da-MacMini: neues Gerät dokumentiert (Mac Mini 2021, Apple M1, macOS 26.5.1)
- 7 neue Seiten in da-MacMini/ (hardware, netzwerk, sicherheit, software, systemuebersicht, index, log) - Rohdaten in raw/ (Systemdaten-Dump 2026-06-28) - home.md aktualisiert: Gerätetabelle, Architektur-Diagramm, Sicherheits-Posture und Schnelllinks ergänzt
This commit is contained in:
@@ -0,0 +1,78 @@
|
||||
---
|
||||
title: hardware
|
||||
description:
|
||||
published: true
|
||||
date: 2026-06-28T20:45:00.000Z
|
||||
tags:
|
||||
editor: markdown
|
||||
dateCreated: 2026-06-28T20:45:00.000Z
|
||||
---
|
||||
|
||||
# Hardware – Mac Mini (da-MacMini)
|
||||
|
||||
**Zusammenfassung**: Mac Mini (2021) mit Apple M1-Chip, 16 GB RAM, 1 TB SSD. Angeschlossen: LG HDR DQHD (5120×1440), Samsung G2 Portable 500 GB (exFAT).
|
||||
**Quellen**: 🔌 Lokal (system_profiler)
|
||||
**Zuletzt aktualisiert**: 2026-06-28
|
||||
|
||||
---
|
||||
|
||||
## Modell
|
||||
|
||||
| Merkmal | Wert |
|
||||
|---|---|
|
||||
| **Modell** | Mac mini (2021) |
|
||||
| **Modell-Identifier** | `Macmini9,1` |
|
||||
| **Modell-Nummer** | `Z12P0007PD/A` |
|
||||
| **Chip** | Apple M1 |
|
||||
| **CPU** | 8 Kerne (4 Performance + 4 Efficiency) |
|
||||
| **GPU** | Apple M1 (8 Kerne), Metal 4 |
|
||||
| **Neural Engine** | 16 Kerne |
|
||||
| **RAM** | 16 GB LPDDR4 (Hynix) |
|
||||
| **SSD** | APPLE SSD AP1024Q (1 TB, PCIe/NVMe) |
|
||||
| **System-Firmware** | 18000.120.36 |
|
||||
|
||||
## Display
|
||||
|
||||
| Merkmal | Wert |
|
||||
|---|---|
|
||||
| **Monitor** | LG HDR DQHD |
|
||||
| **Auflösung** | 5120 × 1440 @ 60 Hz |
|
||||
| **Anschluss** | Thunderbolt / USB-C |
|
||||
| **Hauptmonitor** | Ja |
|
||||
|
||||
## Speicher (intern)
|
||||
|
||||
| Laufwerk | Typ | Größe | Dateisystem |
|
||||
|---|---|---|---|
|
||||
| `disk0` | APPLE SSD AP1024Q (intern) | 1,0 TB | APFS-Container |
|
||||
| `disk3s1` | Macintosh HD – Data | 994,7 GB (610 GB belegt) | APFS |
|
||||
| `disk3s3` | Macintosh HD (system) | 12,6 GB | APFS |
|
||||
| `disk3s4` | Preboot | 9,0 GB | APFS |
|
||||
| `disk3s5` | Recovery | 1,3 GB | APFS |
|
||||
|
||||
## Externe Laufwerke
|
||||
|
||||
| Laufwerk | Typ | Größe | Dateisystem | Anschluss |
|
||||
|---|---|---|---|---|
|
||||
| Samsung G2 Portable | Externe SSD | 500 GB | exFAT | USB |
|
||||
|
||||
## Thunderbolt / USB4
|
||||
|
||||
- **2 Thunderbolt/USB4-Busse** (je bis zu 40 Gb/s), beide intern verbaut
|
||||
- Aktuell keine externen Thunderbolt-Geräte angeschlossen
|
||||
|
||||
## Energie
|
||||
|
||||
| Merkmal | Wert |
|
||||
|---|---|
|
||||
| **Netzteil** | intern (eingebaut) |
|
||||
| **Bildschirm schlafen** | nach 60 Minuten |
|
||||
| **System schlafen** | nach 1 Minute |
|
||||
| **Wake on LAN** | Aktiviert |
|
||||
| **USV** | Keine |
|
||||
|
||||
## Verwandte Seiten
|
||||
|
||||
- [systemuebersicht](../Konfiguration/systemuebersicht.md)
|
||||
- [netzwerk](./netzwerk.md)
|
||||
- [sicherheit](./sicherheit.md)
|
||||
@@ -0,0 +1,66 @@
|
||||
---
|
||||
title: netzwerk
|
||||
description:
|
||||
published: true
|
||||
date: 2026-06-28T20:45:00.000Z
|
||||
tags:
|
||||
editor: markdown
|
||||
dateCreated: 2026-06-28T20:45:00.000Z
|
||||
---
|
||||
|
||||
# Netzwerk – Mac Mini (da-MacMini)
|
||||
|
||||
**Zusammenfassung**: Der Mac Mini ist per Wi-Fi mit dem Heimnetz verbunden. Ethernet ist aktuell deaktiviert. Hostname `da-MacMini`, IP `192.168.178.74`.
