Tag: security

Wazuh gives you SIEM, HIDS, FIM, and threat detection in one stack. Here's how to deploy it in your home lab with Docker and actually use it.

LUKS encrypts your drives so a stolen server is just expensive recycling. Here's how to set it up, manage keys, and unlock headless boxes remotely.

Run Docker containers without root privileges, here's the security difference, the install steps, and the gotchas nobody tells you about.

LinkedIn scans every visitor's installed extensions and sends the data to third parties without consent. Here's what they're looking for, and how to stop it.

Attackers love finding ways to go from www-data to root. Here's how they do it, and more importantly, how you harden your Linux boxes to stop them.

You committed .env.production once. Your database credentials are in git forever. Here's how to use dotenv without shooting yourself.

Claude Code found a Linux vulnerability hidden for 23 years. You can use the same AI code auditing approach to find bugs in your own projects before attackers do.

Stop letting Docker Hub throttle your CI/CD. Run Harbor for RBAC, Trivy scanning, image replication, and a real UI, on infrastructure you control.

TLS 1.3 explained without the PhD: faster handshakes, better ciphers, and how to actually configure Nginx and Caddy to use it.

Apply zero-trust principles to your home lab, network segmentation, VLANs, identity-aware proxies, and Tailscale as the glue.

Cloudflare's free tier WAF is more powerful than most people use. Here's how to actually configure it: rules, rate limits, and all.

Certificate pinning and HPKP explained: what they are, why HPKP destroyed itself, and modern alternatives like CAA records and Certificate Transparency.