Hardening SSH on Linux
A practical guide to locking down SSH access: Ed25519 keys, sshd_config hardening, fail2ban, port changing, and key management for single-admin servers.
Securing Nginx and PHP
A practical guide to hardening Nginx and PHP-FPM on a single-admin server: user separation, SSH key authentication, connection limits, rate limiting, and PHP configuration defaults that won't get you compromised.
Installing Bludit 3.22.0 on Nginx
A production-ready Nginx configuration for the flat-file Bludit CMS — directory protection, static caching, PHP-FPM tuning, and Cloudflare compatibility.
Using GeoIP in Nginx
Set up Nginx's GeoIP module for country detection without recompiling — modern database sources, country-based routing, access control, and passing location data to PHP.
Access Jellyfin Remotely Using an Nginx Reverse Proxy
Use Nginx as a reverse proxy to securely access your Jellyfin media server from anywhere — with SSL, security headers, WebSocket support, and dynamic DNS for residential connections.
Handling Wildcard Subdomains with Nginx and PHP
Catch any subdomain at the DNS level, configure Nginx to accept it, and route it dynamically in PHP — with modern wildcard SSL, provider availability notes, and realistic use cases for 2026.