Putting a Database Somewhere Sensible
Installing PostgreSQL on your own server without leaving it open to the internet: scoped roles, socket versus TCP, dumps you have restored from, and the settings that actually matter.
Monitoring a Server Without a Full Observability Stack
Find out a service died before your users do — systemd OnFailure alerts, a disk-space check, and external uptime monitoring. No Prometheus, no Grafana, about an hour.
A Reverse Proxy with Automatic TLS
Putting several self-hosted applications behind one domain, each on its own subdomain with a certificate that renews itself — with Caddy, and the Nginx equivalent.
SSH Access for a Small Team
Giving several people access to a server without a shared account: individual logins, scoped sudo, an audit trail, and offboarding that actually removes access.
Set Up a LEMP Stack: Nginx, MariaDB and PHP
A working PHP application server, with the socket paths, permissions and database privileges that most walkthroughs get slightly wrong.
Migrating a Server Without Downtime
Moving a site to a new server: syncing files with rsync, dumping and restoring databases, testing the new box before anyone points at it, and cutting DNS over safely.
Reading Linux Logs: journalctl and the Files It Did Not Replace
Finding the failure in journalctl and in traditional log files: filtering by time, unit and priority, and a repeatable method for diagnosing something that just broke.
Linux Firewalls: ufw, firewalld and What They Miss
How to configure a host firewall properly with ufw or firewalld, why Docker quietly punches holes through it, and where cloud security groups fit in.
Getting Started with Docker
A container is a process on your machine, isolated from the rest of it and shipped with everything it needs to run. Not a virtual machine — there is no…
Securing a New Linux Server
A server exposed to the internet starts receiving automated login attempts within minutes of booting. Not because anyone is interested in you — because everything with a public IP address…