Differential Privacy Learning Resources

Interfaces

• Google's Differential Privacy Library

Install from Source

Archiving

• Wayback - A self-hosted toolkit for archiving webpages to the Internet Archive, archive.today, IPFS, and local file systems.

Communications

• Diun

Databases

• rqlite - to-use, lightweight, distributed relational database, which uses SQLite as its storage engine.

File systems

• SeaweedFS - DC active-active replication, Kubernetes, POSIX FUSE mount, S3 API, S3 Gateway, Hadoop, WebDAV, encryption, Erasure Coding.

Health

• Fasten - source, self-hosted, personal/family electronic medical record aggregator, designed to integrate with 1000's of insurances/hospitals/clinics

iMessage

• Beeper Bridge Manager - hosted bridges with the Beeper Matrix server.

Media Server

• Prometheus Exporter for Plex

Monitoring

• Blocky - blocker for local network with many features
• Autorestic

Network Tools

• Nebula
• Netdata - fidelity infrastructure monitoring and troubleshooting, real-time monitoring Agent collects thousands of metrics from systems, hardware, containers, and applications with zero configuration. It runs permanently on all your physical/virtual servers, containers, cloud deployments, and edge/IoT devices, and is perfectly safe to install on your systems mid-incident without any preparation.
• Smap - in replacament for Nmap.
• ORY Oathkeeper
• Ory Kratos - friendly, security-hardened and battle-test Identity, User Management and Authentication system for the Cloud. The Kratos identity server (similiar to Auth0, Okta, Firebase) with Ory-hardened authentication, MFA, FIDO2, TOTP, WebAuthn, profile management, identity schemas, social sign in, registration, account recovery, passwordless.
• Ory Hydra - latency, high throughput, and low resource consumption. Ory Hydra is not an identity provider (user sign up, user login, password reset flow), but connects to your existing identity provider through a login and consent app.
• Ory Keto
• AdGuard Home - over-HTTPS.
• Plik
• Hugo
• ION - time communication system, the goal is to chat anydevice, anytime, anywhere.

Nostr

• expensive relay - a relay that requires payment for registration
• gnost-relay - nostr relay written in go backed by postgresql database.
• noscl - a basic command-line client written in Go.
• gnost-deflate-client - A CLI nostr client written in go implementing permessage-deflate websocket compression.
• algia - A cli application for nostr.
• relayer - a server framework for writing custom relays.
• blogsync - Self-host blog articles from long-form notes e.g. via Caddy server.
• nkcli - A CLI tool for nostr key manage and serve NIP-46.

Pastebins

• LogPaste - host and persists data to any S3-compatible backend.
• Opengist - hosted pastebin powered by Git.
• Pasty
• Prologic pastebin
• Sup3rS3cretMes5age

Remote Access

• Headscale - hosted implementation of the Tailscale coordination server.

RSS

• Miniflux V2

Search

• Zinc

Security

• Blackbox - Safely store secrets in Git/Mercurial. Provides tooling to automatically encrypt secrets like passwords.
• CrowdSec - Locally scans log files and optionnaly requests, detecting and blocking malicious behaviors. AppSec capabilities to enable virtual-patching and turn your install into a WAF. Share attacks signals and benefit from real time blocklist of the most agressive IPs attacking CrowdSec's network.

Service Discovery

• Doozerd - available, completely consistent store for small amounts of extremely important data.
• Admiral

Snapshots Management/System Recovery

• ksync

Storage

• Scrutiny
• Perkeep
• duf

Troubleshooting

• Cilium - A networking, observability, and security solution with an eBPF-based dataplane. It provides a simple flat Layer 3 network with the ability to span multiple clusters in either a native routing or overlay mode.
• HOMER - A robust, carrier-grade, scalable Packet and Event capture system and VoiP/RTC Monitoring Application based on the HEP/EEP protocol and ready to process & store insane amounts of signaling, rtc events, logs and statistics with instant search, end-to-end analysis and drill-down capabilities.

What is Tailscale?

• Tailscale Terraform Provider

WireGuard Tools

• Kilo - cloud network overlay built on WireGuard and designed for Kubernetes. Kilo connects nodes in a cluster by providing an encrypted layer 3 network that can span across data centers and public clouds. The Pod network created by Kilo is always fully connected, even when the nodes are in different networks or behind NAT. By allowing pools of nodes in different locations to communicate securely, Kilo enables the operation of multi-cloud clusters. Kilo's design allows clients to VPN to a cluster in order to securely access services running on the cluster.
• WG UI - contained management service for WireGuard with a self-serve web UI.
• Gluetun - in.
• Ethr

Kubernetes Tools, Frameworks, and Projects

Interfaces

• OpenShift Hive

Networking Tools & Concepts

Configure WDT service

• Wuzz

Security Tools

Interfaces

• Certgen
• syzkaller - guided kernel fuzzer.
• SchedViz

Tools for Self-Hosting

Automation

• OliveTin - OliveTin is a web interface for running Linux shell commands.
• µTask - Automation engine that models and executes business processes declared in yaml.

Cloud

• DigitalOcean CLI

Configuration Management

• mgmt - is a next generation config management written in Go.

Containers

• Docker Compose - container applications. With Compose, we can create a YAML file to define the services and with a single command, can spin everything up or tear it all down.
• SwarmKit - based consensus, task scheduling and more.
• Lima - source alternative for Docker Desktop.
• Colima
• runc
• Clair - spec/blob/master/spec.md) and Docker).

Development

• Terraform provider plugin for Proxmox - docs/) and exposes Terraform resources to provision QEMU VMs and LXC Containers.
• OTF
• Lazygit
• LazyDocker - compose, written in Go with the gocui library.
• Act
• Soft Serve - hostable Git server for the command line.
• Glow

Running Locally on Windows, MacOS, and Linux:

• DoctorGPT - contained binary that monitors your application logs for problems and diagnoses them.