Rate limiting is a server-side defence that restricts how many requests a client can make within a time window. Without rate limiting, a single IP address or bot can flood your server with thousands of requests per second — crashing your application, exhausting your database connection pool, or triggering denial-of-service conditions. Nginx provides two rate […]
ModSecurity as a dynamic Nginx module extends Nginx with WAF capabilities, blocking SQL injection, XSS, command injection, and hundreds of other attack patterns defined by the OWASP Core Rule Set. Unlike the Apache version which uses the stable mod_security2, the Nginx connector uses the newer libmodsecurity3 C++ library with a ngx_http_modsecurity_module connector. On RHEL 9, […]
ModSecurity is the leading open-source Web Application Firewall (WAF), capable of inspecting all HTTP requests and responses against a ruleset and blocking malicious traffic including SQL injection, cross-site scripting (XSS), remote file inclusion, and OWASP Top 10 attack patterns. Combined with the OWASP Core Rule Set (CRS), ModSecurity transforms Apache into a security gateway that […]
Introduction How to Set Up Nexus Repository Manager on Oracle Linux 10 on Oracle Linux 10 provides administrators with a robust, enterprise-ready workflow that integrates cleanly with systemd, SELinux, firewalld, and the modern AppStream module system. In this tutorial we will walk through every step required, from package installation to verification, so that the resulting […]
Caddy is a modern, open-source web server written in Go that stands out for one defining feature: automatic HTTPS. Caddy obtains and renews TLS certificates from Let’s Encrypt or ZeroSSL automatically, with zero configuration required beyond specifying a domain name. It also supports HTTP/2 and HTTP/3 (QUIC) out of the box, and its declarative Caddyfile […]
Introduction This tutorial demonstrates how to Install Docker Engine on Oracle Linux 10 on Oracle Linux 10. It is written for administrators who want a repeatable, well-explained walkthrough that goes beyond a bare command list and explains each configuration choice. Every command is tested against a freshly registered Oracle Linux 10 system with the default […]
Introduction Debian 13 Trixie is built around the ethos of stability and free software. Setting up install checkmk on Trixie leverages the same proven Debian packaging system that powers millions of servers worldwide, while benefiting from the latest upstream releases included in the Trixie freeze. Follow each step carefully and the resulting configuration will persist […]
Introduction This guide explains how to Set Up SSH Key-Based Authentication on Debian 13 on Debian 13 Trixie. Debian Trixie uses systemd for service management, nftables as the underlying packet filter (with ufw or iptables front-ends still available), and AppArmor for mandatory access control. Every command is designed for a minimal Debian 13 install with […]
Like Nginx, Apache can be secured with free SSL/TLS certificates from Let’s Encrypt using Certbot. The python3-certbot-apache plugin performs domain validation, obtains the certificate, and automatically updates your Apache virtual host configuration with the SSL directives, HTTP-to-HTTPS redirect, and modern cipher settings. This guide covers installing Certbot on RHEL 9, obtaining a certificate for your […]
Introduction Debian 13 Trixie is built around the ethos of stability and free software. Setting up set up http/3 with nginx on Trixie leverages the same proven Debian packaging system that powers millions of servers worldwide, while benefiting from the latest upstream releases included in the Trixie freeze. Follow each step carefully and the resulting […]
