Security tutorials
Step-by-step server security tutorials: SSH keys, Fail2ban, UFW firewall rules, Docker port exposure, Remote Desktop hardening, and a private WireGuard VPN.
9 tutorials
- 10 min read
How to Install Docker and Docker Compose on Ubuntu 24.04 and 26.04
Install Docker on Ubuntu 24.04 or 26.04 with the Compose plugin from Docker's apt repository, bind container ports to localhost, and run a stack in 9 steps.
Read tutorial - 12 min read
How to Generate an SSH Key on Windows, macOS, and Linux
Generate SSH keys with ssh-keygen on Windows 11, macOS, or Linux, or with PuTTYgen, then copy the public key to a server and log in with it in 7 steps.
Read tutorial - 15 min read
How to Open a Private Dashboard with an SSH Tunnel (Port Forwarding)
Open a dashboard bound to 127.0.0.1 on your server through an SSH tunnel from Windows, macOS, or Linux, save it in ~/.ssh/config, and keep it alive in 6 steps.
Read tutorial - 14 min read
How to Install and Configure Fail2ban on Ubuntu 24.04 and 26.04
Install Fail2ban on Ubuntu 24.04 or 26.04 and protect SSH in 7 steps: journal backend, UFW bans, incremental ban times, the recidive jail, and unban commands.
Read tutorial - 13 min read
How to Install and Secure OpenClaw on a VPS (Ubuntu 24.04)
Install OpenClaw (formerly Clawdbot and Moltbot) on an Ubuntu 24.04 VPS as an unprivileged user, keep port 18789 on loopback, and connect Telegram.
Read tutorial - 14 min read
How to Install Nginx Proxy Manager with Docker on Ubuntu 24.04
Install Nginx Proxy Manager 2.16.0 with Docker on Ubuntu 24.04 in 9 steps: Let's Encrypt HTTPS, access lists, a shared Docker network and a private admin port.
Read tutorial - 12 min read
How to Secure RDP on Windows Server: Port 3389, NLA, and Firewall
RDP security for Windows Server in 7 steps: turn on NLA, add a named admin account, set a lockout policy, limit port 3389 to your IP, and change the port.
Read tutorial - 12 min read
How to Set Up a WireGuard VPN Server on Ubuntu 24.04
Set up a WireGuard server on Ubuntu 24.04: generate keys, write wg0.conf, add NAT in UFW, open UDP port 51820, and connect a phone by QR code in 9 steps.
Read tutorial - 14 min read
How to Self-Host Headscale on Ubuntu 24.04 (Tailscale Control Server)
Self-host Headscale 0.29 on Ubuntu 24.04 with Let's Encrypt HTTPS, join devices through the Tailscale apps, and set up MagicDNS, an exit node and backups.
Read tutorial