|
||||
**Quellen**: 🔌 Lokal (ifconfig, networksetup)
|
||||
**Zuletzt aktualisiert**: 2026-06-28
|
||||
|
||||
---
|
||||
|
||||
## Aktive Netzwerkschnittstelle
|
||||
|
||||
| Merkmal | Wert |
|
||||
|---|---|
|
||||
| **Schnittstelle** | `en1` (Wi-Fi) |
|
||||
| **IP-Adresse** | `192.168.178.74` |
|
||||
| **Subnetzmaske** | `255.255.255.0` |
|
||||
| **Gateway** | `192.168.178.1` (FritzBox) |
|
||||
| **DHCP** | Ja |
|
||||
| **MAC-Adresse** | `14:98:77:7f:fc:11` |
|
||||
| **Hostname** | `Macmini.fritz.box` / `da-MacMini` |
|
||||
| **IPv6** | Automatisch (keine Adresse vergeben) |
|
||||
|
||||
## Weitere Schnittstellen
|
||||
|
||||
| Interface | Typ | Status |
|
||||
|---|---|---|
|
||||
| `en0` | Ethernet (Built-in) | Deaktiviert (MAC: `14:98:77:75:b6:fb`) |
|
||||
| `en4`, `en5` | Ethernet-Adapter (USB-C) | Kein Kabel |
|
||||
| `en2`, `en3` | Thunderbolt | Kein Gerät |
|
||||
| `bridge0` | Thunderbolt Bridge | Kein Gerät |
|
||||
| `awdl0` | Apple Wireless Direct Link | Aktiv |
|
||||
| `llw0` | Low-Latency WLAN | Aktiv |
|
||||
|
||||
## DNS
|
||||
|
||||
- DNS wird per DHCP von der **FritzBox** (`192.168.178.1`) bezogen
|
||||
- Zusätzlich läuft **Pi-hole** auf dem PI2 (`192.168.178.44`) – sofern als DNS eingetragen
|
||||
|
||||
## Dienste
|
||||
|
||||
| Dienst | Status | Port |
|
||||
|---|---|---|
|
||||
| **SSH (Remote Login)** | ✅ Aktiv (launchd) | 22 (kein aktiver Listener) |
|
||||
| **Bildschirmfreigabe (VNC)** | ❌ Nicht aktiv | – |
|
||||
|
||||
## Erreichbarkeit
|
||||
|
||||
- **LAN**: Vollständig erreichbar unter `192.168.178.74`
|
||||
- **Internet**: Über FritzBox (NAT)
|
||||
- **Remote-Zugriff**: Kein SSH-Zugriff von außen (nur LAN)
|
||||
|
||||
## Verwandte Seiten
|
||||
|
||||
- [hardware](./hardware.md)
|
||||
- [sicherheit](./sicherheit.md)
|
||||
- [systemuebersicht](../Konfiguration/systemuebersicht.md)
|
||||
- [PI2: Pi-hole](../../PI2/Konfiguration/dienste/pihole.md)
|
||||
@@ -0,0 +1,64 @@
|
||||
---
|
||||
title: sicherheit
|
||||
description:
|
||||
published: true
|
||||
date: 2026-06-28T20:45:00.000Z
|
||||
tags:
|
||||
editor: markdown
|
||||
dateCreated: 2026-06-28T20:45:00.000Z
|
||||
---
|
||||
|
||||
# Sicherheit – Mac Mini (da-MacMini)
|
||||
|
||||
**Zusammenfassung**: macOS-Firewall aktiv, FileVault verschlüsselt die SSD, SIP ist eingeschaltet. SSH-Dienst aktiv (nur LAN). Keine Plattenverschlüsselung auf externer Samsung-SSD.
|
||||
**Quellen**: 🔌 Lokal (Systemeinstellungen, csrutil, fdesetup)
|
||||
**Zuletzt aktualisiert**: 2026-06-28
|
||||
|
||||
---
|
||||
|
||||
## Übersicht
|
||||
|
||||
| Maßnahme | Status |
|
||||
|---|---|
|
||||
| **FileVault (Vollplattenverschlüsselung)** | ✅ **Aktiv** (APFS-Verschlüsselung) |
|
||||
| **Firewall (macOS)** | ✅ **Aktiv** |
|
||||
| **System Integrity Protection (SIP)** | ✅ **Aktiv** |
|
||||
| **SSH (Remote Login)** | ⚠️ Aktiv (nur LAN – Port 22) |
|
||||
| **Automatische Updates** | ✅ Aktiv (Standard) |
|
||||
| **Gast-Benutzer** | ❌ Deaktiviert |
|
||||
|
||||
## Benutzer
|
||||
|
||||
| Benutzer | UID | Gruppe(n) | Shell |
|
||||
|---|---|---|---|
|
||||
| `dirkaltmann` | 501 | staff, admin, `_developer`, `com.apple.access_ssh` | zsh |
|
||||
| `macports` | – | Service-User | – |
|
||||
|
||||
> Hinweis: `dirkaltmann` ist Administrator (sudo-Rechte). Der Service-User `macports` wird von MacPorts für Paketverwaltung genutzt.
|
||||
|
||||
## SSH-Zugang
|
||||
|
||||
- **Remote Login**: Aktiviert (via launchd: `com.openssh.sshd`)
|
||||
- **Aktive Verbindungen**: Derzeit kein aktiver Listener auf Port 22
|
||||
- **Zugriff**: Nur aus dem LAN (`192.168.178.0/24`)
|
||||
- **Root-Login**: Per SSH deaktiviert (`PermitRootLogin prohibit-password`)
|
||||
- **Leere Passwörter**: Deaktiviert (`PermitEmptyPasswords no`)
|
||||
|
||||
## Externe Laufwerke
|
||||
|
||||
| Laufwerk | Verschlüsselung | Risiko |
|
||||
|---|---|---|
|
||||
| **Samsung G2 Portable** (500 GB, exFAT) | ❌ **Keine** | Daten im Klartext bei Verlust/Diebstahl |
|
||||
|
||||
## Bewertung
|
||||
|
||||
- **Stärken**: FileVault, Firewall und SIP bieten einen soliden Basisschutz.
|
||||
- **Schwächen**: Externes Laufwerk unverschlüsselt; SSH auf Standard-Port 22 aktiv (wenn auch nur LAN).
|
||||
- **Empfehlung**: Externes Laufwerk verschlüsseln (z. B. via APFS-verschlüsselt reformatieren oder VeraCrypt/Cryptomator nutzen).
|
||||
|
||||
## Verwandte Seiten
|
||||
|
||||
- [hardware](./hardware.md)
|
||||
- [netzwerk](./netzwerk.md)
|
||||
- [software](./software.md)
|
||||
- [PI5: Sicherheit](../../PI5/Allgemein/sicherheit.md)
|
||||
@@ -0,0 +1,92 @@
|
||||
---
|
||||
title: software
|
||||
description:
|
||||
published: true
|
||||
date: 2026-06-28T20:45:00.000Z
|
||||
tags:
|
||||
editor: markdown
|
||||
dateCreated: 2026-06-28T20:45:00.000Z
|
||||
---
|
||||
|
||||
# Software – Mac Mini (da-MacMini)
|
||||
|
||||
**Zusammenfassung**: macOS 26.5.1 "Tahoe" mit Homebrew (86 Formulae), MacPorts und zahlreichen Anwendungen. OpenWork (opencode) v1.4.9 ist installiert.
