Adventures in IPv6, Firewalls & the “Oops-I-Forgot” Department 🚀
So, a few days ago I thought: “Hey, let’s be cool, ditch Apache, and hop onto the Nginx hype train because… HTTP/3, baby!” 🎉 Fast-forward to today, when I decided…
🔐 Apache under AppArmor: A Clean Static Profile Setup on Debian 12
Running Apache with AppArmor on Debian 12 doesn’t have to be messy. Forget about mod_apparmor, forget about “hats”, and ignore the dynamic module rabbit hole. We’ll use a simple, maintainable…
🛡️ Getting ClamAV Daemon to Play Nice with Nextcloud’s Antivirus App (Like a True Nerd)
If you’re like me and want your Nextcloud to scream the moment something shady shows up in your files, then you’re probably using the Antivirus for Files app. But here’s…
🛡️ Locking Down Your USB Drive on Linux – the Geek Way
So I’ve decided to stash an external USB drive — fully encrypted with AES-256 — at a family member’s or friend’s place, just to have an offsite backup of all…
Pi-hole installed. Ads: terminated.
🧙 Pi-hole – The DNS Guardian of Your Network Pi-hole is like the Gandalf of your network — standing at the gateway shouting: “You shall not pass!” …to ads and…
iptables, Protectli & Paranoia: Basic Segmentation for the Home Lab
At home, in my homelab, I run multiple internal networks.There’s one for trusted client devices, and another that’s less trusted — kind of like a DMZ. The DMZ hosts those…
2 Years Deep into the Google Pixel 6 x GrapheneOS Life
So, I’ve been rocking a Google Pixel 6 for about two years now — but not with stock Android. Nope, I flashed that sucker with GrapheneOS, and honestly, I haven’t…