNSCrypt-Proxy

2019-03-28T22:55:56Z

Ianu:

= Overview =

This article provides a short guide to setting up a DNSCrypt-Proxy server on Alpine Linux.

Also see [https://dnscrypt.info dnscrypt.info]. Source code on [https://github.com/jedisct1/dnscrypt-proxy github.com/jedisct1/dnscrypt-proxy]

= Features =
* DNS traffic encryption and authentication. Supports DNS-over-HTTPS (DoH) using TLS 1.3, and DNSCrypt.
* DNS query monitoring, with separate log files for regular and suspicious queries
* Filtering: block ads, malware, and other unwanted content. Compatible with all DNS services
* Time-based filtering, with a flexible weekly schedule
* Transparent redirection of specific domains to specific resolvers
* DNS caching, to reduce latency and improve privacy
and more...

== Installation ==
Install the {{Pkg|dnscrypt-proxy}} package:
{{Cmd|apk add dnscrypt-proxy dnscrypt-proxy-openrc}}

Also see [https://wiki.alpinelinux.org/wiki/Alpine_Linux_package_management Alpine Linux package management ].

== Service commands ==
Enable the dnscrypt-proxy service so that it starts at boot:
{{Cmd|rc-update add dnscrypt-proxy}}

Start the dnscrypt-proxy service immediately:
{{Cmd|/etc/init.d/dnscrypt-proxy start}}

{{Note|If you are running from RAM, ensure you save your settings using the 'lbu ci' command as necessary. See [https://wiki.alpinelinux.org/wiki/Alpine_local_backup Alpine local backup].}}
{{Note|Configuration options are shown in '''/etc/dnscrypt-proxy/dnscrypt-proxy.toml'''. The file includes comments that explain many of the options.}}
Also see [https://wiki.alpinelinux.org/wiki/Alpine_Linux_Init_System Alpine Linux Init System].

== Exposing the service on the local network ==
The main configuration file is '''/etc/dnscrypt-proxy/dnscrypt-proxy.toml'''. Any line starting with "#" will be ignored by ''dnscrypt-proxy''.
Replace
listen_addresses = ['127.0.0.1:53', '[::1]:53']
With
listen_addresses = [':53']
Then restart the service with
{{Cmd|/etc/init.d/dnscrypt-proxy restart}}

== Forwarding internal traffic to a local DNS server ==
You'd want to do this if you use hostnames on your local network - normally this is managed by your home router.
The main configuration file is '''/etc/dnscrypt-proxy/dnscrypt-proxy.toml'''.
Remove the "#" from the beginning of this line
# forwarding_rules = '/etc/dnscrypt-proxy/forwarding-rules.txt'
forwarding_rules = '/etc/dnscrypt-proxy/forwarding-rules.txt'

The copy the example file
{{Cmd|cp /usr/share/dnscrypt-proxy/example-forwarding-rules.txt /etc/dnscrypt-proxy/forwarding-rules.txt}}
Then edit the file, and add a line for your local network. If your network is configured as ".home", and your home router is at 192.168.1.1 then add
home 192.168.1.1

Then restart the service with
{{Cmd|/etc/init.d/dnscrypt-proxy restart}}

== Creating a Family Friendly DNS Service ==
Some providers have their own adult content blocking filters. They don't all use the same system, so researching may be worthwhile. The list of providers can be found here [https://dnscrypt.info/public-servers public-servers].
It might be unwise to select only one service in case it becomes unavailable. Edit '''/etc/dnscrypt-proxy/dnscrypt-proxy.toml''' and make an adjustment like this in the Global Settings
# server_names = ['scaleway-fr', 'google', 'yandex', 'cloudflare']
server_names = ['cleanbrowsing-family']

Then restart the service with
{{Cmd|/etc/init.d/dnscrypt-proxy restart}}

DNSCrypt-Proxy

2019-03-28T22:53:02Z

Ianu:

= Overview =

This article provides a short guide to setting up a DNSCrypt-Proxy server on Alpine Linux.

Also see [https://dnscrypt.info dnscrypt.info]. Source code on [https://github.com/jedisct1/dnscrypt-proxy github.com/jedisct1/dnscrypt-proxy]

= Features =
* DNS traffic encryption and authentication. Supports DNS-over-HTTPS (DoH) using TLS 1.3, and DNSCrypt.
* DNS query monitoring, with separate log files for regular and suspicious queries
* Filtering: block ads, malware, and other unwanted content. Compatible with all DNS services
* Time-based filtering, with a flexible weekly schedule
* Transparent redirection of specific domains to specific resolvers
* DNS caching, to reduce latency and improve privacy
and more...