|
||||
**Quellen**: 🔌 Lokal
|
||||
**Zuletzt aktualisiert**: 2026-06-28
|
||||
|
||||
---
|
||||
|
||||
## Betriebssystem
|
||||
|
||||
| Merkmal | Wert |
|
||||
|---|---|
|
||||
| **OS** | macOS 26.5.1 "Tahoe" (Build 25F80) |
|
||||
| **Kernel** | Darwin 25.5.0 (XNU 12377.121.6~2) |
|
||||
| **Architektur** | arm64 (Apple Silicon) |
|
||||
| **Systemsprache** | Deutsch (de_DE) |
|
||||
|
||||
## Paketverwaltung
|
||||
|
||||
| Tool | Version | Formulae/Pakete |
|
||||
|---|---|---|
|
||||
| **Homebrew** | 5.1.8 | 86 Formulae, 1 Cask (xquartz) |
|
||||
| **MacPorts** | – | Installiert (Service-User `macports`) |
|
||||
|
||||
## Wichtige Anwendungen
|
||||
|
||||
### Entwicklung & Code
|
||||
- **Xcode** (mit Swift Playgrounds)
|
||||
- **Visual Studio Code**
|
||||
- **GitHub Desktop**
|
||||
- **Postman**
|
||||
- **SapMachine Manager** (Java)
|
||||
|
||||
### Produktivität & Büro
|
||||
- **LibreOffice**
|
||||
- **Adobe Acrobat DC**
|
||||
- **CotEditor**
|
||||
- **Obsidian** (Notizen/Wiki)
|
||||
- **Joplin**
|
||||
- **draw.io** (Diagramme)
|
||||
|
||||
### Internet & Kommunikation
|
||||
- **Google Chrome**, **Brave Browser**, **Firefox**, **Safari**, **Tor Browser**, **DuckDuckGo**
|
||||
- **Telegram**, **WhatsApp**, **Twitter**
|
||||
- **DeepL**
|
||||
- **Microsoft To Do**
|
||||
|
||||
### Cloud & Synchronisation
|
||||
- **Nextcloud** (Desktop-Client)
|
||||
- **OneDrive**
|
||||
- **Cryptomator** (Client-seitige Verschlüsselung)
|
||||
- **Obsidian Web Clipper**
|
||||
|
||||
### Docker & Virtualisierung
|
||||
- **Docker Desktop**
|
||||
- **VirtualBox**
|
||||
- **UTM** (QEMU-basiert)
|
||||
|
||||
### Multimedia
|
||||
- **Spotify**, **Plexamp**, **Plex Dash**
|
||||
- **Audacity**, **Shotcut** (Video)
|
||||
- **GIMP**, **Inkscape**, **Pinta** (Grafik)
|
||||
- **MusicBrainz Picard**, **Mp3tag** (Musik-Tagging)
|
||||
- **Kindle**, **Shazam**, **Last.fm**
|
||||
|
||||
### Heimnetz & Tools
|
||||
- **OpenWork** (opencode v1.4.9)
|
||||
- **Immich** (Desktop-Client)
|
||||
- **HOOBS** (Desktop-Client)
|
||||
- **Stirling-PDF** (PDF-Bearbeitung)
|
||||
- **Strongbox** (Passwort-Manager)
|
||||
- **MacPass** (KeePass-Client)
|
||||
- **PDFgear**
|
||||
- **Termius** (SSH-Client)
|
||||
- **Betterbird** (E-Mail)
|
||||
- **AusweisApp** (eID)
|
||||
|
||||
## Verwandte Seiten
|
||||
|
||||
- [hardware](./hardware.md)
|
||||
- [systemuebersicht](../Konfiguration/systemuebersicht.md)
|
||||
- [da-desktop: software](../../da-desktop/Allgemein/software.md)
|
||||
@@ -0,0 +1,70 @@
|
||||
---
|
||||
title: systemuebersicht
|
||||
description:
|
||||
published: true
|
||||
date: 2026-06-28T20:45:00.000Z
|
||||
tags:
|
||||
editor: markdown
|
||||
dateCreated: 2026-06-28T20:45:00.000Z
|
||||
---
|
||||
|
||||
# Systemübersicht – Mac Mini (da-MacMini)
|
||||
|
||||
**Zusammenfassung**: Mac Mini (2021) mit Apple M1, 16 GB RAM, 1 TB SSD. Läuft mit macOS 26.5.1 und dient als primärer Arbeitsplatzrechner und OpenWork-Host.
|
||||
**Quellen**: 🔌 Lokal
|
||||
**Zuletzt aktualisiert**: 2026-06-28
|
||||
|
||||
---
|
||||
|
||||
## Basis-Daten
|
||||
|
||||
| Merkmal | Wert |
|
||||
|---|---|
|
||||
| **Hostname** | `da-MacMini` (FQDN: `Macmini.fritz.box`) |
|
||||
| **Betriebssystem** | macOS 26.5.1 "Tahoe" (Build 25F80) |
|
||||
| **Kernel** | Darwin 25.5.0 (arm64) |
|
||||
| **Chip** | Apple M1 (8 Kerne) |
|
||||
| **RAM** | 16 GB LPDDR4 |
|
||||
| **SSD** | 1 TB APPLE SSD AP1024Q (APFS) |
|
||||
| **Freier Speicher** | ~337 GB (von ~926 GB nutzbar) |
|
||||
| **Extern** | Samsung G2 Portable 500 GB (exFAT, ~193 GB frei) |
|
||||
| **Betriebszeit** | Siehe `uptime` |
|
||||
| **Display** | LG HDR DQHD 5120×1440 @ 60 Hz |
|
||||
|
||||
## Sicherheit
|
||||
|
||||
| Maßnahme | Status |
|
||||
|---|---|
|
||||
| **FileVault** | ✅ Aktiv |
|
||||
| **Firewall** | ✅ Aktiv |
|
||||
| **SIP** | ✅ Aktiv |
|
||||
|
||||
## Netzwerk
|
||||
|
||||
| Merkmal | Wert |
|
||||
|---|---|
|
||||
| **IP-Adresse** | `192.168.178.74` |
|
||||
| **Schnittstelle** | Wi-Fi (`en1`) |
|
||||
| **Gateway** | `192.168.178.1` (FritzBox) |
|
||||
| **SSH** | ✅ Aktiv (nur LAN) |
|
||||
|
||||
## Installierte Software (Überblick)
|
||||
|
||||
| Bereich | Beispiele |
|
||||
|---|---|
|
||||
| **Entwicklung** | Xcode, VS Code, GitHub Desktop, Postman, Homebrew (86 Formulae) |
|
||||
| **Browser** | Chrome, Firefox, Brave, Safari, Tor, DuckDuckGo |
|
||||
| **Cloud** | Nextcloud, OneDrive, Cryptomator |
|
||||
| **Docker** | Docker Desktop, VirtualBox, UTM |
|
||||
| **Multimedia** | Spotify, Plexamp, GIMP, Inkscape, Shotcut, Audacity |
|
||||
| **Büro** | LibreOffice, Adobe Acrobat, Obsidian, Joplin |
|
||||
| **Heimnetz** | OpenWork v1.4.9, Immich Client, HOOBS Client |
|
||||
| **Sicherheit** | Strongbox, MacPass, Cryptomator |
|
||||
|
||||
## Verwandte Seiten
|
||||
|
||||
- [hardware](../Allgemein/hardware.md)
|
||||
- [netzwerk](../Allgemein/netzwerk.md)
|
||||
- [sicherheit](../Allgemein/sicherheit.md)
|
||||
- [software](../Allgemein/software.md)
|
||||
- [index](../index.md)
|
||||
@@ -0,0 +1,37 @@
|
||||
---
|
||||
title: index
|
||||
description:
|
||||
published: true
|
||||
date: 2026-06-28T20:45:00.000Z
|
||||
tags:
