Tutorials

DockerLinuxNginxSecurityNetworkingSelf-hostingWeb ServerReverse ProxyVPSDebianUbuntuFirewallVirtual HostsBGPRPKIBIRD2FRRoutingVyOSAnycastSSHFail2Bann8nDocker ComposePostgreSQLWorkflow AutomationSSLTLSLet's EncryptCertbotHTTPStmuxTerminalVPS AdministrationClaude CodeAI ToolsRIPE NCCUFWiptablesGNU ScreenTerminal MultiplexerScreen SessionWebhooksSelf-Hostedproxy_passWebSocketOllamaAI AgentsMCPsshd_configEd25519Rootless DockerSeccompAppArmorContainersOpenClawHermes AgentRoutingIPv6systemdFRRTypeScriptNode.jsROARoutinatorAI AgentTelegramVimText EditorServer AdministrationAIOpsObservabilityMonitoringSigNozGrafanaLangfusePrometheusIP TransitProductionLoggingDisk ManagementOpenObserveOpenTelemetryDatadog AlternativeGDPRnftablesLokiPromtailLogQLClaudeAI WorkflowsLangChainBackupMySQLS3RcloneCronPythonLog AnalysisDiscordSlackDisaster RecoveryTraefikCaddyWireGuardTailscaleVPNHeadscaleAlertmanagerSelf-HealingPerformanceZero DowntimeGitHub ActionsAI Code ReviewGeminiCI/CDRate LimitingDDoS ProtectionBIND9DNSHigh AvailabilityPrivacyVaultwardenPassword ManagerBGPalerterPlakarEncryptionDeduplicationImmichPhoto ManagementGoogle Photos AlternativeReplicationOffsite BackupPaperless-ngxDocument ManagementOCRGiteaGitPlausibleAnalyticsClickHouseUptime KumaBeszelHardeningFailoverMultihomingBFDLLM ObservabilityDeepEvalWindows ServerVeeamMigrationBare Metal RestoreVirtIOP2V
Tutorial
VPSSecurityLinux

How to Set Up a Linux VPS Firewall with UFW and nftables

Configure a default-deny firewall on your Linux VPS using either UFW or nftables. Two paths, one goal: only the ports you choose stay open.

14 min readRead →
Tutorial
UbuntuDebianUFW

Install and Configure Fail2Ban on a Linux VPS

Set up Fail2Ban to block brute-force attacks on SSH and Nginx. Covers UFW and nftables ban actions, custom jails, recidive escalation, and filter testing on Ubuntu 24.04 and Debian 12.

12 min readRead →
Tutorial
DockerUFWiptables

Fix Docker Bypassing UFW: 4 Tested Solutions for Your VPS

Docker manipulates iptables directly and ignores UFW rules. Your container ports are exposed to the internet even with ufw deny active. Here are four solutions with tradeoffs, each verified by scanning from an external host.

11 min readRead →