Posts with Tag: security

Hermes Agent by Nous Research is a self-hosted AI agent that runs shell, file, and development tools on the machine where its profile is active. That makes a multi-device installation a fleet of independent runtimes, not one database replicated betwe…

This guide provides a streamlined approach to deploying a powerful and secure web stack using Traefik as a reverse proxy and CrowdSec for threat protection. We will use Docker Compose to orchestrate the services, creating a setup that is easy to mana…

Changelog DateChange 2026-10-12Correct Docker privilege, effective log-retention and network-audit claims. 2026-05-04Initial Version: Full audit script with comprehensive explanations. Introduction to the Server Security Audit Script When you…

Welcome to the essential security guide for any new Debian server. A fresh installation is a blank slate, and taking the right steps immediately after setup is crucial for protecting your server from threats. This guide provides a logical, step-by-st…

Tandoor Recipes is a self-hosted recipe manager with meal planning, shopping lists, cookbooks, recipe imports, sharing, and a mobile-friendly Progressive Web App. It is designed for private households and small groups rather than as a public recipe w…

Shared file-defined middleware uses the @file provider suffix. Traefik provider namespaces. This tutorial explains how to deploy a simple and secure Nginx web server using Docker Compose. This setup is designed to run behind an existing Traefik rever…

Shared file-defined middleware uses the @file provider suffix. Traefik provider namespaces. This guide deploys Mox as a native mail server managed by systemd, while keeping Traefik v3 responsible for the public HTTPS routes. This is the cleanest patt…

Shared file-defined middleware uses the @file provider suffix. Traefik provider namespaces. Mailcow is a powerful and flexible open-source mail server suite that allows you to manage your email communications securely and efficiently. With Mailcow, y…

Shared file-defined middleware uses the @file provider suffix. Traefik provider namespaces. Immich is currently the most powerful open-source alternative to Google Photos. It offers high-performance backup, AI-driven face recognition, and a polished …

Shared file-defined middleware uses the @file provider suffix. Traefik provider namespaces. Authelia is a self-hosted authentication and authorization server. It can add a central login and a second factor to web applications through a reverse proxy,…