|
||||
editor: markdown
|
||||
dateCreated: 2026-06-28T20:45:00.000Z
|
||||
---
|
||||
|
||||
# Konfigurationsindex – Mac Mini (da-MacMini)
|
||||
|
||||
**Zusammenfassung**: Inhaltsverzeichnis aller Konfigurationsseiten des Mac Mini `da-MacMini`.
|
||||
**Quellen**: 🔌 Lokal
|
||||
**Zuletzt aktualisiert**: 2026-06-28
|
||||
|
||||
---
|
||||
|
||||
## System & Hardware
|
||||
|
||||
| Seite | Quelle |
|
||||
|---|---|
|
||||
| [systemuebersicht](./Konfiguration/systemuebersicht.md) – macOS, Kernel, RAM, Speicherbelegung | 🔌 Lokal (28.06.) |
|
||||
| [hardware](./Allgemein/hardware.md) – Mac Mini (2021), Apple M1, 16 GB RAM, 1 TB SSD, Display | 🔌 Lokal (28.06.) |
|
||||
| [netzwerk](./Allgemein/netzwerk.md) – Wi-Fi, IP `192.168.178.74`, DNS, Ports | 🔌 Lokal (28.06.) |
|
||||
| [sicherheit](./Allgemein/sicherheit.md) – FileVault, Firewall, SIP, SSH, Benutzer | 🔌 Lokal (28.06.) |
|
||||
| [software](./Allgemein/software.md) – macOS 26.5.1, Homebrew, Anwendungen | 🔌 Lokal (28.06.) |
|
||||
|
||||
## Änderungsverlauf
|
||||
|
||||
- [log](./log.md) – Vollständiges Änderungslog aller Konfigurationsänderungen
|
||||
|
||||
---
|
||||
|
||||
## Quelldokumente
|
||||
|
||||
- `raw/Systemdaten – Mac Mini – 2026-06-28.md` – Systemdaten-Auszug (28.06.2026)
|
||||
@@ -0,0 +1,26 @@
|
||||
---
|
||||
title: log
|
||||
description:
|
||||
published: true
|
||||
date: 2026-06-28T20:45:00.000Z
|
||||
tags:
|
||||
editor: markdown
|
||||
dateCreated: 2026-06-28T20:45:00.000Z
|
||||
---
|
||||
|
||||
# Änderungslog – Systemkonfiguration Mac Mini (da-MacMini)
|
||||
|
||||
**Zusammenfassung**: Chronologische Übersicht aller Änderungen an der Systemkonfiguration.
|
||||
**Quellen**: Eigene Aufzeichnungen
|
||||
**Zuletzt aktualisiert**: 2026-06-28
|
||||
|
||||
**Legende**:
|
||||
- 🔌 Lokal – Daten direkt auf dem Mac Mini erhoben (lesend)
|
||||
- 🧑 Benutzer – manuelle Änderung auf dem Mac Mini durch den Benutzer
|
||||
|
||||
---
|
||||
|
||||
| Datum | Typ | Uhrzeit | Quelle | Zugriff | Änderung |
|
||||
|---|---|---|---|---|---|
|
||||
| 2026-06-28 | Neu | 20:45 | Alle Seiten | 🔌 Lokal | Mac Mini als neues Gerät `da-MacMini` aufgenommen: hardware, netzwerk, sicherheit, software, systemuebersicht, index, log |
|
||||
| 2026-06-28 | Daten | 20:45 | `raw/Systemdaten – Mac Mini – 2026-06-28.md` | 🔌 Lokal | Systemdaten-Dump via system_profiler, ifconfig, sw_vers |
|
||||
@@ -12,17 +12,18 @@ dateCreated: 2026-06-28T14:29:11.359Z
|
||||
|
||||
**Zusammenfassung**: Übersicht über alle dokumentierten Geräte im Heimnetz `192.168.178.0/24`.
|
||||
**Quellen**: 🔌 SSH, 🔌 Lokal, Systemabfragen
|
||||
**Zuletzt aktualisiert**: 2026-06-28 (PI5 Live-Daten, Index-Umbenennung)
|
||||
**Zuletzt aktualisiert**: 2026-06-28 (PI5 Live-Daten, Index-Umbenennung, Mac Mini aufgenommen)
|
||||
|
||||
---
|
||||
|
||||
## Geräte
|
||||
|
||||
| Gerät | Hostname | IP | OS | Zweck |
|
||||
| ----------------------------------------- | --------------- | ---------------- | ------------------------------- | ------------------------------------------------- |
|
||||
| --------------------------------------------------- | --------------- | ---------------- | -------------------------------------- | ------------------------------------------------- |
|
||||
| [PI5 (Raspberry Pi 5)](./PI5/index.md) | `da-server-pi5` | `192.168.178.77` | Debian 13 "trixie" (arm64) | Docker-Host, Traefik, SSO, Webservices |
|
||||
| [PI2 (Raspberry Pi 2)](./PI2/index.md) | `hoobs` | `192.168.178.44` | Raspbian 11 "bullseye" (armv7l) | HOOBS/Homebridge, Pi-hole, Apache, Dateifreigaben |
|
||||
| [da-desktop (HP Pavilion)](./da-desktop/Konfiguration/index.md) | `da-Desktop` | `192.168.178.54` | Linux Mint 22.3 "Zena" (x86_64) | Arbeitsplatzrechner |
|
||||
| [da-MacMini (Mac Mini)](./da-MacMini/index.md) | `da-MacMini` | `192.168.178.74` | macOS 26.5.1 "Tahoe" (arm64) | Arbeitsplatzrechner, OpenWork-Host |
|
||||
|
||||
## Netzwerk-Architektur
|
||||
|
||||
@@ -32,27 +33,28 @@ Internet
|
||||
├── FritzBox (192.168.178.1)
|
||||
│ ├── PI5 (192.168.178.77) ─── Docker ─── Traefik (Proxy)
|
||||
