TOPIC / TAG
Notes in security
6 articles
fail2ban for SSH on Debian 13
Install fail2ban on Debian 13, understand the sshd jail the package already enables, tune bans in a local override, and check, test, and undo bans safely.
ufw Without Locking Yourself Out
Set up ufw on a Debian or Ubuntu VPS with SSH allowed first, a timed rollback in case a rule is wrong, and a clear view of the Docker ports ufw cannot see.
Unattended Upgrades You Can Actually Check
Enable automatic security updates with unattended-upgrades on Debian and Ubuntu, see exactly what it will install, pick a reboot policy, and confirm it really ran.
A Calm SSH Host Key Check
Check what really changed when SSH warns about a new host key, before deleting the old entry from knownhosts.
A Small GitHub Actions Workflow That Runs Your Tests
A compact GitHub Actions workflow that tests a Node project on pushes and pull requests, with npm caching, a concurrency group, read-only permissions, SHA-pinned actions, and a short routine for reading failed runs.
The First Hour on a Fresh Debian or Ubuntu VPS
Set up a sudo user, SSH keys, an sshd drop-in that blocks password and root logins, a ufw firewall, and automatic security updates on a new Debian or Ubuntu server, checking each step as you go.