Gameserver
Monitoring a Game Server Over WireGuard — Prometheus Without Exposing a Single Port
Scrape node_exporter across a WireGuard tunnel so no metrics port is public — plus the pps/bps alert that tells you a DDoS from a player spike.
Sysadmin, coder, CIO at one company and CEO of my own. Linux, Windows Server, game servers — I write down what I set up and what broke.
Gameserver
Scrape node_exporter across a WireGuard tunnel so no metrics port is public — plus the pps/bps alert that tells you a DDoS from a player spike.
Linux
Tailscale vs WireGuard compared — Tailscale is built on WireGuard but adds NAT traversal, MagicDNS, ACLs and zero-config mesh. When to pick raw WireGuard instead.
Linux
How to route ports 80/443 to one container and 3389/game ports to another VM behind a single public IP on Proxmox — DNAT rules, hairpin, and making it survive a reboot.
Docker
Coolify vs Dokploy vs CapRover compared — architecture, proxy, git deploys, multi-server, and which self-hosted Heroku alternative to pick for your stack.
Docker
Run Coolify as your own Heroku — install, deploy apps and docker-compose services, automatic HTTPS, plus the API, sslip testing and path-routing cheats.
Windows Server
Run Windows Server Core without the desktop — sconfig basics, PowerShell remoting, Windows Admin Center, adding roles, and the gotchas that catch GUI admins.
Gameserver
Install a CS2 dedicated server on Ubuntu/Debian with SteamCMD, get a GSLT, set the right ports and cvars, add Metamod/CounterStrikeSharp, and run it under systemd.
Docker
Stand up Prometheus, Grafana and node_exporter with Docker Compose — real scrape config, node metrics, a dashboard, and alert rules that actually fire.
Linux
Proxmox VE vs VMware ESXi compared in 2026 — cost, features, clustering, backups — plus how to migrate ESXi VMs to Proxmox with the built-in import wizard.
Docker
Run Uptime Kuma in Docker for uptime monitoring — HTTP/TCP/ping checks, Telegram and Discord alerts, a public status page, and a reverse proxy with TLS.
Security
Set up CrowdSec on Linux as a fail2ban alternative — the agent/bouncer split, parsing logs, the firewall bouncer, community blocklists, and honest trade-offs.
Linux
Replace cron jobs with systemd timers — .timer + .service pairs, OnCalendar syntax, Persistent catch-up, journald logging, and when cron is still fine.