Evergreen Linux and self-hosting guides.
Step-by-step operational guides for secure remote access, firewalls, SSH, service management, and practical VPS ownership.
How to Harden SSH on Ubuntu 24.04 Without Locking Yourself Out
Stage SSH changes so you improve access without losing access.
GuideHow to Set Up UFW on a Fresh Ubuntu Server
A simple default-deny firewall baseline.
GuideHow to Use SSH Local Port Forwarding for a Private Dashboard
Reach private dashboards through localhost.
GuideHow to Install Tailscale on Ubuntu for Private SSH
Use a tailnet as the private SSH path.
GuideHow to Publish a Local Web App with Cloudflare Tunnel
Publish HTTP without direct inbound origin ports.
GuideHow to Check What Ports Are Listening on Linux
Use ss, lsof, and systemd for exposure reviews.
GuideHow to Run a Secure Admin Tool Behind Tailscale
Keep admin tools private and reachable through the tailnet.
GuideHow to Add Fail2Ban to an Ubuntu SSH Baseline
Use Fail2Ban as a layer, not the whole defense.
GuideHow to Keep a Simple Public Service Inventory for a VPS
Track every public service, owner, and review date.
SecurityWhere to Store Linux Secrets
Compare environment variables, Compose, systemd, and external stores.
RecoveryRecoverable Backups After Compromise
Separate credentials, isolate copies, and test restores.
GuideHow to Recover When You Break SSH Access to a VPS
Recover from lockouts and prevent the next one.
Privacysystemd Coredumps on Servers
Choose retention and access rules for potentially sensitive crash data.
ComparisonJournald vs Syslog for a Small Server
Choose the right collection, processing, forwarding, and retention boundaries.