Tag: sysadmin

Adding TOTP to SSH and sudo takes 10 minutes and makes password spray attacks useless. Here's the setup that won't lock you out of your own server.

Cron has been scheduling your jobs since before you were born. Systemd timers do everything cron does, plus logging, dependencies, and missed-run recovery.

Managing authorized_keys across 10 servers is how you lose track of who has access to what. An SSH CA lets you sign keys and revoke access without touching every server.

LUKS encrypts your drives so a stolen server is just expensive recycling. Here's how to set it up, manage keys, and unlock headless boxes remotely.

A kernel upgrade halved one team's PostgreSQL throughput. The fix was kernel tuning: huge pages, THP, swappiness, I/O scheduler. Here's what matters and why.

Attackers love finding ways to go from www-data to root. Here's how they do it, and more importantly, how you harden your Linux boxes to stop them.

You get 50 alerts a day and ignore all of them. That's not monitoring, that's noise. Here's how to build alerts people actually care about.

Run multiple Proxmox VMs and LXC containers behind a single public IP using NAT bridging and iptables port forwarding. Works on Proxmox VE 8 and 9.

MySQL 8.0 broke auth, MariaDB forked hard, and Docker changed how you connect. Here's what still works and what'll bite you.

Ollama can load one model at a time on limited hardware. How to switch between models, use CPU offloading, and manage VRAM intelligently.

Master bulk file renaming on Linux with rename, vidir, fd, and mmv. The right tool for every scenario from regex rewrites to visual editing.

du and df still work, but Rust-era tools like dust, duf, and fclones make disk triage faster and way less painful in 2026.