Security – ITFROMZERO – Share tobe shared!

Securing Secrets in GitHub Actions: Don’t Leak API Keys Due to a Moment of Negligence

By admin April 29, 2026

Don't expose API keys and tokens on GitHub. A detailed guide on using GitHub Actions Secrets to protect sensitive information and deploy CI/CD securely.

Security

Nginx GeoIP Blocking: How I Cut 80% of Junk Traffic from Unknown Countries

By admin April 27, 2026

Blocking IPs by country using Nginx and MaxMind GeoLite2 is the most effective way to eliminate 80% of botnet junk traffic. See this detailed configuration guide drawn from real-world experience.

Security

Configuring DNSSEC for Linux: Don’t Let Your Website Get Hijacked Even with SSL

By admin April 22, 2026

DNSSEC is a mandatory security layer to prevent DNS Spoofing. This article provides a detailed guide on configuring BIND9 on Linux, creating ZSK/KSK keys, and setting up the DS Record trust chain.

Security

Moving from iptables to nftables: Why It’s a Mandatory Step for SysAdmins

By admin April 22, 2026

Iptables is outdated and slow. Discover how nftables optimizes firewall performance, supports IPv4/IPv6 simultaneously, and how to safely migrate your Linux system.

Security

Turning Linux into a Database: Querying and Security Monitoring with osquery

By admin April 21, 2026

Stop struggling with Bash scripts. Learn how to use osquery to query the Linux operating system using SQL, making security monitoring and infrastructure management 10x more efficient.

Security

Securing SSH with Hardware Security Keys (FIDO2/Yubikey): When Private Keys Are No Longer a ‘Fatal Weakness’

By admin April 20, 2026

Hardening server security with Hardware Security Keys (Yubikey/FIDO2). A detailed guide on setup, using Resident Keys, and configuring servers to prevent private key leaks.

Security

Auditd Configuration Guide: The “Black Box” for Tracking Every Change on Linux

By admin April 20, 2026

Hackers can wipe history but they can't hide from Auditd. A guide to configuring the Linux "black box" to trace file edits, command execution, and overall server security.

Security

Self-hosting Vaultwarden with Docker: Lightweight and Secure ‘Personal’ Password Management

By admin April 19, 2026

Don't let passwords be your biggest weakness. This article guides you through deploying Vaultwarden with Docker to take full control of your data at near-zero cost.

Security

Implementing End-to-End TLS/SSL: Don’t Leave Data ‘Exposed’ in Your Internal Network

By admin April 17, 2026

Don't let traffic between your Web Server and Database run 'exposed'. A detailed guide on implementing End-to-End TLS/SSL for comprehensive data protection within your internal network.

Security

Unmasking Rootkits on Linux: How to Use the Chkrootkit and Rkhunter Duo

By admin April 17, 2026

Don't let Rootkits silently take control of your server. Learn how to use Rkhunter and Chkrootkit to detect hidden malware and effectively secure your Linux server.