Wiki search
Remote Access — Tailscale, WireGuard, and Mesh VPNs vs. Port Forwarding
Complete beginner guide to accessing your homelab securely from anywhere, comparing Tailscale mesh VPN, native WireGuard, CGNAT traversal, and subnet routing.
Register and Manage Domains with ternisdomains.de
Practical beginner guide to domain registration, nameserver delegation, DNS record management, and security settings on ternisdomains.de.
WHOIS, RDAP, and Domain Privacy — Reading Registration Data
Complete beginner guide to legacy WHOIS vs modern RDAP (RESTful JSON), querying via curl and jq, GDPR redaction rules, and WHOIS privacy.
TXT Records — SPF, DKIM, and DMARC Syntax Masterclass
Complete beginner guide to writing, parsing, and debugging SPF, DKIM, and DMARC TXT records, understanding qualifiers, tags, and avoiding the 10-lookup limit.
DNSSEC Basics — Cryptographic Chain of Trust Explained
Complete beginner guide to DNSSEC, preventing DNS spoofing and cache poisoning, understanding DS, DNSKEY, and RRSIG records, and verifying with dig.
Self-Hosting Authoritative DNS with example-dns
Complete beginner guide to running authoritative nameservers, Primary-Secondary replication, AXFR zone transfers, TSIG security, and the example-dns architecture.
Linux Filesystem Permissions — rwx, chmod, chown, and sudo Hygiene
Complete beginner guide to Linux file permissions, user/group ownership, chmod and chown commands and flags, umask, and safe sudo rules.
SSH Hardening — Keys, sshd_config, and Brute-Force Protection
Complete step-by-step guide to securing SSH access on Linux servers using Ed25519 keys, disabling passwords, hardening daemon configuration, and testing.
Fail2ban — Protect SSH and Web Services from Brute Force
Install, configure, and operate fail2ban to automatically block malicious IP addresses attempting brute-force logins.
Certbot — Automated Let's Encrypt TLS Certificates
Install and configure Certbot to automatically issue and renew free Let's Encrypt SSL/TLS certificates for web servers.
UFW Basics — Default-Deny Firewall on Ubuntu & Debian
Step-by-step beginner guide to configuring Ubuntu's Uncomplicated Firewall (UFW), command breakdown, rules, port syntax, and avoiding SSH lockout.
Install and Secure phpMyAdmin on Ubuntu & Debian
Step-by-step beginner guide to installing phpMyAdmin, configuring blowfish cookie encryption, custom URL aliases, and securing access behind IP and VPN allow-lists.
PDO and MySQL in PHP — Prepared Statements Done Right
Complete beginner guide to secure database access in PHP with PDO, eliminating SQL injection with prepared statements, connection options, and transactions.
Nginx Reverse Proxy with TLS Configuration
Complete beginner guide to setting up an Nginx reverse proxy with TLS encryption, upstream headers, syntax testing, and HSTS security.
TLS with Let's Encrypt — ACME Without Tears
Complete beginner guide to HTTPS certificates, ACME HTTP-01 vs DNS-01 challenges, Certbot commands, flags, automated renewal, and certificate chains.