Docker in Production: Volumes, Networks, and Compose Secrets
Moving Docker from development to production requires thinking carefully about data persistence, network isolation, and secret management. This guide covers production‑ready patter...
Full Disk Encryption with LUKS and TPM2 on Linux
LUKS full disk encryption protects your data at rest, and pairing it with TPM2 allows passwordless unlocking on trusted hardware. Walk through the full setup from scratch.
Hardening Your SSH Server: Beyond Password Authentication
A default SSH configuration is often the weakest point in a Linux server's security. This guide covers key‑based authentication, fail2ban, port knocking, and essential SSHD configu...
i3wm Configuration From Scratch: Keybindings, Bars, and Themes
i3 is a minimal tiling window manager that puts you in complete control of your desktop. This guide walks through writing a config file from scratch, setting up i3bar, and theming...
Hyprland: The Wayland Compositor That Changed My Workflow
Hyprland is a dynamic tiling Wayland compositor with smooth animations, per-window rules, and deep customisation. Here's how I configured it from scratch and why I switched from i3...
Podman Rootless Containers: The Secure Alternative to Docker
Podman runs containers without a daemon and without root privileges, making it a more secure alternative to Docker for many workloads. Learn how to get started and migrate your exi...
Setting Up WireGuard VPN on a Linux Server
WireGuard is a modern VPN protocol that's fast, secure, and surprisingly simple to set up. This guide walks through configuring a WireGuard server and client on Linux from scratch.
LVM Deep Dive: Logical Volume Management for Flexible Storage
LVM adds a powerful abstraction layer between your physical disks and filesystems, letting you resize, snapshot, and move volumes without downtime. This guide covers everything fro...
Managing Users and Groups in Linux: A Practical Guide
Understanding user and group management is fundamental to Linux system administration. We cover `useradd`, `usermod`, `groupadd`, `/etc/passwd`, and best practices for multi-user s...
Systemd Units Explained: Services, Timers, and Sockets
Systemd units are the building blocks of process management on modern Linux. This guide covers writing service units, replacing cron jobs with timers, and using socket activation.