fail2ban: Stop Getting Hammered on SSH and Nginx
Any public-facing server gets hit with SSH brute force attempts within minutes of going live. fail2ban bans the IPs automatically. Setup takes 10 minutes.
Notes on code, games, and the stuff in between.
Any public-facing server gets hit with SSH brute force attempts within minutes of going live. fail2ban bans the IPs automatically. Setup takes 10 minutes.
Stand up a new Active Directory forest from scratch. Install AD DS, promote the first DC, DNS integration, the post-promo checks. PowerShell-driven, no GUI.
One server, multiple services, one public IP. Nginx routes requests to the right container based on the domain. Here's the setup I use in production.
Build a reusable Ubuntu cloud-image template on Proxmox with cloud-init. Clone, set hostname, IP, SSH key, boot — full VM in under a minute. The setup I run on node1.
Ubuntu will push you toward the Snap package. Don't. Here's how to install Docker from the official repo and actually have it work.
Full reference for managing Linux users from the command line — create, sudo, SSH keys, groups, disable, delete, service accounts and bulk scripts.
Install Netdata on Ubuntu for per-second server metrics. Install, bind to localhost, SSH-tunnel the dashboard, ship alerts to Discord.
Minimal WireGuard setup on Ubuntu. Server config, one client, UFW rule, QR code for the phone. The version I run on my home-lab jumpbox.
Three months later your server is running a kernel from last year. Unattended upgrades fix that — here's the setup, auto-reboot config, email notifications and how to check what actually ran.
Fresh Ubuntu Server install. Here's the 13-step checklist I run on every new box before it touches any real work — with a one-shot script at the end.
You want to run a Minecraft server and now you're looking at a list of options: Vanilla, CraftBukkit, Spigot, Paper,
BungeeCord is a proxy that sits in front of multiple Minecraft servers and lets players switch between them without disconnecting. One IP,