# ByteGuard — Full Content Index > Security and self-hosting blog at byte-guard.net, written by enim. > Topics: VPS self-hosting, Docker security, Linux hardening, CTF write-ups, CVE spotlights, tool reviews. > All posts are original technical content with working code examples, tested on real infrastructure. ## Site - Homepage: https://blog.byte-guard.net - Resources: https://blog.byte-guard.net/resources/ - About: https://blog.byte-guard.net/about/ - Sitemap: https://blog.byte-guard.net/sitemap.xml ## Tools (live at tools.byte-guard.net) - SSL/TLS Checker: Verify certificate validity, expiry, issuer, and chain for any domain. - Security Headers Scanner: Check HTTP security headers (CSP, HSTS, X-Frame-Options, etc.) for any URL. - DNS Lookup: Query A, AAAA, MX, TXT, NS, and CNAME records for any domain. ## VPS & Self-Hosting ### How I Built byte-guard.net from Scratch on a Hetzner VPS URL: https://blog.byte-guard.net/building-byteguard-from-scratch-hetzner-vps/ Description: Step-by-step guide to building a self-hosted security blog with Ghost, Nginx Proxy Manager, and Uptime Kuma on a Hetzner VPS. ### Hetzner vs Contabo vs Vultr: Best VPS for Self-Hosting in 2026 URL: https://blog.byte-guard.net/best-vps-self-hosting-hetzner-contabo-vultr/ Description: Honest comparison of Hetzner, Contabo, and Vultr from someone who pays for two of them. Specs, real-world pros and cons, and a pick for each use case. ### Hetzner Review 2026: My Honest Experience URL: https://blog.byte-guard.net/hetzner-review-2026/ Description: Hetzner Cloud review after months of real use — performance benchmarks, pricing breakdown, dashboard UX, and honest pros/cons. ### How to Self-Host Vaultwarden with Docker URL: https://blog.byte-guard.net/self-host-vaultwarden/ Description: Self-host Vaultwarden (Bitwarden-compatible) with Docker Compose — full guide including SSL, admin panel, and backup. ### Top 10 Self-Hosted Alternatives to SaaS Tools URL: https://blog.byte-guard.net/self-hosted-alternatives-saas/ Description: Ditch the subscriptions — 10 self-hosted alternatives to popular SaaS tools you can run on your own server with Docker. ### Self-Hosting Nextcloud with Docker Compose URL: https://blog.byte-guard.net/self-host-nextcloud-docker/ Description: Self-host Nextcloud with Docker Compose, MariaDB, and Nginx reverse proxy. Includes SSL, performance tuning, and backup. ### How to Build a Home Lab with Proxmox VE URL: https://blog.byte-guard.net/proxmox-home-lab-setup/ Description: Step-by-step Proxmox home lab setup: install Proxmox VE, create VMs and containers, configure networking and storage. ### How to Self-Host Gitea with Docker Compose URL: https://blog.byte-guard.net/self-host-gitea-docker/ Description: Self-host Gitea with Docker Compose, PostgreSQL, and Nginx reverse proxy. Includes SSH passthrough and CI/CD setup. ## Linux & Server Security ### How to Harden Your Linux VPS in 10 Minutes URL: https://blog.byte-guard.net/harden-linux-vps-10-minutes/ Description: Lock down a fresh Linux VPS: SSH keys, root disable, UFW firewall, Fail2Ban, and unattended upgrades. ### Docker Security Best Practices for Self-Hosters in 2026 URL: https://blog.byte-guard.net/docker-security-best-practices/ Description: Secure your Docker containers with 10 battle-tested practices — rootless mode, network isolation, image scanning, and read-only filesystems. ### Setting Up WireGuard VPN on Your Own Server URL: https://blog.byte-guard.net/wireguard-vpn-setup/ Description: Set up a WireGuard VPN on your own VPS in under 15 minutes — full walkthrough with Docker, key generation, and client config. ### SSH Hardening — The Ultimate Guide for 2026 URL: https://blog.byte-guard.net/ssh-hardening-guide/ Description: Harden your SSH server: key-based auth, port changes, Fail2Ban, 2FA, and sshd_config best practices explained. ### How to Set Up Fail2Ban on Your Server URL: https://blog.byte-guard.net/fail2ban-setup-guide/ Description: Set up Fail2Ban to protect your Linux server from brute-force attacks — SSH jails, custom filters, and Docker support. ### How to Monitor Your Server with Uptime Kuma URL: https://blog.byte-guard.net/uptime-kuma-setup-guide/ Description: Set up Uptime Kuma with Docker to monitor servers, get instant alerts, and create public status pages. ### Advanced Docker Container Security Guide URL: https://blog.byte-guard.net/advanced-docker-container-security/ Description: Master advanced Docker security with seccomp, AppArmor, Trivy scanning, Falco runtime monitoring, and image signing. ## Web & Application Security ### Nginx Proxy Manager vs Traefik vs Caddy URL: https://blog.byte-guard.net/nginx-proxy-manager-vs-traefik-vs-caddy/ Description: Hands-on comparison of the three best reverse proxies for self-hosting: NPM for GUI simplicity, Traefik for Docker-native dynamic config, Caddy for clean config files. ### Ghost vs WordPress in 2026: Which Is Better for Technical Blogs? URL: https://blog.byte-guard.net/ghost-vs-wordpress-technical-blog/ Description: Ghost vs WordPress for technical blogging — real experience with both. Performance, SEO, customization, pricing, and a clear recommendation. ### How to Check Your Website's Security Headers URL: https://blog.byte-guard.net/check-security-headers/ Description: Check and configure security headers (CSP, HSTS, X-Frame-Options) in Nginx, Apache, and Caddy to protect against XSS and clickjacking. ### OWASP Top 10 Explained with Real Examples URL: https://blog.byte-guard.net/owasp-top-10-explained/ Description: The OWASP Top 10 explained with real code examples in Python and JavaScript — each vulnerability, why it matters, and how to fix it. ### 15 Best Free Security Tools in 2026 URL: https://blog.byte-guard.net/best-free-security-tools-2026/ Description: Best free security tools in 2026 for network scanning, web testing, password auditing, and monitoring — all open source. ## Offensive Security & CTF ### HackTheBox Cap Walkthrough — Step by Step URL: https://blog.byte-guard.net/ctf-walkthrough-cap/ Description: Complete HackTheBox Cap walkthrough from recon to root using PCAP analysis, credential reuse, and Linux capabilities abuse. ### HackTheBox Lame Walkthrough — Step by Step URL: https://blog.byte-guard.net/hackthebox-lame-walkthrough/ Description: Complete HackTheBox Lame walkthrough with two exploitation paths — Samba CVE and distcc — for CTF beginners. ### How to Use Nmap Like a Pro — Beginner's Guide URL: https://blog.byte-guard.net/nmap-tutorial-beginners/ Description: Learn Nmap from scratch: scanning techniques, service detection, NSE scripts, and OS fingerprinting with practical examples.