Nginx TLS tuning won’t fix a slow application, but it does cut handshake overhead and improve connection reuse, which shaves milliseconds off every HTTPS request. This guide covers the TLS, HTTP/2, and HTTP/3 settings I use to keep Nginx fast without giving up modern security. The goal is lower TTFB (Time To First Byte) and […]
Articles tagged: security
Choosing the Perfect Network Firewall Device for under $300
Embarking on the quest to find the ideal home office, home lab or small business firewall device is akin to navigating a jungle, but let’s narrow it down by setting the budget to under $300 USD. Picture this: your network is already configured and has been working without issue for a while now. You are […]
Fail2ban on Linux: Protect Your Server from Brute-Force Attacks
Fail2ban watches your log files and automatically bans IPs that repeatedly fail authentication, protecting your Linux server from brute-force attacks on SSH, web servers, and more. This guide covers installation, jail configuration, testing, and practical tuning to get real protection instead of just running defaults.
WireGuard VPN on Linux: Complete Setup Guide
WireGuard is built into the Linux kernel and delivers faster, simpler VPN tunneling than OpenVPN with stronger default cryptography. This guide walks through a complete server and client setup on Linux, including key generation, firewall rules, IP forwarding, and troubleshooting common issues.
Linux Firewall with nftables: Setup Guide
nftables has replaced iptables as the default firewall framework on most modern Linux systems. This practical guide covers the core structure, real rule examples, sets, NAT, rate limiting, and how to migrate from iptables to nftables cleanly.
Cloudflare with Discourse: Setup Guide (WAF & Security Rules)
I run a Discourse forum behind Cloudflare, and getting the WAF rules right took more trial and error than I expected. Discourse is a Ruby on Rails application that most people self-host in a Docker container. It handles traffic differently from a typical CMS, and generic Cloudflare WAF rules will either break your forum or […]
30 Linux Sysadmin Tools You Didn’t Know You Needed
As a Linux server admin or Linux desktop user, you rely on familiar tools to manage your systems. But have you ever wondered what other tools might simplify your workflow, improve efficiency, and solve common Linux problems? Whether you’re looking into Linux system health, performance monitoring, security hardening, backups, or just general Linux administration, there […]
Linux Updates: Command Line Guide
Updating your Linux system is one of the most important things you can do to keep it secure, stable and running well. With updates, you can patch vulnerabilities, fix bugs and access new features. This article covers updating via the command line, automating updates for different distros, troubleshooting common issues and kernel updates to keep […]
Recommended Cloudflare Performance & Security Settings (Guide)
Cloudflare is a great tool for website performance and security. They have a whole suite of tools to help with performance and security and are a staple in millions of DevOps professionals’ toolboxes. But getting the most out of Cloudflare can be challenging. The platform has hundreds of settings and each one has its use […]
Securing Linux with SELinux (or AppArmor)
SELinux and AppArmor have been around for many years, but are still essential for maintaining a secure Linux environment. This article will cover how to set them up and troubleshoot these mandatory access control (MAC) frameworks. Even if they seem overwhelming at first, learning how they work and how to manage them is an important step […]
