Linux Capabilities: Drop Root Without Breaking Everything
Learn Linux capabilities to drop root privileges without breaking your apps. Master cap_drop, cap_add in Docker, and setcap for fine-grained privilege control.
Tag: security
All the articles with the tag "security".
Docker Security Hardening: 15 Things You're Doing Wrong Right Now
Stop running Docker containers like it's the Wild West. Learn 15 critical Docker security mistakes and practical fixes to harden your containers today.
UFW Advanced: Rate Limiting, Logging, and Rules That Actually Make Sense
Go beyond ufw allow/deny: rate limiting with ufw limit, logging levels, before.rules for iptables, IPv6 handling, Docker bypass fixes, and fail2ban integration.
DDoS Mitigation: Teaching Your Server to Say No Politely (Then Impolitely)
DDoS mitigation for self-hosters: Nginx rate limiting, Fail2ban, Cloudflare free tier, CrowdSec, and iptables tricks that actually work.
SSH Hardening: Lock Down Remote Access Without Locking Yourself Out
Harden SSH properly: disable password auth, switch to Ed25519 keys, configure sshd_config, set up SSH certificates with step-ca, add 2FA, and configure ProxyJump for bastion hosts.
Vaultwarden vs Bitwarden: Own Your Passwords Before Someone Else Does
Why trust a cloud with your passwords? Compare Vaultwarden and Bitwarden self-hosted — lightweight vs full-stack, Docker setup, backups, and which one to actually run.
Linux Audit Log: What's Really Happening on Your Server
auditd logs every system call, file access, and command run on your Linux server. Learn ausearch, aureport, and how to write audit rules that catch it.
The sudoers Mistake Everyone Makes Once
Never edit /etc/sudoers directly. One syntax error locks everyone out. Use visudo, understand NOPASSWD risks.
Why Your TLS Certificate Isn't Trusted
Incomplete cert chains, wrong order, self-signed certs. How to diagnose trust failures with openssl s_client.
Certificate Expiry: Monitor Before the 3 AM Call
Certs expire silently. Check expiry with openssl, automate renewal checks with cron, get alerts before disaster.
The Firewall Rule Order That's Breaking Your Setup
Firewall rules are evaluated top-down, first match wins. One misplaced ALLOW rule above your denials silently defeats all your security. Here's the fix.
Sticky Bit, Setuid, Setgid: Linux Special Permissions Explained
Understand sticky bit, setuid, and setgid: what they do, how to set them, security implications, and real-world use cases.