Latest posts
-
Best VPS Hardening Practices: A Sysadmin Checklist
VPS hardening reduces your attack surface by eliminating unnecessary services, controlling access, and monitoring behavior. Follow this runbook to lock down your server.
Read more → -
Fail2ban Setup Tutorial: Ubuntu Server Hardening
Fail2ban blocks brute-force attacks by banning IPs after failed login attempts. This Ubuntu setup guide covers installation, SSH protection, and monitoring.
Read more → -
OpenTelemetry Collector Configuration Tutorial
Configure OpenTelemetry Collector for production observability. Learn the receiver-processor-exporter model, YAML structure, and common gotchas.
Read more → -
UFW Firewall Rules Cheat Sheet for Linux
UFW firewall rules cheat sheet: enable ufw, allow/deny ports, manage rules by number, and handle common gotchas on Debian/Ubuntu servers.
Read more → -
Kubernetes Node Monitoring with Prometheus
Kubernetes node monitoring with Prometheus requires a scrape config, node exporter, and a metric cardinality model. This runbook covers setup, labeling strategy, and when it breaks.
Read more → -
Nginx Rate Limiting Configuration: Core Setup
Nginx rate limiting configuration uses the limit_req module to throttle requests by IP or zone. This guide covers the model, implementation, and failure modes.
Read more → -
Grafana vs Datadog for Server Monitoring
Grafana and Datadog differ fundamentally: Grafana is self-hosted visualization; Datadog is SaaS with built-in instrumentation. Choose based on cost, control, and operational load.
Read more → -
Best Open Source Uptime Monitoring Tools
Four production-grade open source uptime monitors: Uptime Kuma, Prometheus + Alertmanager, StatusCake self-hosted, and custom solutions. Runbook included.
Read more → -
CIS Benchmark Linux Compliance Checklist
A runbook-format compliance checklist for CIS Benchmark Linux hardening. Track each control, automate verification, know when manual review is required.
Read more → -
How to Set Up Log Aggregation with Loki
Log aggregation with Loki centralizes logs from distributed systems without indexing every field. Learn the architecture, config, and common pitfalls.
Read more →