tag: hardening.

2026·07·11 Installing NextCloud Securely on Ubuntu with Apache A hardened NextCloud deployment on Ubuntu 24.04 with Apache, PHP 8.3, MySQL, Redis and Let's Encrypt. tutorial · defence · nextcloud · self-hosting · apache · mysql · redis · hardening 18 min 2026·05·12 Configure Fail2Ban: Protecting Linux Services from Brute Force Install and configure Fail2Ban on Ubuntu to protect SSH, Apache and other services with rate-limiting and IP banning. tutorial · defence · fail2ban · linux · hardening · ssh 10 min 2026·03·10 Hardening Microsoft 365 for a Small Business Most small businesses run Microsoft 365 and have never touched its security settings. This tutorial covers the controls that matter, in order of impact. tutorial · defence · microsoft-365 · small-business · hardening · email · cloud 14 min tutorial 2026·03·07 The two disciplines that quietly do most of the work Default-deny on USB and hardware-backed multi-factor authentication. Two unfashionable practices that, between them, would prevent more compromise than any tool a CISO will buy this year. operational · craft · hardening 5 min 2026·02·11 fail2ban is not access control. It is not nothing, either. A short essay on the long argument I keep having with people who should know better. technical · hardening · ssh 4 min 2026·02·03 Setting Up MFA Everywhere: A Practical Small-Business Guide Multi-factor authentication is the single highest-leverage security control most small businesses still have not enabled. Ten minutes per service, done once. tutorial · defence · mfa · small-business · hardening · authentication 12 min tutorial 2026·01·21 Configure psad: Detecting Port Scans on Linux Install and configure psad on Ubuntu to detect and optionally block network port scans using iptables log analysis. tutorial · defence · psad · linux · hardening · intrusion-detection 9 min 2026·01·19 Installing and Configuring Postfix with ClamAV and SpamAssassin Build a hardened mail server on Ubuntu with Postfix for delivery, ClamAV for virus scanning and SpamAssassin for spam filtering, integrated through Amavis. tutorial · defence · postfix · clamav · spamassassin · email · hardening · amavis 22 min 2026·01·19 Self-Hosting a Password Manager with Vaultwarden on Ubuntu Every credential your organisation holds, stored on someone else's server. Vaultwarden gives you the Bitwarden experience without the trust dependency. tutorial · defence · vaultwarden · password-manager · self-hosting · docker · hardening 12 min tutorial 2025·12·08 Building a Honeypot with T-Pot on Ubuntu I have run honeypots since 1998. T-Pot bundles a dozen of them behind a single dashboard and turns passive observation into actionable intelligence. tutorial · defence · honeypot · t-pot · threat-intelligence · linux · hardening 15 min tutorial 2025·11·27 Hardening Firefox for Privacy Tor is for when you need anonymity. This is for the everyday browser — configured so it stops volunteering information about you to every site you visit. tutorial · privacy · firefox · browser · hardening · dns 13 min tutorial 2025·10·14 Full-Disc Encryption with LUKS on Ubuntu If someone takes your machine, encryption is the difference between a hardware loss and a data breach. LUKS makes it a checkbox at install time. tutorial · privacy · luks · encryption · linux · hardening 10 min tutorial 2025·09·22 Setting Up Unattended Security Upgrades on Ubuntu Most Linux servers that get compromised had a patch available weeks before the breach. Unattended-upgrades applies security fixes while you sleep. tutorial · defence · patching · linux · hardening · ubuntu 8 min tutorial 2025·08·11 Setting Up WireGuard VPN on Ubuntu WireGuard is the VPN that replaced everything else on my network. Server setup, client configuration, DNS leak prevention, and kill switches. tutorial · defence · wireguard · vpn · linux · hardening · privacy 13 min tutorial 2025·06·15 Configuring UFW Firewall Rules on Ubuntu UFW is the sane front-end to iptables. This tutorial covers default-deny policies, service rules, rate limiting, logging, and the Docker gotcha that breaks all of it. tutorial · defence · ufw · linux · hardening · firewall 9 min tutorial