Tagged
Hardening guides
Hands-on guides that cover Hardening. Every command is run and verified on a live server before it is published.
GuideThe First Hour
The eight things to do in the first hour on a new Linux server, before scanners find it. A practical hardening guide, with every command tested on a real VPS.
GuideHardening Your Database
The database is the prize, not the server. Database hardening that keeps PostgreSQL's safe defaults, scoped roles, encryption, and tested backups.
GuideHardening sshd Without Locking Yourself Out
Practise sshd hardening safely on a second daemon: disable passwords and root login, cap retries, move the port, and add a fail2ban jail.
GuideHardening, Headers and Logging
Nginx hardening, made concrete: hide the version, add the security headers browsers enforce, log what an incident needs, and turn those logs into blocking.