Tag security
Content related to this tag across projects and blogs.
The security layer in full - phone-number identity, why a signed-cookie session still has to be revocable, the passwordChangedAt trick, CSRF with a webhook exception, five rate limiters keyed on different things, private file storage with signed URLs, and the accounts that cannot be deleted.
Part 1 of a journey learning how I set up my first VPS on Debian 13 Minimal. This part focuses on initial access, system updates, SSH keys, user separation, and SSH hardening to secure the base system before any services are deployed.
Part 2 of a journey learning how I set up my first VPS on Debian 13 Minimal. Fixing the Debian 13 SSH port gotcha, adding swap, closing every port with ufw, banning repeat offenders with fail2ban, and letting security patches apply themselves.
A practical comparison after actually running both - the daemon versus fork-exec model, what rootless containers really protect you from, why systemd integration mattered more than I expected, and the cases where Docker is still the right answer.