│ ├── PI2 (192.168.178.44) ─── HOOBS, Pi-hole, Apache, Samba
|
||||
│ └── da-Desktop (192.168.178.54)
|
||||
│ ├── da-Desktop (192.168.178.54) ─── Linux Mint (Arbeitsplatz)
|
||||
│ └── da-MacMini (192.168.178.74) ─── macOS (Arbeitsplatz, OpenWork)
|
||||
│
|
||||
└── Domain: da.home-webserver.de → PI5 (Ports 80/443)
|
||||
```
|
||||
|
||||
## Sicherheits-Posture (Überblick)
|
||||
|
||||
| Bereich | PI5 | PI2 | da-desktop |
|
||||
|---|---|---|---|
|
||||
| **SSH-Zugang** | ✅ Passwort + Key | ✅ Key-only | ⚠️ Nur Passwort (lokal) |
|
||||
| **Firewall** | ✅ iptables (Docker) + ufw | ❌ Nicht aktiv | ✅ ufw (Port 22) |
|
||||
| **Plattenverschlüsselung** | ✅ LUKS (System + Daten) | ⚠️ SD-Karte unverschlüsselt | ❌ **Keine** (SSD + HDD offen) |
|
||||
| **Remote-Zugriff** | ✅ Über Domain + Cloudflare Tunnel | ❌ Nur LAN | ❌ Nur lokal |
|
||||
| **Letzter Security-Check** | 28.06.2026 | 19.06.2026 | 28.06.2026 |
|
||||
| Bereich | PI5 | PI2 | da-desktop | da-MacMini |
|
||||
|---|---|---|---|---|---|
|
||||
| **SSH-Zugang** | ✅ Passwort + Key | ✅ Key-only | ⚠️ Nur Passwort (lokal) | ⚠️ Aktiv (nur LAN) |
|
||||
| **Firewall** | ✅ iptables (Docker) + ufw | ❌ Nicht aktiv | ✅ ufw (Port 22) | ✅ macOS-Firewall |
|
||||
| **Plattenverschlüsselung** | ✅ LUKS (System + Daten) | ⚠️ SD-Karte unverschlüsselt | ❌ **Keine** (SSD + HDD offen) | ✅ FileVault (System) |
|
||||
| **Remote-Zugriff** | ✅ Über Domain + Cloudflare Tunnel | ❌ Nur LAN | ❌ Nur lokal | ❌ Nur lokal |
|
||||
| **Letzter Security-Check** | 28.06.2026 | 19.06.2026 | 28.06.2026 | 28.06.2026 |
|
||||
|
||||
> **⚠ Kritisch**: Der **da-desktop** hat keine Festplattenverschlüsselung – siehe [Sicherheitshinweise](./da-desktop/Allgemein/sicherheit.md).
|
||||
> **⚠ Kritisch**: Der **da-desktop** hat keine Festplattenverschlüsselung – siehe [Sicherheitshinweise](./da-desktop/Allgemein/sicherheit.md). Die externe Samsung-SSD am **da-MacMini** ist ebenfalls unverschlüsselt – siehe [Sicherheitshinweise](./da-MacMini/Allgemein/sicherheit.md).
|
||||
|
||||
## Repository
|
||||
|
||||
- Dieses Verzeichnis (`da-Heim-Netz/`) ist ein **Git-Repository**
|
||||
- 12 Commits: `1bb79dc` (initial) → `d9501ee` (Letzter: PI5 Live-Daten 28.06.)
|
||||
- 12 Commits (vor Mac-Mini-Aufnahme)
|
||||
- **Remote**: `git.da.home-webserver.de/devDiAl/da-HomeNetDocumentation.git`
|
||||
- Änderungen werden vor Commit vom Benutzer abgenommen
|
||||
|
||||
@@ -72,3 +74,6 @@ Internet
|
||||
- [PI2: HOOBS](./PI2/Konfiguration/dienste/hoobs.md)
|
||||
- [da-desktop: Systemübersicht](./da-desktop/Konfiguration/systemuebersicht.md)
|
||||
- [da-desktop: Sicherheitslücken](./da-desktop/Allgemein/sicherheit.md)
|
||||
- [da-MacMini: Systemübersicht](./da-MacMini/Konfiguration/systemuebersicht.md)
|
||||
- [da-MacMini: Hardware](./da-MacMini/Allgemein/hardware.md)
|
||||
- [da-MacMini: Software](./da-MacMini/Allgemein/software.md)
|
||||
|
||||
@@ -0,0 +1,128 @@
|
||||
---
|
||||
title: Systemdaten – HP Pavilion Desktop (da-desktop) – 2026-06-28
|
||||
description: Rohdaten der lokalen Systemabfrage des HP Pavilion Desktop
|
||||
published: true
|
||||
date: 2026-06-28T20:25:00.000Z
|
||||
tags: raw, da-desktop, systemdaten
|
||||
editor: markdown
|
||||
dateCreated: 2026-06-28T20:25:00.000Z
|
||||
---
|
||||
|
||||
# Systemdaten – HP Pavilion Desktop (da-desktop) – 2026-06-28
|
||||
|
||||
> **Quelle**: 🔌 Lokal (direkte Systemabfrage)
|
||||
> **Datum/Zeit**: 2026-06-28 20:25 Uhr
|
||||
> **Host**: `da-Desktop` (192.168.178.54)
|
||||
|
||||
---
|
||||
|
||||
## System
|
||||
|
||||
```
|
||||
Hostname : da-Desktop
|
||||
Uptime : up 9:04 (Reboot 28.06.2026 11:21)
|
||||
Kernel : Linux da-Desktop 6.17.0-35-generic #35~24.04.1-Ubuntu SMP PREEMPT_DYNAMIC x86_64
|
||||
OS : Linux Mint 22.3 "Zena" (x86_64)
|
||||
Ubuntu 24.04 LTS "noble" base
|
||||
Load : 1.71 / 0.96 / 0.60 (moderat)
|
||||
Memory : 15Gi total, 5,1Gi used, 3,6Gi free, 7,9Gi buff/cache, 10Gi available
|
||||
Swap : 2,0Gi total, 734Mi used, 1,3Gi free
|
||||
CPU Temp : ~46°C (mehrere Kerne, Max ~51°C)
|
||||
CPU Freq : ~3741 MHz avg (11th Gen i5-11400)
|
||||
```
|
||||
|
||||
