Docker Security on a Shared VPS
Why Docker bypasses your UFW rules, how to fix it, and container hardening practices that matter on a shared VPS.
Security
UFW, fail2ban, and Banning Repeat Offenders
Configure UFW rules, build a fail2ban jail for Caddy access logs, and escalate bans for repeat offenders with the recidive jail.
SSH Hardening: Ed25519 Keys and Disabling Root Login
Lock down SSH access with ed25519 keys, disable root login, and remove unused authentication methods.
Provision an Ubuntu VPS and Create a Deploy User
Set up a DigitalOcean droplet from scratch: first SSH connection, deploy user, UFW baseline, and unattended upgrades.
Production Linux: Secure and Maintain Your Own VPS
A 10-post series covering the full lifecycle of a production Linux VPS — from first login to disaster recovery.
Docker from Scratch: Secure Your Containers With Non-Root Users
Run containers as non-root users, choose minimal base images, and keep secrets out of your Docker layers.
CORS: Understanding Cross-Origin Resource Sharing
Learn what CORS is, why it’s essential for web security, and how to implement it properly in your applications.