== Installation ==
Install the {{Pkg|dnscrypt-proxy}} package:
{{Cmd|apk add dnscrypt-proxy dnscrypt-proxy-openrc}}

Also see [https://wiki.alpinelinux.org/wiki/Alpine_Linux_package_management Alpine Linux package management ].

== Service commands ==
Enable the dnscrypt-proxy service so that it starts at boot:
{{Cmd|rc-update add dnscrypt-proxy}}

Start the dnscrypt-proxy service immediately:
{{Cmd|/etc/init.d/dnscrypt-proxy start}}

{{Note|If you are running from RAM, ensure you save your settings using the 'lbu ci' command as necessary. See [https://wiki.alpinelinux.org/wiki/Alpine_local_backup Alpine local backup].}}
{{Note|Configuration options are shown in '''/etc/dnscrypt-proxy/dnscrypt-proxy.toml'''. The file includes comments that explain many of the options.}}
Also see [https://wiki.alpinelinux.org/wiki/Alpine_Linux_Init_System Alpine Linux Init System].

== Exposing the service on the local network ==
The main configuration file is '''/etc/dnscrypt-proxy/dnscrypt-proxy.toml'''. Any line starting with "#" will be ignored by ''dnscrypt-proxy''.
Replace
listen_addresses = ['127.0.0.1:53', '[::1]:53']
With
listen_addresses = [':53']
Then restart the service with
{{Cmd|/etc/init.d/dnscrypt-proxy restart}}

== Forwarding internal traffic to a local DNS server ==
The main configuration file is '''/etc/dnscrypt-proxy/dnscrypt-proxy.toml'''. Any line starting with "#" will be ignored by ''dnscrypt-proxy''.
Remove the "#" from the beginning of this line
# forwarding_rules = '/etc/dnscrypt-proxy/forwarding-rules.txt'
forwarding_rules = '/etc/dnscrypt-proxy/forwarding-rules.txt'

The copy the example file
{{Cmd|cp /usr/share/dnscrypt-proxy/example-forwarding-rules.txt /etc/dnscrypt-proxy/forwarding-rules.txt}}
Then edit the file, and add a line for your local network. If your network is configured as ".home", and your home router is at 192.168.1.1 then add
home 192.168.1.1

Then restart the service with
{{Cmd|/etc/init.d/dnscrypt-proxy restart}}

== Creating a Family Friendly DNS Service ==
Some providers have their own adult content blocking filters. They don't all use the same system, so researching may be worthwhile. The list of providers can be found here [https://dnscrypt.info/public-servers public-servers].
It might be unwise to select only one service in case it becomes unavailable. Edit '''/etc/dnscrypt-proxy/dnscrypt-proxy.toml''' and make an adjustment like this in the Global Settings
# server_names = ['scaleway-fr', 'google', 'yandex', 'cloudflare']
server_names = ['cleanbrowsing-family']

Then restart the service with
{{Cmd|/etc/init.d/dnscrypt-proxy restart}}

DNSCrypt-Proxy

2019-03-28T22:52:10Z

Ianu: Created page with "= Overview = This article provides a short guide to setting up a DNSCrypt-Proxy server on Alpine Linux. Also see [https://dnscrypt.info dnscrypt.info]. Source code on [http..."

= Overview =

This article provides a short guide to setting up a DNSCrypt-Proxy server on Alpine Linux.

Also see [https://dnscrypt.info dnscrypt.info]. Source code on [https://github.com/jedisct1/dnscrypt-proxy github.com/jedisct1/dnscrypt-proxy]

= Features =
* DNS traffic encryption and authentication. Supports DNS-over-HTTPS (DoH) using TLS 1.3, and DNSCrypt.
* DNS query monitoring, with separate log files for regular and suspicious queries
* Filtering: block ads, malware, and other unwanted content. Compatible with all DNS services
* Time-based filtering, with a flexible weekly schedule
* Transparent redirection of specific domains to specific resolvers
* DNS caching, to reduce latency and improve privacy
and more...

== Installation ==
Install the {{Pkg|dnscrypt-proxy}} package:
{{Cmd|apk add dnscrypt-proxy dnscrypt-proxy-openrc}}

Also see [https://wiki.alpinelinux.org/wiki/Alpine_Linux_package_management Alpine Linux package management ].

