Academy
Academy
Technical education and operational guidance.
Oct 23, 2025
MinIO S3 Object Storage Setup – Nginx TLS, Users, Buckets & Backups
Choose a resilient topology, separate API and console exposure, create scoped policies, enable versioning, and test restore paths.
Read more →Oct 21, 2025
CrowdSec Nginx Bouncer Protection: Abuse Blocking & Rate Limiting
Parse trustworthy logs, evaluate scenarios, enforce decisions at Nginx, and test remediation without creating a new outage path.
Read more →Oct 21, 2025
Vaultwarden Self Hosted HTTPS: Secure Docker Setup with Nginx, TLS, and Admin Token
Deploy Vaultwarden on loopback, protect the admin token, proxy it safely, and prove recovery before storing real credentials.
Read more →Oct 21, 2025
Private Docker Registry HTTPS: Secure Setup with Nginx and Basic Auth
Deploy CNCF Distribution with persistent storage, bcrypt authentication, correct proxy headers, backups, and push/pull verification.
Read more →Oct 18, 2025
OpenVPN Server with Google Authenticator MFA: UDP 1194, Easy-RSA, PAM MFA
Combine certificate identity, PAM-backed TOTP, recovery controls, and staged rollout without weakening the VPN's TLS layer.
Read more →Oct 15, 2025
HAProxy Load Balancer with Let's Encrypt: HTTPS Frontend + Two Backends
Build a certificate bundle, preserve ACME renewal, validate proxy headers, and roll backend changes safely.
Read more →Oct 14, 2025
WireGuard Hub and Spoke BGP FRR: Dynamic Routing Across Multiple Sites
Replace static route sprawl with filtered BGP sessions over encrypted point-to-point tunnels.
Read more →Oct 13, 2025
PostgreSQL Streaming Replication Failover Patroni: Production Setup
Combine PostgreSQL replication, an independent DCS, fencing, proxy routing, and rehearsed failover without hiding durability trade-offs.
Read more →Oct 13, 2025
Fail2ban Nginx Protection Linux Servers: Step-by-Step Guide
Turn reliable Nginx log signals into bounded bans, test filters safely, and avoid locking out operators.
Read more →