Internal of kilabit.info

From the public user point of view, they are five (public) domains that are served: kilabit.info, build.kilabit.info, awwan.org, tour.awwan.org, and golang-id.org.

From my personal point of view there two other services served: WireGuard for Virtual Private Network (VPN) and rescached, for caching and forwarding DNS requests and serving custom zones (domains).

Here is the diagram of the most knowns domains and services,

All of the services is managed using systemd.

The web services (www-kilabit, awwan, www-golangid) are static web server, in single binary. That means the resources that they serve to user are read from memory. No write on disk except the log from HAProxy.

For configuration management, I use awwan. awwan help me remember what commands I use to setup and manage all services, including their configuration. Combine with gcloud CLI, it helps me manage the one in Google Cloud too.

Lets take a look more deeper into each of them.

I use Contabo for VPS with 4 CPU cores, 8 GB memory, and 200 GB disk space. The server is located in Singapore, the nearest one from my country, Indonesia.

I have been using Contabo for 3 years and so far I have no complain.

The VPS run with Arch Linux updated automatically every week.

For VPN, I use WireGuard. The VPN protect the access to internal services, especially SSH, where I use it to setup and manage all of the services through awwan.

Combines with rescached, I can have custom .internal domains that are accessible only for me and my peers.

For sending and receiving email, through @kilabit.info, I use OpenSMTPD.

For reading and managing the email messages I use Dovecot.

rescached is a DNS caching and forwarding that help boost my network name resolution and sometimes by pass some restriction.

I also use it to block ads by mapping the domains to 127.0.0.1 or 0.0.0.0.

HAproxy is a proxy and load balancer for TCP and HTTP. This is the core of all services in the VPN. It is one of the best open source software out there.

HAProxy redirect the requests based on domains and/or path to respective services, protect the connection using hardened SSL and selection of ciphers and ciphersuites, support compression, and many more.

This is my personal website, written in AsciiDoc and then converted and published using ciigo.

All of the files, except for static assets, are embedded into a binary and then served using ciigo, using Go HTTP module.

The repository of this website is available at git.sr.ht/~shulhan/kilabit.info.

The build.kilabit.info is served by karajo, a program that run a worker based on trigger from external HTTP (webhook) or periodically by timer.

In my use cases, I used for continuous deployment (CD) of my open source projects and periodically build some Arch Linux packages (from AUR) and image for Google Compute Engine.

awwan.org is the website that provide information about a software called awwan.

awwan is configuration management software, infrastructure as file and directory layout. In other words, awwan is a command-line interface (CLI) to shell script, that can execute multiple lines of commands in local or remote server using shell or SSH.

The content of this site is available at this repository.

The tour.awwan.org is the website to learn awwan step by step.

Its run the web user interface when running "awwan serve" command on this sample scripts.

Since awwan can execute shell command, we must separate it from the host system. In here we use lightweight container using systemd-nspawn.

The golang-id.org is the community website for Go programming language in Bahasa Indonesia.

Similar to kilabit.info, this website is written using AsciiDoc, published using ciigo. All of the files are embedded into single binary.

The source code for this website is available at https://git.sr.ht/~shulhan/golang-id-web .

Last, we have a service haminer that consume the access log from HAProxy and store it inside a PostgreSQL database.

The access log in database then can be aggregated and/or summarized to provide analytics for all of the domains and services that we manage.

That’s it! Now you know how I run this whole websites. If you have any questions, you can contact me through my email.