Tag archive
Four chained CVEs give unauthenticated code execution on Plex Media Server, and CISA put all four in its exploited catalogue. The patched build came out on 4 Au
Most hosts ban mining. Almost none of them mention nodes. We read the hosting contracts, quote them verbatim, and add the hardware and bandwidth a node really n
Four expired certificates, an EOL distro and no package manager help. How to take HTTPS renewal back with acme.sh, keep the existing vhosts untouched, and monit
A working Caddy + Docker Compose setup for a small server: automatic HTTPS, several sites on one box, cache headers, affiliate redirects, and the mistakes that
A real audit of a legacy box: a firewall allowlist that allowed everyone, a 2017 phpMyAdmin open to the internet, an FTP daemon with no users, and renewal that
Compare eight self-hosted project planning tools by deployment, workflow, planning depth, licensing, and the operational work each requires.
Umami next to an existing Caddy stack: the compose file, the two settings everyone forgets, real memory and disk numbers after eleven days, and an honest compar
We measured our own two S3 backups - 43 GB across 2,640 objects - and priced the same data on Backblaze B2, AWS S3, Wasabi, Hetzner and Infomaniak. The per-tera
Compare six task-management options by offline deployment, maintenance needs, workflow fit, and trade-offs for isolated environments.
A restricted rsync deploy key, a pinned host key, an empty-build guard and a smoke test: the whole pipeline that ships this site, and why the obvious version ha
We benchmarked a production Hetzner VPS and pulled live pricing from all three vendor APIs. Real numbers on price, egress and the Hetzner plan availability nobo
Coolify gives you push-to-deploy, SSL, and databases on your own server. Here is how it stacks up against Vercel and raw Docker.