Sign in Subscribe
Cybersecurity

Cybersecurity

Stop brute-force attacks and lock down your perimeter. This is your professional playbook for enterprise-grade homelab security. Move past default configurations with step-by-step guides to deploying OPNsense firewalls, setting up network segmentation via VLANs, and hardening your reverse proxy layer using SWAG, CrowdSec, and Authelia. Stop guessing, minimize your attack surface, and build an airtight digital fortress on your own hardware.
07
Jan
Digitized ancient aztec vault stylized door with the word "Vaultwarden" inscribed at the top.

Self-Hosting Vaultwarden Securely (Complete 2026 Guide)

Learn how to self-host Vaultwarden with a hardened setup using SWAG, CrowdSec, and geoblocking. Build a secure, private password manager with full control over your data.
15 min read
17
Dec
Jellyfin icon entered in the middle, surrounded by icons digitally connected to various reverse proxies.

Secure Jellyfin with HTTPS: Reverse Proxy Guide (SWAG, NPM & Traefik)

You've got something to run as a server, you've got your Jellyfin all setup. Your library
14 min read
26
Nov
Digitized Spartan style warrior, bearing shield and spear confidently.

The Shielded Tunnel: Securing Your Traffic with Gluetun & Docker

In my previous guides, we built the server and we built the automation stack. Now, we need to talk about
11 min read
21
Nov
Digitized image of the Cloudflare logo spray-painted onto a rock outcropping, in the background there's a large cityscape, somewhat futuristic.

Cloudflare Advanced - Geoblocking, AI Scraping & Bruteforce Protection (2026)

Welcome back, fellow self-hosters! In part 1 of the Cloudflare series, we covered the basics of getting your Ghost
6 min read
18
Nov
The 2026 VPS Security Checklist: Hardening Debian & Ubuntu Servers

The 2026 VPS Security Checklist: Hardening Debian & Ubuntu Servers

What to do right now to secure your server, with specific guides for Managed (GreenGeeks) and Unmanaged (HostPapa) plans. 🚀 The
9 min read
05
Nov
Digitized picture of a lock, floating between racks in a datacentre with digital electronic flows going through it.

OPNsense Hardening & Active Defense: Building the Inner Walls (Part 2)

In Part 1, we laid the foundation – installing OPNsense, assigning interfaces, and setting up initial block-lists. Your firewall is
22 min read
24
Oct
This Month in Cyber: When the Giants Stumble, We All Feel the Shake

This Month in Cyber: When the Giants Stumble, We All Feel the Shake

October 22, 2025 Hey everyone. I’ve been in the cybersecurity trenches for 19+ years, and I’ve seen a
3 min read
22
Oct
Iconographic image showing OPNsense logo and stating this guide has been updated & compatible with v26.x of OPNsense.

OPNsense 26.1 Setup Guide: The Ultimate Homelab Firewall 2026 (Part 1)

SERIES The OPNsense Architect 01 The Install Part 1: How to Set Up OPNsense: The Ultimate Homelab Firewall 02 The
33 min read
20
Oct
Digital illustration of a starship with energy shields active, deflecting incoming cyber threats, representing homelab network defence-in-depth.

Networking & Cybersecurity Roadmap: The 2026 Guide to a Secure Homelab

"Build it and they will come" applies to attackers too. A default password or misconfigured container is a hacker's playground. This is your battle plan to fortify your homelab - from the muddy moat (Network Layer) up to the vault itself (Application Layer).
15 min read
15
Aug
A digitized artistic view of a small datacentre, glowing with digital panels and a screen showing A+ from Qualys SSL scanner.

How to Harden SWAG Nginx for an A+ Security Rating (2026 Guide)

Stop bots and brute-force attacks. Learn how to enable HSTS, harden Nginx headers, and configure Fail2ban Recidive in SWAG for an A+ security rating.
11 min read