Posted inSecurity
Time to Ditch GPG: A Guide to Using age for Ultra-Compact File Encryption on Linux
Is GPG too complex for daily encryption? Try age – a modern, compact, and secure tool using X25519, purpose-built for SysAdmins.
Posted inSecurity
Kubernetes Security: Stopping Root Containers with PSS and Admission Controllers
Don't let your Kubernetes cluster be compromised by misconfigurations. A detailed guide on using PSS and Kyverno to block root containers based on real-world experience.
Posted inSecurity
Stop Unauthorized IP Access: Configuring Authenticated Origin Pulls (Cloudflare & Nginx)
Secure your Nginx server comprehensively by only allowing traffic from Cloudflare via the Authenticated Origin Pulls (mTLS) mechanism.
Posted inSecurity
Trivy Operator: A 24/7 ‘Security Camera’ for Kubernetes Vulnerability Scanning
Don't just scan for security during image builds. Learn how Trivy Operator automates CVE and YAML misconfiguration scanning in Kubernetes for 24/7 protection.
Posted inSecurity
Tlog Guide: The “Security Camera” for Recording Every Linux Terminal Session
Forget .bash_history; tlog is the real security auditing tool for Linux. Record entire Terminal sessions and replay them like video for absolute system control.
Posted inSecurity
Guide to Installing DefectDojo on Docker: Centralized Vulnerability Management for DevSecOps
Vulnerability management is no longer a headache with DefectDojo on Docker. Detailed guide on installation, importing scan results, and API automation for DevSecOps.
Posted inSecurity
Mastering Cilium Tetragon: Monitoring and Blocking Runtime Attacks with eBPF
A detailed guide on using Cilium Tetragon for monitoring and securing Linux Runtime based on eBPF technology. This article shares quick installation steps, how to write TracingPolicy, and real-world experience to protect servers from attacks.
Posted inSecurity
Preventing RCE and Injection with OpenRASP: Protecting Web Apps from Within Without Code Changes
Protect web applications from 0-day, RCE, and SQL Injection with OpenRASP. Detailed guide on installing the Java Agent without modifying source code.
Posted inSecurity
Setting Up a Tor Onion Service with Nginx: ‘Stealth’ Your Website on Linux
A guide on setting up a Tor Onion Service with Nginx on Linux. Learn how to prevent IP leaks, secure headers, and apply OPSEC principles for a fully anonymous .onion website.
Posted inSecurity
Installing Technitium DNS Server on Linux: A Security ‘Shield’ and Ad-Blocker for DevOps
A guide to installing Technitium DNS Server on Linux for DoH encryption, network-wide ad-blocking, and professional local DNS management for DevOps and SysAdmins.