WIUNIX ACADEMY
Practical knowledge. Better systems.
Tutorials for building, securing and operating your infrastructure. Find a topic, follow the steps and put what you learn to work.
START WITH A QUESTION
What do you want to learn?
FIND YOUR FOCUS
Choose what comes next.
From infrastructure fundamentals to the everyday work of IT teams.
Servers & operating systems
Linux, service management and availability.
Networks & connectivity
Routing, VPNs and connecting your systems.
Security & access
Protect services and manage trusted access.
Web services & databases
Web servers, HTTPS, caching and databases.
Virtualization & containers
Application containers and virtual environments.
Backup & monitoring
Storage, recovery, metrics and service health.
TAKE A CLOSER LOOK
On your reading list.
Databases
PostgreSQL with Patroni: replication, quorum and safe switchover
Build a fresh PostgreSQL18/Patroni lab with TLS, three-member etcd quorum, WAL checks and a planned switchover, with explicit fencing and recovery limits.
Read tutorialSecurity
Fail2ban for Nginx: trustworthy logs, scoped bans and recovery
Trace repeated HTTP authentication failures from a minimal Nginx log to a dedicated jail, rehearse safely, then activate a narrowly scoped host firewall action.
Read tutorialMonitoring
Prometheus and Grafana with Docker Compose: private monitoring and recovery
Build a private monitoring stack with pinned images, service discovery, provisioned dashboards, persistent data and a safe backup/restore rehearsal.
Read tutorialTHE KNOWLEDGE LIBRARY
Latest tutorials
20 tutorials · Page 1 / 2
MinIO S3 Object Storage Setup – Nginx TLS, Users, Buckets & Backups
Choose a resilient topology, separate API and console exposure, create scoped policies, enable versioning, and test restore paths.
Read tutorialCrowdSec Nginx Bouncer Protection: Abuse Blocking & Rate Limiting
Parse trustworthy logs, evaluate scenarios, enforce decisions at Nginx, and test remediation without creating a new outage path.
Read tutorialVaultwarden Self Hosted HTTPS: Secure Docker Setup with Nginx, TLS, and Admin Token
Deploy Vaultwarden on loopback, protect the admin token, proxy it safely, and prove recovery before storing real credentials.
Read tutorialPrivate Docker Registry HTTPS: Secure Setup with Nginx and Basic Auth
Deploy CNCF Distribution with persistent storage, bcrypt authentication, correct proxy headers, backups, and push/pull verification.
Read tutorialOpenVPN Server with Google Authenticator MFA: UDP 1194, Easy-RSA, PAM MFA
Combine certificate identity, PAM-backed TOTP, recovery controls, and staged rollout without weakening the VPN's TLS layer.
Read tutorialHAProxy Load Balancer with Let's Encrypt: HTTPS Frontend + Two Backends
Build a certificate bundle, preserve ACME renewal, validate proxy headers, and roll backend changes safely.
Read tutorialWireGuard Hub and Spoke BGP FRR: Dynamic Routing Across Multiple Sites
Replace static route sprawl with filtered BGP sessions over encrypted point-to-point tunnels.
Read tutorial
PostgreSQL with Patroni: replication, quorum and safe switchover
Build a fresh PostgreSQL18/Patroni lab with TLS, three-member etcd quorum, WAL checks and a planned switchover, with explicit fencing and recovery limits.
Read tutorial
Fail2ban for Nginx: trustworthy logs, scoped bans and recovery
Trace repeated HTTP authentication failures from a minimal Nginx log to a dedicated jail, rehearse safely, then activate a narrowly scoped host firewall action.
Read tutorial
Prometheus and Grafana with Docker Compose: private monitoring and recovery
Build a private monitoring stack with pinned images, service discovery, provisioned dashboards, persistent data and a safe backup/restore rehearsal.
Read tutorial
Set up Traefik with Let’s Encrypt and HTTP/3 on Ubuntu and Debian
Build a dedicated Traefik edge with verified TLS, a loopback origin and private dashboard. Separate staging from production, prove HTTP/3 and protect certificate recovery.
Read tutorial
Set up Caddy with automatic HTTPS, step by step
Choose your Linux version, install Caddy, connect a private backend and verify automatic HTTPS—with copyable commands, expected results and fixes for common errors.
Read tutorial