## Speicher (df -h)
|
||||
|
||||
```
|
||||
/dev/nvme0n1p2 468G 48G 397G 11% /
|
||||
/dev/nvme0n1p1 511M 6,2M 505M 2% /boot/efi
|
||||
/dev/sda2 932G 769G 163G 83% /mnt/data (ntfs, Label: Data)
|
||||
```
|
||||
|
||||
## Blockgeräte (lsblk)
|
||||
|
||||
```
|
||||
NAME SIZE TYPE FSTYPE LABEL MODEL MOUNTPOINT
|
||||
sda 931,5G disk WDC WD10EFRX-68FYTN0
|
||||
├─sda1 16M part
|
||||
└─sda2 931,5G part ntfs Data /mnt/data
|
||||
nvme0n1 476,9G disk INTEL SSDPEKNW512G8H
|
||||
├─nvme0n1p1 512M part vfat /boot/efi
|
||||
└─nvme0n1p2 476,4G part ext4 /
|
||||
```
|
||||
|
||||
## Netzwerk
|
||||
|
||||
```
|
||||
wlp2s0: 192.168.178.54/24 (WLAN, Realtek RTL8821CE)
|
||||
Gateway: 192.168.178.1 (FritzBox)
|
||||
DNS: 192.168.178.1 (via systemd-resolved 127.0.0.53)
|
||||
MAC: 74:12:b3:f5:08:3d
|
||||
|
||||
enp1s0: DOWN (Ethernet Realtek RTL8111)
|
||||
|
||||
Listening Ports (öffentlich):
|
||||
22/tcp – SSH (sshd)
|
||||
57621/tcp – Spotify
|
||||
39121/tcp – Spotify
|
||||
|
||||
Listening Ports (localhost):
|
||||
53/udp+tcp – systemd-resolved
|
||||
631/tcp – cupsd
|
||||
9050/tcp – Tor
|
||||
9223/tcp – OpenWork DevTools
|
||||
37597/tcp – OpenWork Desktop
|
||||
40479/tcp – OpenWork Desktop
|
||||
43499/tcp – OpenWork Codex
|
||||
```
|
||||
|
||||
## SSH-Konfiguration
|
||||
|
||||
```
|
||||
KbdInteractiveAuthentication no
|
||||
UsePAM yes
|
||||
```
|
||||
|
||||
## Firewall (UFW)
|
||||
|
||||
- Installiert: ja (ufw 0.36.2-6)
|
||||
- ufw.service: enabled, active (exited)
|
||||
- /etc/ufw/ufw.conf: ENABLED=yes
|
||||
- Regex: Port 22/tcp freigegeben (SSH), Rest default deny
|
||||
|
||||
## Systemd Enabled Services (Auszug, 72 Einträge)
|
||||
|
||||
Wichtige Services:
|
||||
- cups.service / cups-browsed.service – Druckserver
|
||||
- cron.service – Cron-Daemon
|
||||
- avahi-daemon.service – mDNS/Bonjour
|
||||
- bluetooth.service – Bluetooth
|
||||
- apparmor.service – MAC
|
||||
- NetworkManager.service – Netzwerk
|
||||
- anacron.service – Verzögerte Cron-Jobs
|
||||
- ufw.service – Firewall
|
||||
- ssh.service / ssh.socket – SSH-Server
|
||||
- lm-sensors.service – Sensor-Überwachung
|
||||
|
||||
## Aktuelle Prozesse (Top nach RAM)
|
||||
|
||||
| Prozess | RAM | CPU | Laufzeit |
|
||||
|---|---|---|---|
|
||||
| Spotify (Renderer) | 4,7% | 10,8% | seit 11:23 |
|
||||
| Brave | 3,0% | 3,7% | seit 11:41 |
|
||||
| OpenWork Codex | 2,9% | 29,8% | seit 20:24 |
|
||||
| Spotify (Haupt) | 2,8% | 4,1% | seit 11:23 |
|
||||
| OpenWork Desktop | 2,4% | 41,8% | seit 20:24 |
|
||||
| Xorg | 1,5% | 3,7% | seit 11:21 |
|
||||
| Brave (Renderers) | je ~1,3% | – | – |
|
||||
| Nextcloud | 1,2% | 0,5% | seit 11:22 |
|
||||
| KeePassXC | 0,9% | 0,0% | seit 11:22 |
|
||||
|
||||
## Benutzer
|
||||
|
||||
| User | UID | Gruppen |
|
||||
|---|---|---|
|
||||
| dial | 1000 | dial adm cdrom sudo audio dip plugdev users lpadmin sambashare |
|
||||
|
||||
---
|
||||
*Rohdaten – nicht zur direkten Anzeige, sondern als Quelle für Dokumentations-Updates.*
|
||||
@@ -0,0 +1,167 @@
|
||||
# Systemdaten – Mac Mini (da-MacMini)
|
||||
|
||||
**Erfasst am**: 2026-06-28 20:36:41
|
||||
**Host**: Macmini.fritz.box
|
||||
|
||||
---
|
||||
|
||||
## 1. System-Grunddaten
|
||||
|
||||
```
|
||||
ProductName: macOS
|
||||
ProductVersion: 26.5.1
|
||||
BuildVersion: 25F80
|
||||
Macmini9,1
|
||||
Apple M1
|
||||
Cores: 8
|
||||
RAM: 16 GB
|
||||
Darwin Macmini.fritz.box 25.5.0 Darwin Kernel Version 25.5.0: Mon Apr 27 20:38:00 PDT 2026; root:xnu-12377.121.6~2/RELEASE_ARM64_T8103 arm64
|
||||
```
|
||||
|
||||
## 2. Speicher & Laufwerke
|
||||
|
||||
```
|
||||
/dev/disk0 (internal, physical):
|
||||
#: TYPE NAME SIZE IDENTIFIER
|
||||
0: GUID_partition_scheme *1.0 TB disk0
|
||||
1: Apple_APFS_ISC Container disk2 524.3 MB disk0s1
|
||||
2: Apple_APFS Container disk3 994.7 GB disk0s2
|
||||
3: Apple_APFS_Recovery Container disk1 5.4 GB disk0s3
|
||||
|
||||
/dev/disk3 (synthesized):
|
||||
#: TYPE NAME SIZE IDENTIFIER
|
||||
0: APFS Container Scheme - +994.7 GB disk3
|
||||
Physical Store disk0s2
|
||||
1: APFS Volume Macintosh HD - Data 609.6 GB disk3s1
