Hardening a fresh Ubuntu 24.04 VPS in twenty minutes
SSH key-only login, a sane sshd_config, unattended-upgrades, and why I still don't bother with fail2ban on single-purpose boxes.
Recent Posts
Notes on TLS fingerprinting and why SNI consistency matters
A walkthrough of what a passive observer can learn from a TLS handshake, and a checklist for keeping your deployment boring.
Migrating a static blog from GitHub Pages to nginx
wget --mirror is 90% of the job. The other 90% is remembering to fix canonical URLs and redirect rules.
What I learned running my own DNS records at Namecheap
TTL tradeoffs, apex A records versus ALIAS, and the one TXT record everyone forgets.
About
This site is a personal notebook. Posts are written for my future self; if they help you too, that's a bonus. No tracking, no comments, no newsletter.