Ubuntu, Debian and general Linux server setup, services, networking and hardening.
35 posts
Stand up a Velocity proxy on Linux from zero — install, velocity.toml, modern IP forwarding to Paper backends, systemd unit, firewall. The clean install, no BungeeCord baggage.
Full breakdown of BungeeCord's config.yml — listeners, servers, IP forwarding, priorities, the options nobody documents and the ones that bite you.
Real backup setup with Restic — encrypted offsite to S3 or self-hosted MinIO, dedup, retention, and the restore-drill that proves your backups actually work.
df shows 100%. du takes forever. Here's the fast way to find what's killing your disk — from the usual suspects to the stuff that only shows up after you know where to look.
UFW makes iptables manageable. The catch is the order you run the commands matters — get it wrong and you're locked out of SSH. Here's the safe sequence.
Any public-facing server gets hit with SSH brute force attempts within minutes of going live. fail2ban bans the IPs automatically. Setup takes 10 minutes.
One server, multiple services, one public IP. Nginx routes requests to the right container based on the domain. Here's the setup I use in production.
Build a reusable Ubuntu cloud-image template on Proxmox with cloud-init. Clone, set hostname, IP, SSH key, boot — full VM in under a minute. The setup I run on node1.
Ubuntu will push you toward the Snap package. Don't. Here's how to install Docker from the official repo and actually have it work.
Full reference for managing Linux users from the command line — create, sudo, SSH keys, groups, disable, delete, service accounts and bulk scripts.
Install Netdata on Ubuntu for per-second server metrics. Install, bind to localhost, SSH-tunnel the dashboard, ship alerts to Discord.
Minimal WireGuard setup on Ubuntu. Server config, one client, UFW rule, QR code for the phone. The version I run on my home-lab jumpbox.