Kerberos

How to Configure Advanced Audit Policies on Windows Server 2012 R2 — step-by-step Windows Server 2012 R2 tutorial on Progressive Robot

How to Configure Advanced Audit Policies on Windows Server 2012 R2

How to Configure Advanced Audit Policies on Windows Server 2012 R2 Windows Server 2012 R2 provides a granular audit policy framework through Advanced Audit Policy Configuration that goes far beyond the nine basic categories available in the legacy audit settings. With advanced auditing, you can control exactly which events are logged for each of 58 […]

Read more
How to Harden Nginx: Security Headers, TLS 1.3, OCSP Stapling on RHEL 9 — step-by-step RHEL 9 tutorial on Progressive Robot

How to Harden Nginx: Security Headers, TLS 1.3, OCSP Stapling on RHEL 9

A default Nginx installation serves content, but many security hardening steps are not enabled by default. Hardening Nginx means configuring HTTP security headers to prevent XSS, clickjacking, and MIME sniffing attacks; enforcing TLS 1.3 and strong cipher suites to eliminate outdated protocol vulnerabilities; enabling OCSP Stapling so clients can verify certificate validity without a round-trip […]

Read more
How to Secure Apache with Let's Encrypt and Certbot on RHEL 9 — step-by-step RHEL 9 tutorial on Progressive Robot

How to Secure Apache with Let’s Encrypt and Certbot on RHEL 9

Like Nginx, Apache can be secured with free SSL/TLS certificates from Let’s Encrypt using Certbot. The python3-certbot-apache plugin performs domain validation, obtains the certificate, and automatically updates your Apache virtual host configuration with the SSL directives, HTTP-to-HTTPS redirect, and modern cipher settings. This guide covers installing Certbot on RHEL 9, obtaining a certificate for your […]

Read more
How to Secure Nginx with Let's Encrypt and Certbot on RHEL 9 — step-by-step RHEL 9 tutorial on Progressive Robot

How to Secure Nginx with Let’s Encrypt and Certbot on RHEL 9

HTTPS is no longer optional — browsers mark HTTP sites as “Not Secure”, search engines penalise them in rankings, and many modern browser APIs (service workers, geolocation, camera access) require a secure context. Let’s Encrypt provides free, automated, and trusted SSL/TLS certificates via the ACME protocol, and Certbot is the recommended ACME client that handles […]

Read more
How to Configure Apache Virtual Hosts on RHEL 9 — step-by-step RHEL 9 tutorial on Progressive Robot

How to Configure Apache Virtual Hosts on RHEL 9

Apache virtual hosts are the mechanism by which a single Apache HTTP Server instance serves multiple websites, distinguishing between them using the ServerName directive and the incoming Host HTTP header. Name-based virtual hosting (the most common type) allows hundreds of domains to share a single IP address, with Apache routing each request to the correct […]

Read more
How to Set a Hostname and FQDN on RHEL 9 — step-by-step RHEL 9 tutorial on Progressive Robot

How to Set a Hostname and FQDN on RHEL 9

A server’s hostname is its identity on the network. The fully qualified domain name (FQDN) combines the short hostname with the DNS domain, forming an address like web01.example.com. Many services depend on a correctly configured hostname and FQDN to function properly: email servers use the FQDN in SMTP HELO greetings (incorrect values cause delivery rejections), […]

Read more
How to Sync Time with Chrony on RHEL 9 — step-by-step RHEL 9 tutorial on Progressive Robot

How to Sync Time with Chrony on RHEL 9

Accurate time synchronization is not optional on a server — it is a hard requirement. TLS certificate validation fails when the clock is wrong by more than a few minutes. Kerberos authentication rejects tickets with a clock skew over 5 minutes. Cron jobs fire at the wrong time. Log correlation across multiple servers becomes impossible […]

Read more
CHAT