|
||||
2: APFS Volume Macintosh HD 12.6 GB disk3s3
|
||||
3: APFS Snapshot com.apple.os.update-... 12.6 GB disk3s3s1
|
||||
4: APFS Volume Preboot 9.0 GB disk3s4
|
||||
5: APFS Volume Recovery 1.3 GB disk3s5
|
||||
6: APFS Volume VM 20.5 KB disk3s6
|
||||
|
||||
/dev/disk6 (external, physical):
|
||||
#: TYPE NAME SIZE IDENTIFIER
|
||||
0: GUID_partition_scheme *500.1 GB disk6
|
||||
1: EFI EFI 209.7 MB disk6s1
|
||||
2: Microsoft Basic Data Samsung G2 499.9 GB disk6s2
|
||||
|
||||
|
||||
Filesystem Size Used Avail Capacity iused ifree %iused Mounted on
|
||||
/dev/disk3s3s1 926Gi 12Gi 337Gi 4% 459k 3.5G 0% /
|
||||
devfs 206Ki 206Ki 0Bi 100% 715 0 100% /dev
|
||||
/dev/disk3s6 926Gi 20Ki 337Gi 1% 0 3.5G 0% /System/Volumes/VM
|
||||
/dev/disk3s4 926Gi 8.4Gi 337Gi 3% 1.5k 3.5G 0% /System/Volumes/Preboot
|
||||
/dev/disk3s2 926Gi 59Mi 337Gi 1% 66 3.5G 0% /System/Volumes/Update
|
||||
/dev/disk2s2 500Mi 6.0Mi 483Mi 2% 1 4.9M 0% /System/Volumes/xarts
|
||||
/dev/disk2s1 500Mi 5.7Mi 483Mi 2% 30 4.9M 0% /System/Volumes/iSCPreboot
|
||||
/dev/disk2s3 500Mi 876Ki 483Mi 1% 43 4.9M 0% /System/Volumes/Hardware
|
||||
/dev/disk3s1 926Gi 568Gi 337Gi 63% 1.9M 3.5G 0% /System/Volumes/Data
|
||||
map auto_home 0Bi 0Bi 0Bi 100% 0 0 - /System/Volumes/Data/home
|
||||
/dev/disk6s2 466Gi 286Gi 180Gi 62% 1 0 100% /Volumes/Samsung G2
|
||||
```
|
||||
|
||||
## 3. Netzwerk
|
||||
|
||||
```
|
||||
en1: flags=8863<UP,BROADCAST,SMART,RUNNING,SIMPLEX,MULTICAST> mtu 1500
|
||||
options=6460<TSO4,TSO6,CHANNEL_IO,PARTIAL_CSUM,ZEROINVERT_CSUM>
|
||||
ether 42:e2:47:fe:8a:a1
|
||||
inet6 fe80::d7:d565:e5a6:7a5a%en1 prefixlen 64 secured scopeid 0xc
|
||||
inet6 fdb8:4cef:7fb5:44db:4c7:3b5b:3df5:9fe0 prefixlen 64 autoconf secured
|
||||
inet 192.168.178.74 netmask 0xffffff00 broadcast 192.168.178.255
|
||||
nd6 options=201<PERFORMNUD,DAD>
|
||||
media: autoselect
|
||||
status: active
|
||||
|
||||
DHCP Configuration
|
||||
IP address: 192.168.178.74
|
||||
Subnet mask: 255.255.255.0
|
||||
Router: 192.168.178.1
|
||||
Client ID:
|
||||
IPv6: Automatic
|
||||
IPv6 IP address: none
|
||||
IPv6 Router: none
|
||||
Wi-Fi ID: 14:98:77:7f:fc:11
|
||||
```
|
||||
|
||||
## 4. Hardware-Details
|
||||
|
||||
```
|
||||
Hardware:
|
||||
|
||||
Hardware Overview:
|
||||
|
||||
Model Name: Mac mini
|
||||
Model Identifier: Macmini9,1
|
||||
Model Number: Z12P0007PD/A
|
||||
Chip: Apple M1
|
||||
Total Number of Cores: 8 (4 Performance and 4 Efficiency)
|
||||
Memory: 16 GB
|
||||
System Firmware Version: 18000.120.36
|
||||
OS Loader Version: 18000.120.36
|
||||
Serial Number (system): C07H913BQ6P0
|
||||
Hardware UUID: D38258DF-D028-519B-9ECE-7789D84D8110
|
||||
Provisioning UDID: 00008103-001E10321AD3001E
|
||||
Activation Lock Status: Enabled
|
||||
|
||||
Graphics/Displays:
|
||||
|
||||
Apple M1:
|
||||
|
||||
Chipset Model: Apple M1
|
||||
Type: GPU
|
||||
Bus: Built-In
|
||||
Total Number of Cores: 8
|
||||
Vendor: Apple (0x106b)
|
||||
Metal Support: Metal 4
|
||||
Displays:
|
||||
LG HDR DQHD:
|
||||
Resolution: 5120 x 1440
|
||||
UI Looks like: 5120 x 1440 @ 60.00Hz
|
||||
Main Display: Yes
|
||||
Mirror: Off
|
||||
Online: Yes
|
||||
Rotation: Supported
|
||||
|
||||
Thunderbolt/USB4:
|
||||
|
||||
Thunderbolt/USB4 Bus 1:
|
||||
|
||||
Vendor Name: Apple Inc.
|
||||
Device Name: Mac mini
|
||||
UID: 0x05AC1C27EA699CE1
|
||||
Route String: 0
|
||||
Domain UUID: 665D3DF9-2087-4AA4-928E-A3289D1EFB1F
|
||||
Port:
|
||||
Status: No device connected
|
||||
Link Status: 0x100
|
||||
Speed: Up to 40 Gb/s
|
||||
Receptacle: 2
|
||||
|
||||
Thunderbolt/USB4 Bus 0:
|
||||
|
||||
Vendor Name: Apple Inc.
|
||||
Device Name: Mac mini
|
||||
UID: 0x05AC1C27EA699CE0
|
||||
Route String: 0
|
||||
Domain UUID: 9B4A3663-EB28-4334-A51F-FC6C8E83CBE3
|
||||
Port:
|
||||
Status: No device connected
|
||||
Link Status: 0x100
|
||||
Speed: Up to 40 Gb/s
|
||||
Receptacle: 1
|
||||
|
||||
```
|
||||
|
||||
## 5. Sicherheit
|
||||
|
||||
```
|
||||
FileVault: FileVault is On.
|
||||
Firewall: Firewall is enabled. (State = 1)
|
||||
SIP: System Integrity Protection status: enabled.
