Category: Web Server
Secure SSH: Key-Based Authentication for Your VPS
If you work with VPS servers, you know that security is fundamental. Logging in with a password is like leaving your house keys under the doormat—it works, but it exposes you to bots and attacks. The true industry standard is SSH key authentication. It’s not only more secure but also significantly more convenient, as it…
Your Digital Fortress: How to Hide Applications from the Internet with Tailscale
In today’s digital world, exposing any service to a public IP address is like sending an open invitation to uninvited guests. Automated scanners, password-guessing bots, and attackers searching for security vulnerabilities are relentless. But what if we could make our most critical applications—like a Vaultwarden password manager or a Wazuh security monitoring system—completely invisible to…
Case Study: When Your SIEM Goes Silent. How I Diagnosed a Wazuh Paralysis Caused by… Itself.
Every administrator knows the feeling. You glance at your SIEM system’s dashboard, expecting a stream of alerts, but instead, there’s… silence. The dashboards aren’t refreshing; the last events are from hours ago. Your first thought? An outage. You log into the server, type systemctl status wazuh-manager, and see the reassuring green text: active (running). You’ve…
Your Private Cloud: Reclaiming Control of Your Data with Nextcloud and TrueNAS
In an era where our digital lives are scattered across the servers of tech giants, a growing number of people are seeking digital sovereignty. They want to decide where their most valuable data is stored, from family photos to confidential documents. The answer to this need is Nextcloud, a powerful open-source platform that allows you…
An End to Intrusive Adverts: How to Reclaim Control of the Internet at Home and Away. AdGuard Home.
The modern internet is a battlefield for our attention, and adverts have become the primary ammunition. This is felt particularly acutely on smartphones, where intrusive banners and pop-up windows can effectively discourage you from browsing content. However, there is an effective and comprehensive solution that allows you to create your own protective shield, not only…
WireGuard on TrueNAS Scale: How to Build a Secure and Efficient Bridge Between Your Local Network and VPS Servers
In today’s digital world, where remote work and distributed infrastructure are becoming the norm, secure access to network resources is not so much a luxury as an absolute necessity. Virtual Private Networks (VPNs) have long been the answer to these needs, yet traditional solutions can be complicated and slow. Enter WireGuard—a modern VPN protocol that…
Nginx Proxy Manager on TrueNAS Scale: Installation, Configuration, and Troubleshooting
Section 1: Introduction: Simplifying Home Lab Access with Nginx Proxy Manager on TrueNAS Scale Modern home labs have evolved from simple setups into complex ecosystems running dozens of services, from media servers like Plex or Jellyfin, to home automation systems such as Home Assistant, to personal clouds and password managers. Managing access to each of…
Your Server is Secure: A Guide to Permanently Blocking Attacks
A Permanent IP Blacklist with Fail2ban, UFW, and Ipset Introduction: Beyond Temporary Protection In the digital world, where server attacks are a daily occurrence, merely reacting is not enough. Although tools like Fail2ban provide a basic line of defence, their temporary blocks leave a loophole—persistent attackers can return and try again after the ban expires.…
Wazuh on Your Own Server: Digital Sovereignty at the Cost of Complexity
Faced with the rising costs of commercial solutions and escalating cyber threats, the free security platform Wazuh is gaining popularity as a powerful alternative. However, the decision to self-host it on one’s own servers represents a fundamental trade-off: organisations gain unprecedented control over their data and system, but in return, they must contend with significant…
From Zero to Karaoke Hero: A Complete Guide to Synchronised Lyrics in Jellyfin, TrueNAS, and Finamp
Imagine a music service that not only stores your entire collection in lossless quality but also displays synchronised lyrics in real time, turning every listening session into a karaoke singalong. What’s more, it’s completely yours – free from adverts, subscriptions, and algorithmic tracking. This isn’t a futuristic vision but a completely achievable reality thanks to…