== Service commands ==
Enable the dnscrypt-proxy service so that it starts at boot:
{{Cmd|rc-update add dnscrypt-proxy}}

List services to verify sshd is enabled:
{{Cmd|rc-status}}

Start the dnscrypt-proxy service immediately:
{{Cmd|/etc/init.d/dnscrypt-proxy start}}

{{Note|If you are running from RAM, ensure you save your settings using the 'lbu ci' command as necessary. See [https://wiki.alpinelinux.org/wiki/Alpine_local_backup Alpine local backup].}}
{{Note|Configuration options are shown in '''/etc/dnscrypt-proxy/dnscrypt-proxy.toml'''. The file includes comments that explain many of the options.}}
Also see [https://wiki.alpinelinux.org/wiki/Alpine_Linux_Init_System Alpine Linux Init System].

== Exposing the service on the local network ==
The main configuration file is '''/etc/dnscrypt-proxy/dnscrypt-proxy.toml'''. Any line starting with "#" will be ignored by ''dnscrypt-proxy''.
Replace
listen_addresses = ['127.0.0.1:53', '[::1]:53']
With
listen_addresses = [':53']
Then restart the service with
{{Cmd|/etc/init.d/dnscrypt-proxy restart}}

== Forwarding internal traffic to a local DNS server ==
The main configuration file is '''/etc/dnscrypt-proxy/dnscrypt-proxy.toml'''. Any line starting with "#" will be ignored by ''dnscrypt-proxy''.
Remove the "#" from the beginning of this line
# forwarding_rules = '/etc/dnscrypt-proxy/forwarding-rules.txt'
forwarding_rules = '/etc/dnscrypt-proxy/forwarding-rules.txt'

The copy the example file
{{Cmd|cp /usr/share/dnscrypt-proxy/example-forwarding-rules.txt /etc/dnscrypt-proxy/forwarding-rules.txt}}
Then edit the file, and add a line for your local network. If your network is configured as ".home", and your home router is at 192.168.1.1 then add
home 192.168.1.1

Then restart the service with
{{Cmd|/etc/init.d/dnscrypt-proxy restart}}

== Creating a Family Friendly DNS Service ==
Some providers have their own adult content blocking filters. They don't all use the same system, so researching may be worthwhile. The list of providers can be found here [https://dnscrypt.info/public-servers public-servers].
It might be unwise to select only one service in case it becomes unavailable. Edit '''/etc/dnscrypt-proxy/dnscrypt-proxy.toml''' and make an adjustment like this in the Global Settings
# server_names = ['scaleway-fr', 'google', 'yandex', 'cloudflare']
server_names = ['cleanbrowsing-family']

Then restart the service with
{{Cmd|/etc/init.d/dnscrypt-proxy restart}}

Tutorials and Howtos

2019-03-28T21:38:57Z

Ianu: Added link for dnscrypt-proxy in 'Other Servers'

[[Image:package_edutainment.svg|right|link=]]
{{TOC left}}
'''Welcome to Tutorials and Howtos, a place of basic and advanced configuration tasks for your Alpine Linux.'''

The tutorials are hands-on and the reader is expected to try and achieve the goals described in each step, possibly with the help of a good example. The output in one step is the starting point for the following step.

Howtos are smaller articles explaining how to perform a particular task with Alpine Linux.

We encourage people to send in both complete articles as well as requesting topics to be covered. If you think you have the skills and knowledge to write an Alpine Linux related article please do so on this Wiki. If you want to request a topic, please add your request in this page's [[Talk:Tutorials_and_Howtos|Discussion]].

{{Clear}}
== Storage ==

* [[Alpine local backup|Alpine local backup (lbu)]] ''(Permanently store your modifications in case your box needs reboot)'' 
** [[Back Up a Flash Memory Installation]] 
** [[Manually editing a existing apkovl]]

* [[Setting up disks manually]] 
* [[Setting up a software RAID array]]

* [[Raid Administration]]
* [[Setting up encrypted volumes with LUKS]]
* [[Setting up LVM on LUKS]]
* [[Setting up Logical Volumes with LVM]]
** [[Setting up LVM on GPT-labeled disks]]
** [[Installing on GPT LVM]]
* [[Filesystems|Formatting HD/Floppy/Other]] 

