Security guides
Hands-on guides that cover Security. Every command is run and verified on a live server before it is published.
GuideSecuring Your Web Server
A hardened server with an unconfigured web server is still open. The nginx security headers, rate limiting, and TLS that close the second door.
GuideCompose in Production
Take a Docker Compose stack to production: restart policies, resource limits, HTTPS out front, and the security defaults that contain a container breach.
GuidePHP-FPM Security and Hardening
Set the php-fpm security baseline: hide the version, disable shell functions, fence files with open_basedir, and log errors instead of leaking them.
GuideSecurity Hardening
Redis security on a live server: require a password, stay on loopback, rename risky commands, prove TLS encrypts the wire, and firewall the port.
GuideSecurity and Hardening
Harden Docker security for a container: run as non-root, use a read-only filesystem, drop capabilities, and keep the secret out of the image.
GuideSecurity Hardening
MariaDB security hardening on a live server: bind to localhost, require TLS for a user, firewall the port, disable symbolic links, and recap least privilege.