Tag: security

Stop leaking secrets, dependencies, and OS garbage into git. Here are the .gitignore patterns that save you from disaster.

HashiCorp Vault vs Infisical compared: secrets management for DevOps teams, Docker Compose setup, SDK examples, and when the added complexity is worth it.

FOSS licenses explained for developers and self-hosters: MIT vs GPL vs AGPL vs Apache 2.0, copyleft vs permissive, and what recent license changes mean for you.

Mutual TLS (mTLS) explained for mortals: how both sides authenticate, setting up step-ca for internal PKI, generating client certs, and configuring nginx with mTLS.

Hide your SSH port from scanners with port knocking. It's not a replacement for security, but it's a valid defense-in-depth tactic.

You enabled the VPN but half your traffic still bypasses it. Here's why and how routing actually works.

Kernel live patching applies CVE fixes to a running kernel with no reboot, using kpatch or Canonical Livepatch. Setup for Ubuntu and RHEL, plus what it can't fix.

Your DNS queries go out in plain text, so your ISP logs every site you visit. This covers how DoH, DoT, and DoQ fix that, and how to self-host with AdGuard Home.

You don't need a GUI to see network packets. Learn tcpdump filters, flags, and pcap capture to debug servers from the command line, no Wireshark needed.

AppArmor vs SELinux: what mandatory access control actually does, writing AppArmor profiles with aa-genprof, SELinux labels and audit2allow, and when to use each.

Your freshly booted VM just generated SSH keys instantly, and that's not a good sign. Linux entropy pools explained: haveged, virtio-rng, and hardware RNG fixes.

Advanced Caddy server configuration: wildcard certs, Caddyfile matchers, Docker label integration, rate limiting, forward auth with Authelia, and the JSON API.