* [[Setting up iSCSI]]
** [[iSCSI Raid and Clustered File Systems]]
* [[Setting up NBD]]
* [[Setting up ZFS on LUKS]]
* [[High performance SCST iSCSI Target on Linux software Raid]] ''(deprecated)'' 
* [[Linux iSCSI Target (TCM)]]
* [[Disk Replication with DRBD]] 

* [[Burning ISOs]] 
* [[Partitioning and Bootmanagers]]
* [[Migrating data]]
* [[Create a bootable SDHC from a Mac]]
* [[Alpine on ARM]]

== Networking ==

* [[Configure Networking]]
* [[Connecting to a wireless access point]]
* [[Bonding]]
* [[Vlan]]
* [[Bridge]]
* [[OpenVSwitch]]
* [[How to configure static routes]]
* [[Configure a Wireguard interface (wg)]]

* [[Alpine Wall]] - [[How-To Alpine Wall]] - [[Alpine Wall User's Guide]] ''(a new firewall management framework)''

* [[PXE boot]]

* [[Using serial modem]]
* [[Using HSDPA modem]]
* [[Setting up Satellite Internet Connection]]
* [[Using Alpine on Windows domain with IPSEC isolation]]

* [[Setting up a ssh-server]] ''(Using ssh is a good way to administer your box remotely)'' 
* [[How to setup a wireless access point]] ''(Setting up Secure Wireless AP w/ WPA encryption with bridge to wired network)''
* [[Setting up a OpenVPN server with Alpine]] ''(Allowing single users or devices to remotely connect to your network)''

* [[Experiences with OpenVPN-client on ALIX.2D3]] 

* [[Generating SSL certs with ACF]] 
* [[Setting up unbound DNS server]]
* [[Setting up nsd DNS server]]
* [[TinyDNS Format]]
* [[Fault Tolerant Routing with Alpine Linux]] 
* [[Freeradius Active Directory Integration]]
* [[Multi_ISP]] ''(Dual-ISP setup with load-balancing and automatic failover)''
* [[OwnCloud]] ''(Installing OwnCloud)''

* [[Seafile: setting up your own private cloud]]

== Post-Install ==


* [[Alpine Linux package management|Package Management (apk)]] ''(How to add/remove packages on your Alpine)''

** [[Comparison with other distros]]
* [[Alpine local backup|Alpine local backup (lbu)]] ''(Permanently store your modifications in case your box needs reboot)''
** [[Back Up a Flash Memory Installation]] 
** [[Manually editing a existing apkovl]]
* [[Alpine Linux Init System|Init System (OpenRC)]] ''(Configure a service to automatically boot at next reboot)''
** [[Multiple Instances of Services]]

* [[Alpine setup scripts#setup-xorg-base|Setting up Xorg]]
* [[Upgrading Alpine]]


* [[Setting up a ssh-server]] ''(Using ssh is a good way to administer your box remotely)''
* [[setup-acf]] ''(Configures ACF (webconfiguration) so you can manage your box through https)''
* [[Changing passwords for ACF|Changing passwords]]
* [[Ansible]] ''(Configuration management)''

* [[Enable Serial Console on Boot]]

* [[How to get regular stuff working]] ''some notes on need-to-know topics''
* [[Installing Oracle Java]]
* [[Rsnapshot|Setting up periodic backups with <samp>rsnapshot</samp>]]

== Virtualization==

* [[Xen Dom0]] ''(Setting up Alpine as a dom0 for Xen hypervisor)''
* [[Xen Dom0 on USB or SD]]
* [[Create Alpine Linux PV DomU]]
* [[Xen PCI Passthrough]]
* [[Xen LiveCD]]
* [[qemu]]
* [[KVM]] ''(Setting up Alpine as a KVM hypervisor)''
* [[LXC]] ''(Setting up a Linux container in Alpine Linux)''
* [[Docker]]
* [[Install_Alpine_on_VirtualBox]]

== Desktop Environment ==

* [[Awesome(wm) Setup]]
* [[dwm]] ''(dynamic window manager for X)''
* [[EyeOS]] ''(Cloud Computing Desktop)''
* [[Gnome Setup]]
* [[MATE|MATE Setup]]
* [[Oneye]] ''(Cloud Computing Desktop - Dropbox Alternative)''
* [[Owncloud]] ''(Cloud Computing Desktop - Dropbox Alternative)''
** (to be merged with [[OwnCloud]] ''(Your personal Cloud for storing and sharing your data on-line)'')
* [[Remote Desktop Server]]
* [[Suspend on LID close]]
* [[Sway]]
* [[XFCE Setup]] and [[Xfce Desktop|Desktop Ideas]]
* [[Installing Adobe flash player for Firefox]]
* [[Sound Setup]]
* [[Printer Setup]]
* [[Default applications]]

