3 entries

  1. Install nginx with TLS termination on Ubuntu 24.04

    A clean nginx install with Let's Encrypt automation, HTTP/2, OCSP stapling, and a secure default header set.

    21 May 2026 · 1 min read · #nginx#tls#letsencrypt#http2

  2. A baseline SSH configuration that works on every Linux I touch

    Key-only authentication, restricted ciphers, allowed users, and ProxyJump-friendly settings. The sshd_config I drop into every new server.

    19 May 2026 · 1 min read · #ssh#openssh#hardening#security

  3. Configure Postfix as a relay through Amazon SES on Debian 12

    SASL authentication, TLS, and the smtpd_relay restrictions that prevent open-relay accidents. The setup I keep paste-deploying onto small boxes.

    17 May 2026 · 1 min read · #postfix#ses#smtp#aws#mail