Tls Ssl

How to Set Up PostgreSQL Streaming Replication on RHEL 9 — step-by-step RHEL 9 tutorial on Progressive Robot

How to Set Up PostgreSQL Streaming Replication on RHEL 9

PostgreSQL Streaming Replication sends WAL (Write-Ahead Log) records from a primary server to one or more standby servers in near-real-time, keeping standbys continuously synchronised with the primary. This provides high availability (automatic or manual failover when the primary fails), read scaling (queries can be distributed to hot standbys), and geographic redundancy. Unlike logical replication which […]

Read more
How to Configure PostgreSQL Remote Access and SSL on RHEL 9 — step-by-step RHEL 9 tutorial on Progressive Robot

How to Configure PostgreSQL Remote Access and SSL on RHEL 9

By default, PostgreSQL only accepts connections from localhost using peer or ident authentication. Enabling remote access requires two configuration changes: editing postgresql.conf to listen on a network interface, and editing pg_hba.conf to permit remote connections from specific hosts or subnets. Beyond network access, encrypting the connection with SSL/TLS is essential for any deployment where database […]

Read more
How to Secure MySQL: Remove Root Remote Login, audit_log on RHEL 9 — step-by-step RHEL 9 tutorial on Progressive Robot

How to Secure MySQL: Remove Root Remote Login, audit_log on RHEL 9

A default MySQL installation has several security weaknesses: a root account that may be accessible remotely, anonymous user accounts, a test database anyone can access, and no audit logging of who accessed what data. Securing MySQL is essential before any production deployment and covers four main areas: access control (who can connect from where), authentication […]

Read more
How to Install pgAdmin 4 on RHEL 9 — step-by-step RHEL 9 tutorial on Progressive Robot

How to Install pgAdmin 4 on RHEL 9

pgAdmin 4 is the official, full-featured web-based administration and development platform for PostgreSQL. It provides a graphical interface for managing databases, schemas, tables, views, functions, roles, and server connections; a SQL query editor with syntax highlighting and query execution plans; a visual schema designer; backup and restore wizards; and monitoring dashboards for server statistics. pgAdmin […]

Read more
How to Install phpMyAdmin on RHEL 9 — step-by-step RHEL 9 tutorial on Progressive Robot

How to Install phpMyAdmin on RHEL 9

phpMyAdmin is a web-based graphical administration interface for MySQL and MariaDB databases. It allows developers and DBAs to manage databases, tables, rows, users, and permissions through a browser without needing to use the command-line MySQL client. phpMyAdmin is especially useful for non-technical users who need to browse data, run queries, import/export CSV or SQL files, […]

Read more
How to Install PostgreSQL 16 on RHEL 9 — step-by-step RHEL 9 tutorial on Progressive Robot

How to Install PostgreSQL 16 on RHEL 9

PostgreSQL (often called Postgres) is an advanced open-source relational database with a 35-year development history. Unlike MySQL/MariaDB, PostgreSQL prioritises SQL standards compliance, data integrity, and extensibility over speed-at-any-cost. PostgreSQL excels at complex queries, full-text search, JSONB document storage, geospatial data (PostGIS extension), and write-heavy workloads that require strong ACID compliance. It is the preferred database […]

Read more
How to Monitor Nginx with Prometheus nginx-exporter on RHEL 9 — step-by-step RHEL 9 tutorial on Progressive Robot

How to Monitor Nginx with Prometheus nginx-exporter on RHEL 9

Prometheus is a time-series metrics collection and alerting system widely used for monitoring cloud infrastructure and web servers. The nginx-prometheus-exporter (nginx-exporter) is a lightweight Go binary that reads Nginx’s built-in stub_status page and exposes the metrics in Prometheus format — active connections, total requests, connection states (reading, writing, waiting), and request rate. Combined with Grafana […]

Read more
How to Harden Nginx: Security Headers, TLS 1.3, OCSP Stapling on RHEL 9 — step-by-step RHEL 9 tutorial on Progressive Robot

How to Harden Nginx: Security Headers, TLS 1.3, OCSP Stapling on RHEL 9

A default Nginx installation serves content, but many security hardening steps are not enabled by default. Hardening Nginx means configuring HTTP security headers to prevent XSS, clickjacking, and MIME sniffing attacks; enforcing TLS 1.3 and strong cipher suites to eliminate outdated protocol vulnerabilities; enabling OCSP Stapling so clients can verify certificate validity without a round-trip […]

Read more
How to Configure Nginx WebSocket Proxying on RHEL 9 — step-by-step RHEL 9 tutorial on Progressive Robot

How to Configure Nginx WebSocket Proxying on RHEL 9

WebSockets provide full-duplex communication channels over a single TCP connection, enabling real-time features such as live chat, push notifications, collaborative editing, gaming, and live dashboards. Unlike standard HTTP, which is request-response, WebSocket connections are persistent and bidirectional — the server can push data to clients at any time without a client request. Nginx can act […]

Read more
How to Configure SSL/TLS with OpenSSL and Self-Signed Certificates on RHEL 9 — step-by-step RHEL 9 tutorial on Progressive Robot

How to Configure SSL/TLS with OpenSSL and Self-Signed Certificates on RHEL 9

Even when free trusted certificates from Let’s Encrypt are available for public domains, self-signed certificates serve important roles: development environments, internal network services, IoT devices, automated testing pipelines, and machine-to-machine communication within a private network. Unlike Let’s Encrypt certificates, self-signed certificates require no domain ownership verification or outbound internet access — they can be generated […]

Read more
CHAT