🟡 Medium ⏱ 5–30 min Last verified: 7 September 2021 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors & Cross-Refs References & Further […]
Introduction How to Set Up Loki and Promtail on FreeBSD 13 is a core administration task for any FreeBSD 13 server operator. FreeBSD 13 ships with the 15.0-RELEASE kernel, ZFS as the default root filesystem, Capsicum capability sandboxing improvements, and an updated ports tree. Unlike Linux distributions, FreeBSD uses rc(8) for service management, pf for […]
Password-based SSH authentication is vulnerable to brute-force attacks and credential stuffing. SSH key-based authentication replaces passwords with a cryptographic key pair: a private key that stays on your local machine and a public key placed on the server. Even if an attacker discovers your server’s IP and SSH port, they cannot log in without the […]
Introduction FreeBSD 13 is a UNIX-derived operating system renowned for its network stack performance, ZFS integration, and Jail isolation primitives. Setting up configure nginx websocket proxying on freebsd 13 on FreeBSD 13 follows the rc.conf/service(8) paradigm rather than systemd, which means enabling a service and configuring its startup options are done differently from any Linux […]
Harbor is an enterprise-grade, open-source container registry that extends the base OCI registry specification with role-based access control, project isolation, image vulnerability scanning powered by Trivy, and cross-datacenter image replication. Running your own Harbor instance on RHEL 8 gives your team a private, auditable registry with no bandwidth costs or rate-limiting imposed by Docker Hub. […]
Introduction FreeBSD 13 is a UNIX-derived operating system renowned for its network stack performance, ZFS integration, and Jail isolation primitives. Setting up configure nginx as a tcp/udp load balancer on freebsd 13 on FreeBSD 13 follows the rc.conf/service(8) paradigm rather than systemd, which means enabling a service and configuring its startup options are done differently […]
Introduction Debian 9 Stretch is built around the ethos of stability and free software. Setting up configure hashicorp vault on debian 9 on Stretch leverages the same proven Debian packaging system that powers millions of servers worldwide, while benefiting from the latest upstream releases included in the Stretch freeze. Follow each step carefully and the […]
Introduction This guide explains how to Configure Disk Encryption with GELI on FreeBSD 13 on FreeBSD 13. FreeBSD uses the pkg(8) binary package manager, rc.conf(5) for service startup configuration, and pf(4) as its primary packet filter. There is no SELinux or AppArmor — instead, FreeBSD provides the MAC (Mandatory Access Control) framework and Capsicum for […]
How to Harden Nginx: Security Headers, TLS 1.3 and OCSP Stapling on RHEL 7 A default Nginx installation exposes unnecessary information about the server software, accepts outdated and broken TLS protocol versions, and omits the HTTP security headers that modern browsers rely on for protection against cross-site scripting, clickjacking, and protocol downgrade attacks. Hardening Nginx […]
🟡 Medium ⏱ 5–30 min Last verified: 3 September 2021 Affected versions: Oracle Linux 8 📖 ~3 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors […]
