Linux
SSH Hardening Checklist for Ubuntu Servers
Lock down SSH on Ubuntu 24.04 without locking yourself out: keys only, no root, the cloud-init drop-in trap, socket activation, verification.
Linux server guides from real setups: Ubuntu and Debian, systemd, firewalls, backups, mail and the gotchas that bite in production.
Linux
Lock down SSH on Ubuntu 24.04 without locking yourself out: keys only, no root, the cloud-init drop-in trap, socket activation, verification.
Linux
Palworld dedicated server on Ubuntu via SteamCMD: native Linux build, systemd unit, the empty PalWorldSettings.ini trap, steamclient.so fix, backups.
Linux
rsync backups that hold up: trailing-slash rules, dry runs, hard-link snapshots with --link-dest, rotation, pull over SSH with rrsync, a timer.
Linux
Install Docker Engine + the compose plugin from Docker's official apt repo on Ubuntu/Debian, ditch the snap, and fix log growth and the UFW bypass.
Linux
Disk full on Linux: df, du, ncdu, deleted-but-open files, inodes, journald, Docker and snap leftovers, and how to free space safely.
Linux
Write a systemd service unit that survives reboots and crashes: anatomy, restart policy, env files, sandboxing, drop-in overrides, gotchas.
Linux
A working nginx reverse proxy on Ubuntu: proxy headers, WebSockets, Let's Encrypt via certbot, a catch-all server, and the 502/413 gotchas.
Linux
UFW on Ubuntu and Debian without the lockout: SSH first, a dead-man switch, rule order, subnet and game ports, and the Docker bypass.
Linux
fail2ban for SSH and nginx on Ubuntu 24.04 / Debian 12-13: jail.local, systemd backend, a custom scanner filter, testing with fail2ban-regex, and gotchas.
Linux
Copy-paste prompts for sysadmin work with Claude or any LLM: explain commands, write scripts, triage logs, review configs, convert Bash to PowerShell.
Linux
logrotate for your own apps on Ubuntu/Debian: a working config, create vs copytruncate, postrotate reloads, maxsize, testing with -d, common traps.
Linux
Admin and service users on Ubuntu/Debian: adduser vs useradd, groups, sudoers drop-ins, SSH keys with correct permissions, and locking users properly.