enim
Security researcher, CTF player, and compulsive self-hoster. Building byte-guard.net from a $10/mo Hetzner VPS. Everything I publish I have actually run in production.
How to Set Up Fail2Ban on Your Server
TL;DR Install and configure Fail2Ban to automatically block IPs that brute-force your SSH, Nginx, or other services. Includes custom jails
How to Monitor Your Server with Uptime Kuma
TL;DR Deploy Uptime Kuma with Docker Compose and monitor your websites, APIs, and Docker containers in minutes. Get instant alerts via
SSH Hardening — The Ultimate Guide for 2026
TL;DR Go beyond basic SSH setup: disable password auth, lock down sshd_config with strong modern ciphers, add Fail2Ban for automated
HackTheBox Cap Walkthrough — Step by Step
Spoiler Warning: This is a full walkthrough of the retired HackTheBox machine "Cap." If you haven't attempted it
Top 10 Self-Hosted Alternatives to SaaS Tools
The average person pays for 5-10 SaaS subscriptions. Notion, Google Drive, LastPass, Slack, Trello — the monthly total adds up fast. Worse,
How to Self-Host Vaultwarden with Docker
TL;DR Self-host Bitwarden’s open-source backend (Vaultwarden) on your VPS using Docker Compose. Get a fully functional password manager
Nginx Proxy Manager vs Traefik vs Caddy
TL;DR Nginx Proxy Manager, Traefik, and Caddy all handle reverse proxying and SSL — but for different use cases. NPM wins for