Tags: #vps

nginx 1.28.3 dropped March 24 with six CVEs patched. What each one means and whether you need to care.

Nine flaws in AppArmor let an unprivileged local user reach root. Active on every Ubuntu server by default. Sitting there since 2017.

Running a self-managed VPS means bots will find you within hours. Here's the layered setup I use to sleep well anyway.

The systemd options that actually matter for a Go backend and Node.js frontend: unit file anatomy, hardening directives, and the gotchas that burn you.

I traced a growing journal to SSH brute-force bots, found a cloud-init misconfiguration hiding in plain sight, and cleaned it all up. Here's the investigation.

How I run Claude Code directly on my VPS, why CLAUDE.md is the most important file in the repo, and the memory setup that makes it work across sessions.

How I moved my Go + Astro site off a managed static host onto a bare VPS using git, systemd, and nginx. No Docker, no pipeline.