Firewall

How to Monitor MySQL with Prometheus on FreeBSD 14 — step-by-step FreeBSD 14 tutorial on Progressive Robot

How to Monitor MySQL with Prometheus on FreeBSD 14

Introduction This guide explains how to Monitor MySQL with Prometheus on FreeBSD 14 on FreeBSD 14. FreeBSD uses the pkg(8) binary package manager, rc.conf(5) for service startup configuration, and pf(4) as its primary packet filter. There is no SELinux or AppArmor — instead, FreeBSD provides the MAC (Mandatory Access Control) framework and Capsicum for fine-grained […]

Read more
Common Problems 117618

Ubuntu 20.04 LTS – UFW blocks SSH access after firewall enable

🔴 Critical   ⏱ 5–30 min  Last verified: 30 July 2024 Affected versions: Ubuntu 20.04 LTS Ubuntu 20.04 Ubuntu 20.04.6 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention […]

Read more
How to Set Up Unbound DNS Resolver on FreeBSD 14 — step-by-step FreeBSD 14 tutorial on Progressive Robot

How to Set Up Unbound DNS Resolver on FreeBSD 14

Introduction This guide explains how to Set Up Unbound DNS Resolver on FreeBSD 14 on FreeBSD 14. FreeBSD uses the pkg(8) binary package manager, rc.conf(5) for service startup configuration, and pf(4) as its primary packet filter. There is no SELinux or AppArmor — instead, FreeBSD provides the MAC (Mandatory Access Control) framework and Capsicum for […]

Read more
How to Set Up Two-Factor Authentication for SSH with Google Authenticator on RHEL 9 — step-by-step RHEL 9 tutorial on Progressive Robot

How to Set Up Two-Factor Authentication for SSH with Google Authenticator on RHEL 9

Password-based SSH authentication is a well-known attack vector, and even key-based authentication can be compromised if a private key is stolen. Adding Time-Based One-Time Password (TOTP) two-factor authentication creates a second layer of defense that is independent of the key. This tutorial shows you how to configure the Google Authenticator PAM module on RHEL 9 […]

Read more
How to Set Up Uptime Kuma on FreeBSD 14 — step-by-step FreeBSD 14 tutorial on Progressive Robot

How to Set Up Uptime Kuma on FreeBSD 14

Introduction Deploying set up uptime kuma on freebsd 14 on a FreeBSD 14 machine differs from Linux in several important ways: packages come from the FreeBSD Ports Collection or the binary pkg repository, services are registered in /etc/rc.conf via sysrc(8), and firewall rules are written in pf.conf(5) syntax. This tutorial stays entirely within the standard […]

Read more
Common Problems 114439

SELinux Denials Breaking Web Application Access

🟡 Medium   ⏱ 5–30 min  Last verified: 23 July 2024 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors & Cross-Refs References & Further […]

Read more
How to Set Up S3FS FUSE Mount on FreeBSD 14 — step-by-step FreeBSD 14 tutorial on Progressive Robot

How to Set Up S3FS FUSE Mount on FreeBSD 14

Introduction This guide explains how to Set Up S3FS FUSE Mount on FreeBSD 14 on FreeBSD 14. FreeBSD uses the pkg(8) binary package manager, rc.conf(5) for service startup configuration, and pf(4) as its primary packet filter. There is no SELinux or AppArmor — instead, FreeBSD provides the MAC (Mandatory Access Control) framework and Capsicum for […]

Read more
How to Configure Docker Daemon TLS Encryption on RHEL 9 — step-by-step RHEL 9 tutorial on Progressive Robot

How to Configure Docker Daemon TLS Encryption on RHEL 9

By default, the Docker daemon socket (/var/run/docker.sock) is a Unix socket accessible only locally. When the Docker daemon needs to be accessible over the network — for remote Docker management, CI/CD pipelines connecting to a remote build host, or Docker Swarm cluster communication — TLS encryption must be configured to prevent man-in-the-middle attacks and unauthorised […]

Read more
Common Problems 114559

Cockpit Web Console Unreachable After Hardening

🟡 Medium   ⏱ 5–30 min  Last verified: 6 July 2024 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors & Cross-Refs References & Further […]

Read more
Common Problems 114440

Firewalld Blocking Required Application Port

🟡 Medium   ⏱ 5–30 min  Last verified: 2 July 2024 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors & Cross-Refs References & Further […]

Read more
CHAT