Must have:

• Syncthing - act as central node, especially for mobile devices

sudo apt-get update
sudo apt-get install syncthing

systemctl cat syncthing@.service
sudo systemctl daemon-reload
sudo systemctl enable syncthing@healmiy
sudo systemctl start syncthing@healmiy

sudo systemctl status syncthing@healmiy

• Cloudflare

sudo apt-get update && sudo apt-get install cloudflared
sudo reboot
cloudflared --version

• Tailscale

curl -fsSL https://tailscale.com/install.sh  && sudo tailscale up
sudo tailscale set --ssh

• UFW

sudo ufw allow 2525/tcp              # SSH
sudo ufw allow 41641/udp             # Tailscale WireGuard
sudo ufw allow 22420/tcp             # Syncthing sync
sudo ufw allow 22420/udp             # Syncthing sync
sudo ufw allow in on tailscale0      # All Tailscale traffic

sudo ufw default deny incoming
sudo ufw default allow outgoing

ip link show

sudo ufw show added      # or below line if ufw is not yet activated
sudo ufw status numbered
sudo ufw app list

SSH Hardening

Created drop-in config at /etc/ssh/sshd_config.d/hardened.conf:

Port 2525
PermitRootLogin no
PasswordAuthentication no
PubkeyAuthentication yes
MaxAuthTries 3
AllowUsers healmiy
X11Forwarding no

Validated with sshd -t and restarted sshd. Confirmed listening on port 2525 (IPv4 + IPv6), port 22 no longer open.

on M2AirMie

mkdir -p ~/.ssh
touch ~/.ssh/config
chmod 600 ~/.ssh/config

paste 👇

• Give Aigents (IDEAi), access to NerdRack server via SSH key Authentication (just use ssh adsvise)
  • M2AirMie
  • AiM1
• Fast Note Sync
  • AiM1
  • EmiPhone
  • iPadM3mi

Lute Language Learning

sudo apt update && sudo apt install -y 
sudo apt install python3.10-venv
pip install --upgrade lute3
python -m lute.main

sudo nano /etc/systemd/system/lute.service

[Unit]
Description=Lute Language Tracker
After=network.target

[Service]
User=healmiy
WorkingDirectory=/home/healmiy/my_lute
ExecStart=/home/healmiy/my_lute/myenv/bin/python -m lute.main
Restart=always
RestartSec=5

[Install]
WantedBy=multi-user.target

sudo systemctl daemon-reload
sudo systemctl enable lute.service
sudo systemctl start lute.service

sudo systemctl status lute.service
sudo systemctl stop lute.service
sudo systemctl disable lute.service

Database restores (dev on M2AirMie to NerdRack)

To find the directory where your database is, start Lute and go to About > Version and Software Info. It’s the “Data path” line.

Version: 3.10.3
Data path: /home/healmiy/.local/share/Lute3
Database: /home/healmiy/.local/share/Lute3/lute.db

tldr: you replace your database with an unzipped and renamed db backup.

1. Go to the correct folder: make sure we were in the main Lute data folder, not the backups subfolder.

cd /home/healmiy/.local/share/Lute3

2. Rename the current database: Just in case something went wrong, I renamed the active (empty) database to get it out of the way safely.

mv lute.db old_lute.db

3. Unzip your backup into place: I took the backup file you linked and extracted it directly into the Lute data folder, saving the extracted contents as a new file named lute.db.

gunzip -c /home/healmiy/PKMxKB/_Config/Lute/manual_lute_backup_2026-07-28_024311.db.gz > lute.db

(The -c flag tells gunzip to extract the file to the terminal output rather than replacing the original .gz file, and > lute.db grabs that output and saves it into the active database file Lute expects).

Once I put the file in the exact right place with the exact right name, all you had to do was run sudo systemctl restart lute.service so Lute could detect the newly swapped file!