enim

Security researcher, CTF player, and compulsive self-hoster. Building byte-guard.net from a $10/mo Hetzner VPS. Everything I publish I have actually run in production.

Seven stacked cyan layers labelled with globe, envelope, shield, key, server, cloud, and lock icons — the 2026 self-hoster's privacy stack.
[ privacy ]

The 2026 Self-Hoster's Privacy Stack: every tool I actually pay for, configured end-to-end

TL;DR: A working privacy stack in 2026 is not a single tool. It's seven decisions made in the right

May 29 · 8 min
A
Three cyan envelopes side-by-side, each sealed with a lock, key, and shield glyph — representing Proton Mail, Tutanota, and Mailbox.org compared.
[ email ]

Private Email Showdown 2026: Proton Mail vs Tutanota vs Mailbox.org — I ran all three for 90 days

TL;DR: - Proton Mail — best default for most people. Custom domain works, the apps are polished, deliverability is the best of the

May 26 · 6 min
A
Glowing cyan padlock with a globe inside, orbiting network nodes — symbolising Proton VPN's encrypted tunnels across the world.
[ vpn ]

Proton VPN in 2026: I ran it for 60 days on my self-hosted stack — here's what works and what doesn't

TL;DR: Proton VPN is the right default for most self-hosters who want a privacy-respecting VPN without DIYing one. It&

May 23 · 8 min
A
Cybersecurity toolkit illustration with shields and scanning icons on dark navy background
[ security ]

15 Best Free Security Tools in 2026

I spend a lot of time testing security tools — for my own infrastructure, for CTF challenges, and for the tools I recommend

May 13 · 9 min
A
World map with server nodes in Helsinki, Frankfurt, Amsterdam and a latency bar chart showing benchmarks for 5 VPS providers
[ vps ]

Hetzner vs Contabo vs Vultr vs Linode vs DO: 30-Day VPS Data

TL;DR 33 days of real Uptime Kuma data from a Hetzner CPX22 in Helsinki: 99.98% uptime over 46,934 health

May 10 · 10 min
A
Gitea server with Git branch tree, Docker whale carrying containers, SSH key, SSL proxy, and CI/CD pipeline
[ self-hosting ]

How to Self-Host Gitea with Docker Compose

GitHub is free, reliable, and deeply integrated into every developer's workflow. So why would anyone self-host Gitea as an

Apr 30 · 10 min
A
Fortified Docker container with seccomp filter, Falco owl monitoring, Trivy scanner, image signing, and chains of trust
[ docker-2 ]

Advanced Docker Container Security Guide

If you followed my earlier post on Docker security best practices, you already know the fundamentals: non-root users, read-only filesystems,

Apr 29 · 10 min
A