My Notes

These are not tutorials or guides, but rather my own experiences and solutions that I want to keep track of for future reference.

SSH port move, root disable, endlessh tarpit, ufw, auto-updates, nginx reverse proxy.

Web Application Firewall configuration and ASN lookup tools.

Disabling password login and overriding cloud-init configs under sshd_config.d.

CI workflow for deploying a pnpm monorepo's front-end from root via Vercel CLI.

Replacing jsonwebtoken with jose and cleaning PEM keys for atob()/ArrayBuffer use.

Creating named bridge networks and limiting port exposure to localhost.

Best practices for running `vercel build` & `vercel deploy --prebuilt` from repo root.

Proxy multiple services (n8n, Medusa) via subdomains with HTTPS certs by certbot.