Posts
Page 53 of 72
-
tcpdump Basics: Capture Traffic Without Wireshark
You don't need a GUI to see network packets. Learn tcpdump filters, flags, and pcap capture to debug servers from the command line, no Wireshark needed.
· Updated:5 min read -
AppArmor vs SELinux: Mandatory Access Control Without the Existential Dread
AppArmor vs SELinux: what mandatory access control actually does, writing AppArmor profiles with aa-genprof, SELinux labels and audit2allow, and when to use each.
10 min read -
Your Server Doesn't Know What Random Means (And That's a Problem)
Linux entropy pools decide how fast a box generates SSH keys and TLS certs. What haveged, virtio-rng, and hardware RNG fix on a freshly booted VM.
· Updated:8 min read -
Restic vs Borg vs Kopia: Backup Tools for People Who've Lost Data Before
Restic, Borg, and Kopia all deduplicate and encrypt, but differ on backends, compression, and UI. Pick the right backup tool for your Linux home lab.
· Updated:9 min read -
Docker Logging: From "Where Did My Logs Go?" to Centralized Bliss
Learn Docker logging from basics to centralized stacks. Master docker logs, logging drivers, log rotation, Loki+Grafana, and Fluentd setup with practical examples.
· Updated:16 min read -
Self-Hosted Email Is Probably a Bad Idea
Self-hosted email with Mailcow or Stalwart means daily SPF, DKIM, DMARC, and IP blacklist battles. Here's the honest case against running your own mail server.
· Updated:5 min read -
NocoDB: Because Airtable Doesn't Need to Know Your Business
NocoDB self-hosted: connect to existing Postgres/MySQL, build spreadsheet views, auto-generate APIs, and skip the Airtable subscription forever.
· Updated:9 min read -
TCP Keepalives: Why Connections Die and How to Fix It
Idle SSH sessions and long-lived connections die because the OS gives up first. What the three keepalive sysctls mean, how to tune them, and per-socket options.
6 min read -
Caddy Advanced: Automatic HTTPS, Plugins, and Config That Doesn't Make You Cry
Advanced Caddy server configuration: wildcard certs, Caddyfile matchers, Docker label integration, rate limiting, forward auth with Authelia, and the JSON API.
· Updated:9 min read -
Auditd & Audit Logging: Know Exactly Who Touched What on Your Server
Set up auditd to log every sudo command and file change on Linux: auditctl rules, ausearch, aureport, and shipping logs to Loki or Elasticsearch for compliance.
· Updated:9 min read -
Time Sync on VMs: Why NTP Keeps Drifting
Your VM's clock is off by minutes, NTP says it's synced, yet the system keeps drifting. Here's why the hypervisor is the real culprit, and how to fix it.
5 min read -
HashiCorp Vault: Stop Hardcoding Secrets Like It's 2012
HashiCorp Vault tutorial: KV v2 secrets, AppRole auth, dynamic database credentials that auto-expire, a PKI certificate authority, and auto-unseal with cloud KMS.
· Updated:9 min read