== Raspberry Pi ==

* [[Raspberry Pi|Raspberry Pi (Installation)]]
* [[Classic install or sys mode on Raspberry Pi]]
* [[RPI Video Receiver]] ''(network video decoder using Rasperry Pi and omxplayer)''
* [[Linux Router with VPN on a Raspberry Pi]]
* [[Linux Router with VPN on a Raspberry Pi (IPv6)]]
* [[Raspberry Pi 3 - Configuring it as wireless access point -AP Mode]]
* [[Raspberry Pi 3 - Setting Up Bluetooth]]
* [[Raspberry Pi Zero W - Installation]]

== PowerPC ==

* [[Ppc64le|Powepc64le (Installation)]]

== IBM Z (IBM z Systems) ==

* [[s390x|s390x (Installation)]]

== Applications ==

=== Telephony ===
* [[Setting up Zaptel/Asterisk on Alpine]]
** [[Setting up Streaming an Asterisk Channel]]
* [[Freepbx on Alpine Linux]]
* [[FreePBX_V3]] ''(FreeSWITCH, Asterisk GUI web acces tool)''
* [[2600hz]] ''(FreeSWITCH, Asterisk GUI web access tool)''
* [[Kamailio]] ''(SIP Server, formerly OpenSER)''

=== Mail ===
* [[Hosting services on Alpine]] ''(Hosting mail, webservices and other services)''
** [[Hosting Web/Email services on Alpine]]
* [[ISP Mail Server HowTo]] 
** [[ISP Mail Server Upgrade 2.x]]
** [[ISP Mail Server 2.x HowTo]] ''(Beta, please test)''
** [[ISP Mail Server 3.x HowTo]]
* [[Roundcube]] ''(Webmail system)''
* [[Setting up postfix with virtual domains]]
* [[Protecting your email server with Alpine]]
* [[Setting up clamsmtp]]
* [[Setting up dovecot with imap and ssl]]
* [[relay email to gmail (msmtp, mailx, sendmail]]

=== HTTP ===
* [[Lighttpd]]
** [[Lighttpd Https access]]
** [[Setting Up Lighttpd with PHP]]
** [[Setting Up Lighttpd With FastCGI]]
* [[Cherokee]]
* [[Nginx]]
** [[Nginx_with_PHP#Nginx_with_PHP|Nginx with PHP]]
** [[Nginx as reverse proxy with acme (letsencrypt)]]
* [[Apache]]
** [[Apache with php-fpm]]
** [[Setting Up Apache with PHP]]
** [[Apache authentication: NTLM Single Signon]]

* [[High Availability High Performance Web Cache]] ''(uCarp + HAProxy for High Availability Services such as Squid web proxy)'' 

* [[Setting up Transparent Squid Proxy]] 
** [[SqStat]] ''(Script to look at active squid users connections)''
** [[Obtaining user information via SNMP]] ''(Using squark-auth-snmp as a Squid authentication helper)'' 
* [[Setting up Explicit Squid Proxy]]

* [[Drupal]] ''(Content Management System (CMS) written in PHP)''
* [[WordPress]] ''(Web software to create website or blog)''
* [[MediaWiki]] ''(Free web-based wiki software application)''
* [[DokuWiki]]
* [[Darkhttpd]]
* [[Tomcat]]

=== Other Servers ===
* [[Setting up a ssh-server]] ''(Using ssh is a good way to administer your box remotely)''

* [[Setting up a nfs-server]]
* [[Setting up a samba-server]] ''(standard file sharing)''
* [[Setting up a samba-ad-dc]] ''(Active Directory compatible domain controller)''
* [[Phpizabi]] ''(Social Networking Platform)''
* [[Statusnet]] ''(Microblogging Platform)''
* [[Pastebin]] ''(Pastebin software application)''
* [[Setting up Transmission (bittorrent) with Clutch WebUI]]

* [[Patchwork]] ''(Patch review management system)''
* [[Redmine]] ''(Project management system)''
* [[Request-Tracker]] ''(Ticket system)''
* [[OsTicket]] ''(Ticket system)''
* [[Setting up trac wiki|Trac]] ''(Enhanced wiki and issue tracking system for software development projects)''

* [[Cgit]]
** [[Setting up a git repository server with gitolite and cgit]] 
* [[Roundcube]] ''(Webmail system)''
* [[Glpi]] ''(Manage inventory of technical resources)''

