--- title: "Advanced Nginx Hardening" date: 2025-03-05T13:51:45+02:00 draft: false tags: ['security', 'hardening', 'configuration', 'hosting', 'technical'] --- Nginx is one of the most widely used web servers and has become a key part of modern enterprise architecture. In this article, we'll explore configuration options that simplify monitoring, enhance performance, and strengthen security — ultimately improving the resilience of your infrastructure JSON Logging JSON is an excellent format for Nginx log files for two key reasons. Read more...

Mutt cheat sheet index Esc + Esc + Esc + Esc + index: numeric row ctrl ^@ ^^ ^_ index: numeric row shift ~ !· invoke shell @ display sender # split up thread $ save mailbox % toggle readonly ^ & thread tagged * last entry ( ) _ + index: numeric row ` 1 2 3 4 5 6 7 8 9 0 - = first entry search flags (/~): numeric row ctrl ^@ ^^ ^_ search flags (/~): numeric row shift ~ ! Read more...

Mutt Manual Abstract “All mail clients suck. This one just sucks less.” — me, circa 1995 Table of Contents 1. Introduction1. Mutt Home Page2. Mailing Lists3. Getting Mutt4. Mutt Online Resources5. Contributing to Mutt6. Typographical Conventions7. Copyright2. Getting Started1. Core Concepts2. Screens and Menus2.1. Index2.2. Pager2.3. File Browser2.4. Sidebar2.5. Help2.6. Compose Menu2.7. Alias Menu2.8. Attachment Menu2.9. List Menu3. Moving Around in Menus4. Editing Input Fields4.1. Introduction4.2. History5. Reading Mail5.1. The Message Index5. Read more...

Despite considering myself a cryptographer, I have not found myself particularly drawn to “crypto.” I don’t think I’ve ever actually said the words “get off my lawn,” but I’m much more likely to click on Pepperidge Farm Remembers flavored memes about how “crypto” used to mean “cryptography” than I am the latest NFT drop. Also – cards on the table here – I don’t share the same generational excitement for moving all aspects of life into an instrumented economy. Read more...

We think the internet can’t be saved. The way things are going, MEGACORP will always control our apps and services because we can no longer run them ourselves. The only way out of this mess is with a completely new platform that’s owned and controlled by its users. Urbit is a new OS and peer-to-peer network that’s simple by design, built to last forever, and 100% owned by its users. Read more...

Disclaimer: the title is slightly hyperbolic, there are other proven solutions to the problem. I do think the technique below is very elegant though. Recently I read about this amazing technique in an Hacker News thread on people's solutions to store their dotfiles. User StreakyCobra showed his elegant setup and ... It made so much sense! I am in the process of switching my own system to the same technique. The only pre-requisite is to install Git. Read more...

In this manual will be created RAID1 with LVM. In this tutorial, disk are mounted in system as /dev/sdX and /dev/sdY Prerequisites 2 empty HDDs with same capacity Kernel with LVM lvm2 parted Software Install lvm2 package Install parted Disk partitions create Create partitions on both disks with parted Start parted for /dev/sdX disk Set units to mib Create GPT table on disk Create primary partition, use all available space Read more...

The libdispatch is one of the most misused API due to the way it was presented to us when it was introduced and for many years after that, and due to the confusing documentation and API. This page is a compilation of important things to know if you're going to use this library. Many references are available at the end of this document pointing to comments from Apple's very own libdispatch maintainer (Pierre Habouzit). Read more...

C is a simple language. You’re only allowed to have one function with each name. C++, on the other hand, gives you much more flexibility: You can have multiple functions with the same name (overloading). You can overload built-in operators like + and ==. You can write function templates. Namespaces help you avoid naming conflicts. I like these C++ features. With these features, you can make str1 + str2 return the concatenation of two strings. Read more...

Have you ever had a financial advisor (or maybe even a parent) tell you that you need to make your money grow? This idea has been so hardwired in the minds of hard-working people all over the world that it has become practically second nature to the very idea of work. The line has been repeated so many times that it is now a de facto part of working culture. Read more...