Guides 11795 Published by Philipp Esselbach 0

This quick guide shows how to install and configure Fail2Ban on a fresh Ubuntu 22.04 system by first updating the package index and installing the fail2ban package, which automatically enables its daemon at boot. It then instructs you to copy /etc/fail2ban/jail.conf to /etc/fail2ban/jail.local so custom settings survive upgrades, and demonstrates enabling the SSH jail (or any other service) by editing jail.local to set enabled = true, adjust bantime, findtime, and maxretry. An optional example adds a user‑defined jail for a web application with its own filter and log path, after which you restart the service and verify active jails using fail2ban-client status. Finally, it suggests monitoring /var/log/fail2ban.log and tweaking ignoreip or other parameters to reduce false positives while keeping brute‑force protection lightweight.

Guides 11795 Published by Philipp Esselbach 0

The guide walks through installing the Glances system monitor on a fresh Ubuntu 22.04 LTS setup, offering both the quick “apt install glances” method and a preferred pip‑based installation that pulls in the latest plugins and fixes issues like missing GPU stats. It then shows how to generate and edit the default configuration file (~/.config/glances/glances.conf) to adjust colors, refresh intervals, and enable the web UI permanently. A handy cheat sheet of common Glances commands is provided, along with instructions for creating a systemd service so the monitor can start at boot and be accessed remotely via a lightweight web server. Finally, it advises verifying the installed version and, if necessary, using update‑alternatives to prioritize the newer pip binary over the repository copy.

Guides 11795 Published by Philipp Esselbach 0

The article explains how to install .NET on Rocky Linux 8 or AlmaLinux 8 by adding Microsoft’s official repository and GPG key, then enabling the repo and installing either the runtime or SDK. It walks through the commands for registering the repo, choosing between dotnet-6 or dotnet-7, and verifying the installation with dotnet --info. The author also lists common pitfalls such as missing GPG keys, wrong repo names, mixing repositories, and installing multiple SDKs simultaneously, offering tips to avoid dependency problems. Finally, it encourages readers to start a new project or run existing code once the SDK is installed.

Guides 11795 Published by Philipp Esselbach 0

The guide shows how to activate Nginx’s built‑in gzip module, verify its presence with nginx -V, and add a simple configuration block inside the http context that turns compression on, sets a balanced level 5, skips tiny files, and defines the MIME types to compress. It then explains advanced tweaks—using gzip_static for pre‑compressed assets, controlling gzip_proxied and gzip_vary, and adjusting buffers—to avoid double‑compression and keep CPU usage low. A quick test with curl -H "Accept-Encoding: gzip" -I … confirms the Content‑Encoding: gzip header appears, proving the setup works. Finally, it warns when to disable gzip (already compressed media or very small responses) and suggests lowering the compression level if you notice excessive CPU load.

Guides 11795 Published by Philipp Esselbach 0

The tutorial shows how to harden Nginx by installing a fresh package, disabling version banners with server_tokens off, forcing TLS 1.2+ and limiting request size to prevent abuse. It then walks through creating a custom Fail2Ban filter (/etc/fail2ban/filter.d/nginx‑auth.conf) that matches 403 responses and failed WordPress login attempts, and configuring a corresponding jail in jail.local with sensible limits (max 5 retries, 1‑hour bans). After reloading both services you verify the jail is active with fail2ban-client status nginx-auth and test it by repeatedly requesting a non‑existent page until the IP is blocked. Finally, the guide reminds you to rotate logs and periodically review bans to avoid false positives while keeping the server tightly protected.

Guides 11795 Published by Philipp Esselbach 0

The guide walks readers through installing Yclas on a Debian 11 server, beginning with a concise list of essential PHP‑FPM packages, MySQL, Nginx and other utilities. It then covers securing the database, creating an appropriately collated utf8mb4 schema, cloning the repository from GitHub and handling permissions so that the web user can write cache files. After pulling Composer dependencies and setting up a .env file with database credentials, the instructions move on to running migrations, generating an application key and configuring Nginx with a proper virtual host that supports pretty URLs. The final section warns about common pitfalls such as missing extensions or wrong permissions, offers troubleshooting steps, and ends by telling you how to verify the setup in your browser.

Guides 11795 Published by Philipp Esselbach 0

The guide walks you through installing the unattended‑upgrades package on Ubuntu 22.04 LTS, then enabling its daily execution by running dpkg-reconfigure to create the 20auto-upgrades file. It shows how to customize /etc/apt/apt.conf.d/50unattended-upgrades to select which origins are upgraded, configure automatic reboots and their timing, and set email notifications for reports. A dry‑run command ( sudo unattended-upgrade --dry-run --debug ) lets you verify the settings before they take effect. Finally, it advises checking the logs in /var/log/unattended-upgrades/ to confirm upgrades are applied correctly and troubleshoot any issues.