* [[How to setup a Alpine Linux mirror]]
* [[Cups]]
* [[NgIRCd]] ''(Server for Internet Relay Chat/IRC)''
* [[How To Setup Your Own IRC Network]] ''(Using {{Pkg|charybdis}} and {{Pkg|atheme-iris}})''
* [[OpenVCP]] ''(VServer Control Panel)''
* [[Mahara]] ''(E-portfolio and social networking system)''
* [[Chrony and GPSD | Using chrony, gpsd, and a garmin LVC 18 as a Stratum 1 NTP source ]]
* [[Sending SMS using gnokii]]
* [[IPTV How To|Internet Protocol television (IPTV)]]
* [[UniFi_Controller]]
* [[DNSCrypt-Proxy]] ''Encrypt and authenticate DNS calls from your system''

=== Monitoring ===
* Setting up [[collectd]]
* [[Traffic monitoring]] 
* [[Setting up traffic monitoring using rrdtool (and snmp)]] 
* [[Setting up monitoring using rrdtool (and rrdcollect)]]
* [[Setting up Cacti|Cacti]] ''(Front-end for rrdtool networking monitor)''
* [[LTTng]] ''(Kernel and userspace tracing)''
* [[Setting up Zabbix|Zabbix]] ''(Monitor and track the status of network services and hardware)''
* [[Setting up A Network Monitoring and Inventory System]] ''(Nagios + OpenAudit and related components)'' 
** [[Setting up NRPE daemon]] ''(Performs remote Nagios checks)'' 
* [[Setting up Smokeping|Smokeping]] ''(Network latency monitoring)'' 
** [[Setting up MRTG and Smokeping to Monitor Bandwidth Usage and Network Latency]]
* [[Setting Up Fprobe And Ntop|Ntop]] ''(NetFlow collection and analysis using a remote fprobe instance)'' 
* [[Cvechecker]] ''(Compare installed packages for Common Vulnerabilities Exposure)'' 

* [[IP Accounting]] 
* [[Obtaining user information via SNMP]] ''(Using squark-auth-snmp as a Squid authentication helper)'' 
* [[SqStat]] ''(Script to look at active squid users connections)''

* [[Piwik]] ''(A real time web analytics software program)''
* [[Awstats]] ''(Free log file analyzer)''
* [[Intrusion Detection using Snort]]
** [[Intrusion Detection using Snort, Sguil, Barnyard and more]]
* [[Dglog]] ''(Log analyzer for the web content filter DansGuardian)''

* [[Webmin]] ''(A web-based interface for Linux system)''
* [[PhpPgAdmin]] ''(Web-based administration tool for PostgreSQL)''
* [[PhpMyAdmin]] ''(Web-based administration tool for MYSQL)''
* [[PhpSysInfo]] ''(A simple application that displays information about the host it's running on)''
* [[Linfo]]

* [[Setting up lm_sensors]]

* [[ZoneMinder video camera security and surveillance]]

== Misc ==

* [[:Category:Shell]]
* [[:Category:Programming]]
* [[Running glibc programs]]
* [[:Category:Drivers]]
* [[:Category:Multimedia]]
* [[Kernel Modesetting]]
* [[CPU frequency scaling]]

== Complete Solutions ==
* [[DIY Fully working Alpine Linux for Allwinner and Other ARM SOCs]]
* [[Replacing non-Alpine Linux with Alpine remotely]]
* [[High performance SCST iSCSI Target on Linux software Raid]]
* [[Fault Tolerant Routing with Alpine Linux]]
* [[Experiences with OpenVPN-client on ALIX.2D3]]
* [[Building a cloud with Alpine Linux]]

* [[ISP Mail Server HowTo]] ''(Postfix+PostfixAdmin+DoveCot+Roundcube+ClamAV+Spamd - A full-serivce ISP mail server)''
** [[ISP Mail Server Upgrade 2.x]]
** [[ISP Mail Server 2.x HowTo]] ''(Beta, please test)''
* [[High Availability High Performance Web Cache]] ''(uCarp + HAProxy for High Availability Services such as Squid web proxy)''
* [[Setting up A Network Monitoring and Inventory System]] ''(Nagios + OpenAudit and related components)'' 
* [[Streaming Security Camera Video with VLC]]
* [[Dynamic Multipoint VPN (DMVPN)]] combined with [[Small_Office_Services]]