|
||||
```
|
||||
|
||||
---
|
||||
|
||||
_Systemdaten erfasst am 2026-06-28 20:36:42._
|
||||
|
||||
@@ -0,0 +1,164 @@
|
||||
---
|
||||
title: Systemdaten – Raspberry PI2 – 2026-06-28
|
||||
description: Rohdaten der SSH-Systemabfrage des Raspberry PI2
|
||||
published: true
|
||||
date: 2026-06-28T18:26:00.000Z
|
||||
tags: raw, pi2, systemdaten
|
||||
editor: markdown
|
||||
dateCreated: 2026-06-28T18:26:00.000Z
|
||||
---
|
||||
|
||||
# Systemdaten – Raspberry PI2 – 2026-06-28
|
||||
|
||||
> **Quelle**: 🔌 SSH (`ssh PI2`)
|
||||
> **Datum/Zeit**: 2026-06-28 18:26 Uhr
|
||||
> **Host**: `hoobs` (192.168.178.44)
|
||||
|
||||
---
|
||||
|
||||
## System
|
||||
|
||||
```
|
||||
Hostname : hoobs
|
||||
Uptime : up 24 days, 16:58
|
||||
Kernel : Linux hoobs 6.1.21-v7+ #1642 SMP Mon Apr 3 17:20:52 BST 2023 armv7l GNU/Linux
|
||||
OS : Raspbian GNU/Linux 11 (bullseye) armv7l
|
||||
Load : 5.19 / 5.66 / 5.09
|
||||
Memory : 921Mi total, 674Mi used, 70Mi free, 177Mi buff/cache, 189Mi available
|
||||
Swap : 1.8Gi total, 930Mi used, 931Mi free
|
||||
CPU Temp : 65°C
|
||||
```
|
||||
|
||||
## Speicher (df -h)
|
||||
|
||||
```
|
||||
Filesystem Size Used Avail Use% Mounted on
|
||||
/dev/root 117G 11G 103G 9% /
|
||||
devtmpfs 333M 0 333M 0% /dev
|
||||
tmpfs 461M 36M 426M 8% /dev/shm
|
||||
tmpfs 185M 2.1M 183M 2% /run
|
||||
tmpfs 5.0M 4.0K 5.0M 1% /run/lock
|
||||
/dev/mmcblk0p1 253M 51M 202M 20% /boot
|
||||
/dev/sda 57G 18G 37G 33% /media/usbstick
|
||||
/dev/sdb1 1.9T 1.2T 675G 64% /media/Seagate-Expansion
|
||||
tmpfs 93M 0 93M 0% /run/user/1000
|
||||
```
|
||||
|
||||
## Blockgeräte (lsblk)
|
||||
|
||||
```
|
||||
NAME SIZE TYPE FSTYPE FSVER LABEL MOUNTPOINT
|
||||
sda 57.3G disk ext4 1.0 /media/usbstick
|
||||
sdb 1.8T disk
|
||||
`-sdb1 1.8T part ntfs Seagate Expansion Drive /media/Seagate-Expansion
|
||||
mmcblk0 119.1G disk
|
||||
|-mmcblk0p1 256M part vfat FAT32 boot /boot
|
||||
`-mmcblk0p2 118.8G part ext4 1.0 rootfs /
|
||||
```
|
||||
|
||||
## Netzwerk
|
||||
|
||||
```
|
||||
eth0: 192.168.178.44/24 (BSSID: fritz.box)
|
||||
Gateway: 192.168.178.1
|
||||
DNS: 192.168.178.1
|
||||
MAC: b8:27:eb:cb:94:9e
|
||||
|
||||
Listening Ports:
|
||||
22/tcp – SSH
|
||||
53/udp – Pi-hole DNS
|
||||
53/tcp – Pi-hole DNS
|
||||
80/tcp – Apache HTTP
|
||||
139/tcp – Samba NetBIOS
|
||||
443/tcp – Apache HTTPS
|
||||
445/tcp – Samba SMB
|
||||
3000/tcp – node (HOOBS) pid=514
|
||||
3010/tcp – node (Music API) pid=506
|
||||
8080/tcp – Apache
|
||||
65443/tcp – Apache SAP UI5
|
||||
45883, 51826-51856, 51866, 65080 – HOOBS child processes
|
||||
```
|
||||
|
||||
## Systemd Enabled Services (48)
|
||||
|
||||
```
|
||||
apache2.service enabled
|
||||
avahi-daemon.service enabled
|
||||
bluetooth.service enabled
|
||||
console-setup.service enabled
|
||||
cron.service enabled
|
||||
dphys-swapfile.service enabled
|
||||
e2scrub_reap.service enabled
|
||||
fake-hwclock.service enabled
|
||||
getty@.service enabled
|
||||
hciuart.service enabled
|
||||
helm.service enabled
|
||||
hoobsd.service enabled
|
||||
keyboard-setup.service enabled
|
||||
ModemManager.service enabled
|
||||
music_social_api.service enabled
|
||||
networking.service enabled
|
||||
NetworkManager-dispatcher.service enabled
|
||||
NetworkManager-wait-online.service enabled
|
||||
NetworkManager.service enabled
|
||||
nmbd.service enabled
|
||||
pihole-FTL.service enabled
|
||||
raspberrypi-net-mods.service enabled
|
||||
rpi-display-backlight.service enabled
|
||||
rpi-eeprom-update.service enabled
|
||||
rsync.service enabled
|
||||
rsyslog.service enabled
|
||||
smbd.service enabled
|
||||
ssh.service enabled
|
||||
sshswitch.service enabled
|
||||
systemd-pstore.service enabled
|
||||
systemd-timesyncd.service enabled
|
||||
triggerhappy.service enabled
|
||||
tzupdate.service enabled
|
||||
udisks2.service enabled
|
||||
ufw.service enabled
|
||||
watchdog.service enabled
|
||||
wiim_proxy.service enabled
|
||||
wpa_supplicant.service enabled
|
||||
avahi-daemon.socket enabled
|
||||
triggerhappy.socket enabled
|
||||
nfs-client.target enabled
|
||||
remote-fs.target enabled
|
||||
apt-daily-upgrade.timer enabled
|
||||
apt-daily.timer enabled
|
||||
e2scrub_all.timer enabled
|
||||
fstrim.timer enabled
|
||||
logrotate.timer enabled
|
||||
man-db.timer enabled
|
||||
```
|
||||
|
||||
## SSH-Konfiguration
|
||||
|
||||
```
|
||||
PubkeyAuthentication yes
|
||||
ChallengeResponseAuthentication no
|
||||
UsePAM yes
|
||||
```
|
||||
|
||||
## Firewall (UFW)
|
||||
|
||||
- Installiert: ja (ufw 0.36-7.1)
|
||||
- ufw.service: enabled
|
||||
- Aktiv: ja (dmesg zeigt aktuelle `[UFW BLOCK]`-Einträge)
|
||||
- Blockierte Quellen: 192.168.178.22, fe80::/64 → HOOBS-Ports (51826–51866)
|
||||
|
||||
## Services (Status)
|
||||
|
||||
| Dienst | Enabled | Active |
|
||||
|---|---|---|
|
||||
| apache2 | enabled | active |
|
||||
| smbd | enabled | active |
|
||||
| nmbd | enabled | active |
|
||||
| pihole-FTL | enabled | active |
|
||||
| hoobsd | enabled | active |
|
||||
| helm | enabled | active |
|
||||
| music_social_api | enabled | active |
|
||||
|
||||
---
|
||||
|
||||
*Rohdaten – nicht zur direkten Anzeige, sondern als Quelle für Dokumentations-Updates.*
|
||||
Reference in New Issue
Block a user