Tutorials

Tutorial

Nginx Security Hardening on Ubuntu and Debian

Harden Nginx beyond its defaults with security headers, TLS 1.3, HSTS, method restrictions, and access controls. Each directive is tied to the specific attack it prevents.

11 min readRead
Tutorial

WireGuard and Tailscale VPN on a Linux VPS

Set up WireGuard from scratch or deploy Tailscale for managed VPN access on Ubuntu 24.04 and Debian 12, with DNS leak prevention, PreSharedKey hardening, and a neutral comparison including Headscale.

17 min readRead
Tutorial

Offsite Backup and Replication with Plakar

Replicate plakar snapshots to a remote server over HTTPS or to S3-compatible object storage. Automate backups and offsite sync with plakar built-in scheduler running as a systemd service on Debian 12 or Ubuntu 24.04.

12 min readRead
Tutorial

Back Up Your Linux VPS with Plakar

Install plakar on Debian 12 or Ubuntu 24.04, create an encrypted deduplicated backup store, back up filesystem paths and databases via stdin piping, schedule automated backups, and restore files or full database dumps.

10 min readRead
Tutorial

Install and Configure Fail2Ban on a Linux VPS

Set up Fail2Ban to block brute-force attacks on SSH and Nginx. Covers UFW and nftables ban actions, custom jails, recidive escalation, and filter testing on Ubuntu 24.04 and Debian 12.

12 min readRead
Tutorial

Nginx Server Blocks: Host Multiple Domains on One VPS

Configure Nginx server blocks to serve multiple websites from a single VPS. Two full domains, secure defaults, per-site logging, and complete verification included.

9 min readRead
Tutorial

Fix Docker Bypassing UFW: 4 Tested Solutions for Your VPS

Docker manipulates iptables directly and ignores UFW rules. Your container ports are exposed to the internet even with ufw deny active. Here are four solutions with tradeoffs, each verified by scanning from an external host.

11 min readRead
Tutorial

Install Nginx on Debian 12 and Ubuntu 24.04 from the Official Repository

Install Nginx from the official nginx.org repository on Debian 12 or Ubuntu 24.04. Covers signing key setup, apt pinning, firewall rules for both UFW and nftables, systemd management, and verification after every step.

7 min readRead
Tutorial

SSH Hardening on a Linux VPS: Complete sshd_config Security Guide

Lock down SSH on your Debian 12 or Ubuntu 24.04 VPS. Ed25519 key generation, sshd_config hardening, ProxyJump bastion setup, cipher hardening, and ssh-audit verification. Tested on Debian 12 and Ubuntu 24.04.

11 min readRead