9 articles tagged "security"
Your public server is being probed right now. The hardening checklist I run on every machine, SSH keys and firewalls and CrowdSec and non-root containers, in the order I apply it, before something else finds the gap first.
Infisical is an open-source secrets manager you can self-host. Centralized secrets with environments, versioning, audit logs and a CLI that injects them at runtime, so .env files stop living on your disk and in your git history.
Pangolin is a self-hosted, identity-aware tunneled reverse proxy. Your home server dials out over WireGuard to your own VPS, and you get per-user access control, SSO and browser-based remote access without exposing your network.
Authentik is a self-hosted identity provider that puts single sign-on, MFA and central user management in front of your whole stack. One strong password and one MFA prompt instead of twenty weak ones.
Watchtower watches your Docker images for new versions, pulls them and restarts containers automatically on a schedule you control. Stop patching twenty containers by hand and let the boring part run itself.
Frigate is a self-hosted NVR with real-time AI object detection. Person, car and animal alerts from your RTSP cameras, event recordings and Home Assistant integration, with no cloud subscription holding your footage hostage.
Tailscale is amazing but depends on their servers. Headscale lets you run the same thing on your own infrastructure.
I lost 2TB of data because I thought 'it will be fine.' Then I built a backup strategy that actually works.
LastPass got breached. Then 1Password raised prices. I built my own password manager with Vaultwarden and it is actually better.