Skip to content

Categories

Security

SSH hardening, firewalls, fail2ban, TLS certificates, secrets management and safe remote access. Protect your data without locking yourself out.

In this category

TutorialsSecurityBeginner

How to Install Fail2ban on Ubuntu

Automatically block brute-force SSH and web login attempts by banning abusive IPs — with jails, whitelists and monitoring.

2 min read
ArticlesSecurityIntermediate

The Home Server Security Checklist

A practical checklist to secure your home server: SSH hardening, firewall, updates, backups and safe remote access.

1 min read

Software

A lightweight, self-hosted Bitwarden-compatible vault.

Open sourceFreeSelf-hosted

Glossary

SSH(Secure Shell)

An encrypted protocol for securely logging into and managing servers over a network.

Firewall

Software or hardware that controls which network traffic is allowed in or out based on rules.

TLS/SSL

The encryption that secures connections, shown as the padlock and https:// in your browser.

Let's Encrypt

A free, automated certificate authority that issues the TLS certificates used to enable HTTPS.

ACME(Automatic Certificate Management Environment)

The protocol used to automatically obtain and renew free TLS certificates, most famously from Let's Encrypt.

TOTP(Time-based One-Time Password)

A six-to-eight digit code that changes every 30 seconds, used as a second authentication factor.

2FA / MFA(Two-Factor / Multi-Factor Authentication)

Requiring more than just a password to log in — typically something you know plus something you have.

SSO(Single Sign-On)

Logging in once with a central identity provider to access many separate applications.

OAuth / OIDC(Open Authorization / OpenID Connect)

Standards that let apps delegate authentication and authorization to a trusted identity provider.