Server Security

Installing & Configuring ModSecurity WAF for Apache/Nginx Web App Protection

March 29, 2026

Learn how to install and configure ModSecurity WAF for both Apache and Nginx web servers. This guide covers core concepts, detailed setup instructions, and essential best practices to protect your web applications from common cyber threats like SQL injection and XSS.

Linux

How to Secure SSH Server: Disable Root Login and Set Up Key-Based Authentication

March 15, 2026

Default SSH configuration leaves your server exposed to brute-force attacks. This guide walks through disabling root login, setting up key-based authentication, and validating your SSH hardening configuration on Ubuntu/Debian servers.

Security

How I Detect and Prevent Brute-Force Attacks (A 6-Month Review)

March 10, 2026

A midnight brute-force attack forced me to get serious about server security. For the last six months, a layered strategy using Fail2ban and SSH keys has kept my systems secure and silent. This guide details my practical, battle-tested setup so you can do the same.