17 posts
The GPOs every domain should have — password policy, account lockout, audit, RDP restrictions, SMBv1 / LLMNR / NTLMv1 kill, BitLocker enforcement. The defaults are not enough.
Install Netdata on Ubuntu for per-second server metrics. Install, bind to localhost, SSH-tunnel the dashboard, ship alerts to Discord.
Minimal WireGuard setup on Ubuntu. Server config, one client, UFW rule, QR code for the phone. The version I run on my home-lab jumpbox.
Lock down SSH on Ubuntu: key-only auth, no root login, MaxAuthTries, AllowUsers, fail2ban. sshd_config reference and gotchas.
Domain-join Windows Server via PowerShell Add-Computer. DNS prereqs, OU placement, verify, rollback. Commands and gotchas.