# ByteGuard > Security and self-hosting blog covering VPS setup, Docker security, Linux hardening, > CTF write-ups, CVE spotlights, and open-source tool reviews. Written by enim. > Site: https://blog.byte-guard.net ## Tools - [SSL/TLS Checker](https://blog.byte-guard.net/tools/ssl/): Check SSL certificate validity and chain for any domain. - [Security Headers Checker](https://blog.byte-guard.net/tools/headers/): Scan HTTP security headers for any URL. - [DNS Lookup](https://blog.byte-guard.net/tools/dns/): Query DNS records (A, MX, TXT, NS) for any domain. ## VPS & Self-Hosting - [How I Built byte-guard.net from Scratch on a Hetzner VPS](https://blog.byte-guard.net/building-byteguard-from-scratch-hetzner-vps/): Step-by-step guide to building a self-hosted security blog with Ghost, Nginx Proxy Manager, and Uptime Kuma on a Hetzner VPS. - [Hetzner vs Contabo vs Vultr: Best VPS for Self-Hosting in 2026](https://blog.byte-guard.net/best-vps-self-hosting-hetzner-contabo-vultr/): Honest comparison of Hetzner, Contabo, and Vultr from someone who pays for two of them. - [Hetzner Review 2026: My Honest Experience](https://blog.byte-guard.net/hetzner-review-2026/): Hetzner Cloud review after months of real use — performance benchmarks, pricing breakdown, dashboard UX, and honest pros/cons. - [How to Self-Host Vaultwarden with Docker](https://blog.byte-guard.net/self-host-vaultwarden/): Self-host Vaultwarden (Bitwarden-compatible) with Docker Compose — full guide including SSL, admin panel, and backup. - [Top 10 Self-Hosted Alternatives to SaaS Tools](https://blog.byte-guard.net/self-hosted-alternatives-saas/): Ditch the subscriptions — 10 self-hosted alternatives to popular SaaS tools you can run on your own server with Docker. - [Self-Hosting Nextcloud with Docker Compose](https://blog.byte-guard.net/self-host-nextcloud-docker/): Self-host Nextcloud with Docker Compose, MariaDB, and Nginx reverse proxy. - [How to Build a Home Lab with Proxmox VE](https://blog.byte-guard.net/proxmox-home-lab-setup/): Step-by-step Proxmox home lab setup: install Proxmox VE, create VMs and containers, configure networking and storage. - [How to Self-Host Gitea with Docker Compose](https://blog.byte-guard.net/self-host-gitea-docker/): Self-host Gitea with Docker Compose, PostgreSQL, and Nginx reverse proxy. ## Linux & Server Security - [How to Harden Your Linux VPS in 10 Minutes](https://blog.byte-guard.net/harden-linux-vps-10-minutes/): Lock down a fresh Linux VPS: SSH keys, root disable, UFW firewall, Fail2Ban, and unattended upgrades. - [Docker Security Best Practices for Self-Hosters in 2026](https://blog.byte-guard.net/docker-security-best-practices/): Secure your Docker containers with 10 battle-tested practices — rootless mode, network isolation, image scanning, and read-only filesystems. - [Setting Up WireGuard VPN on Your Own Server](https://blog.byte-guard.net/wireguard-vpn-setup/): Set up a WireGuard VPN on your own VPS in under 15 minutes — full walkthrough with Docker, key generation, and client config. - [SSH Hardening — The Ultimate Guide for 2026](https://blog.byte-guard.net/ssh-hardening-guide/): Harden your SSH server: key-based auth, port changes, Fail2Ban, 2FA, and sshd_config best practices explained. - [How to Set Up Fail2Ban on Your Server](https://blog.byte-guard.net/fail2ban-setup-guide/): Set up Fail2Ban to protect your Linux server from brute-force attacks — SSH jails, custom filters, and Docker support. - [How to Monitor Your Server with Uptime Kuma](https://blog.byte-guard.net/uptime-kuma-setup-guide/): Set up Uptime Kuma with Docker to monitor servers, get instant alerts, and create public status pages. - [Advanced Docker Container Security Guide](https://blog.byte-guard.net/advanced-docker-container-security/): Master advanced Docker security with seccomp, AppArmor, Trivy scanning, Falco runtime monitoring, and image signing. ## Web & Application Security - [Nginx Proxy Manager vs Traefik vs Caddy](https://blog.byte-guard.net/nginx-proxy-manager-vs-traefik-vs-caddy/): Hands-on comparison of the three best reverse proxies for self-hosting: NPM for GUI simplicity, Traefik for Docker-native dynamic config, Caddy for clean config files. - [Ghost vs WordPress in 2026: Which Is Better for Technical Blogs?](https://blog.byte-guard.net/ghost-vs-wordpress-technical-blog/): Ghost vs WordPress for technical blogging — real experience with both. - [How to Check Your Website's Security Headers](https://blog.byte-guard.net/check-security-headers/): Check and configure security headers (CSP, HSTS, X-Frame-Options) in Nginx, Apache, and Caddy to protect against XSS and clickjacking. - [OWASP Top 10 Explained with Real Examples](https://blog.byte-guard.net/owasp-top-10-explained/): The OWASP Top 10 explained with real code examples in Python and JavaScript — each vulnerability, why it matters, and how to fix it. - [15 Best Free Security Tools in 2026](https://blog.byte-guard.net/best-free-security-tools-2026/): Best free security tools in 2026 for network scanning, web testing, password auditing, and monitoring — all open source. ## Offensive Security & CTF - [HackTheBox Cap Walkthrough — Step by Step](https://blog.byte-guard.net/ctf-walkthrough-cap/): Complete HackTheBox Cap walkthrough from recon to root using PCAP analysis, credential reuse, and Linux capabilities abuse. - [HackTheBox Lame Walkthrough — Step by Step](https://blog.byte-guard.net/hackthebox-lame-walkthrough/): Complete HackTheBox Lame walkthrough with two exploitation paths — Samba CVE and distcc — for CTF beginners. - [How to Use Nmap Like a Pro — Beginner's Guide](https://blog.byte-guard.net/nmap-tutorial-beginners/): Learn Nmap from scratch: scanning techniques, service detection, NSE scripts, and OS fingerprinting with practical examples.