Build a safer self-hosted stack
Practical, tested guides for self-hosting services, hardening Linux servers, and understanding the vulnerabilities that matter.
47-point server hardening PDF · one useful email a week
Latest articles
Vaultwarden vs Bitwarden vs Passbolt (2026)
TL;DR: Vaultwarden is my pick for individuals and small teams, official Bitwarden is the safer supported choice for businesses, and Passbolt
How to Set Up Nginx Proxy Manager with Docker
TL;DR: Nginx Proxy Manager (NPM) is a free, open-source web GUI for Nginx that gives every self-hosted app a
I Self-Host My Own VPN — Do I Still Need Mullvad?
TL;DR: "VPN" is really two different products that happen to share a name. A self-hosted VPN (WireGuard or
WireGuard vs OpenVPN vs Tailscale: Self-Host in 2026
TL;DR: For most self-hosters in 2026, pick WireGuard if you want raw speed and full control, Tailscale if you want
Self-Host Immich on a VPS: Your Own Private Google Photos
TL;DR: Immich is an open-source, self-hosted photo and video platform that genuinely replaces Google Photos — phone auto-backup, AI
The 3-2-1 Backup Setup for Self-Hosters: restic + Backblaze B2
TL;DR: A real backup is encrypted, off-site, and restore-tested. The fastest way to get all three on a self-
Choose where to start
Three focused routes from first deploy to a hardened, observable stack.