Tutorials
Secure n8n with Nginx Reverse Proxy, TLS, and Security Headers
Put your self-hosted n8n behind Nginx with Let's Encrypt TLS, security headers, rate limiting, firewall rules, and webhook protection. Every step includes a verification command.
Docker Security Hardening: Rootless Mode, Seccomp, AppArmor on a VPS
Seven hardening layers for Docker on a VPS. Each section explains the threat, shows the fix with CLI and Compose syntax, and verifies it works.
Self-Host Vaultwarden on a VPS with Docker Compose
Deploy a hardened Vaultwarden password manager on your VPS. Covers Docker Compose with read-only containers, fail2ban, SMTP for 2FA, backup and restore, and emergency access.
Nginx Rate Limiting and DDoS Protection
Configure Nginx rate limiting with limit_req, limit_conn, and fail2ban to protect your server from brute-force attacks and application-layer DDoS without relying on third-party services.
Secure Your AI Agent Server: Sandboxing, Firewalls, and Monitoring
AI agents execute arbitrary actions, consume unpredictable resources, and process untrusted input by design. This guide maps each threat to a concrete Linux control.
Set Up Let's Encrypt SSL/TLS for Nginx on Debian 12 and Ubuntu 24.04
Obtain and auto-renew free TLS certificates with Certbot for Nginx on Debian 12 or Ubuntu 24.04. Covers DNS setup, Certbot installation, HTTP-to-HTTPS redirect, TLS hardening, HTTP/2, HSTS, and the OCSP discontinuation.
Fix Docker Bypassing UFW: 4 Tested Solutions for Your VPS
Docker manipulates iptables directly and ignores UFW rules. Your container ports are exposed to the internet even with ufw deny active. Here are four solutions with tradeoffs, each verified by scanning from an external host.
SSH Hardening on a Linux VPS: Complete sshd_config Security Guide
Lock down SSH on your Debian 12 or Ubuntu 24.04 VPS. Ed25519 key generation, sshd_config hardening, ProxyJump bastion setup, cipher hardening, and ssh-audit verification. Tested on Debian 12 and Ubuntu 24.04.