System Hardening
Linux Security: Securing Systemd and Kernel Parameters
Hardening Linux through sysctl configurations, kernel parameter tuning, module blacklisting, and root access restrictions.
🐧 Linux Security & Self-Hosting
Kernel hardening, SSH, Docker, and self-hosted infrastructure
System Hardening
Ultimate Linux Hardening Guide
Complete system hardening: kernel parameters, sysctl tuning, module blacklisting, firewall configuration, AppArmor, and SELinux policies.
SSH & Remote Access
SSH Tunneling: Port Forwarding, SOCKS Proxy & Bastion Hosts
SSH local/remote/dynamic port forwarding, SOCKS5 proxy through jump hosts, bastion host configs, and persistent autossh tunnels.
SSH & Remote Access
Multi-Factor Authentication: YubiKey Hardware Token Setup
Deploy FIDO2 hardware tokens to lock down operating systems, password vaults, and mail boxes. SSH, PAM, and GPG integration.
Disk Encryption
VeraCrypt Disk Encryption: Hidden Volumes & Plausible Deniability
Create encrypted containers and hidden volumes with plausible deniability. Keyfiles, PIM, header backup, and cross-platform mounting.
Disk Encryption
Secure File Deletion: Shred, Wipe & Cryptographic Erasure
Permanent data removal on SSD/HDD: shred, nwipe, blkdiscard, TRIM, and cryptographic erasure via LUKS key rotation. Verification methods included.
Self-Hosting
Bitwarden Self-Host Configurations
Run your own secure password vault with custom SSL, automated backups, and organization policies. Docker and bare-metal options.
Self-Hosting
Nextcloud Self-Host: Private Cloud Storage
Deploy Nextcloud with Collabora Office, Redis caching, PostgreSQL, and hardened PHP. External storage, encryption, and backup strategy.
Self-Hosting
Jellyfin Media Server: Private Streaming
Hardware transcoding with Intel Quick Sync / NVIDIA NVENC, Tailscale remote access, LDAP auth, and client apps for all platforms.
Self-Hosting
Home Assistant Privacy: Local-First Smart Home
Run Home Assistant without cloud dependencies. Zigbee/Matter via SkyConnect, local voice with Wyoming, encrypted backups, and no vendor lock-in.
Container Security
Docker Security Hardening: Rootless, Capabilities & Seccomp
Run containers rootless, drop capabilities, custom seccomp profiles, read-only filesystems, and user namespace remapping.
Intel ME / AMD PSP
Intel ME Deactivation: me_cleaner & HAP Bit
Disable Intel Management Engine on supported platforms using me_cleaner, HAP bit, and coreboot. Verification via MEInfo and chipsec.
View all categories: