Awhile back, I posted a guide about Migrating from Apache to NGINXand in one of the steps I mistakenly wrote that you should remove the default NGINX config file. At the time, I believed this would block any unwanted traffic to your web server such as web traffic directed at the server's IP address, but I've since learned that NGINX will actually redirect that traffic to the first server block ...
- Topic Archives Security
-
-
Avoiding Outages when using Wordfence & NGINX
If you run WordPress, it's a good idea to have some type of security software to protect against the endless attacks waged against your precious websites. One of the most popular security plugins available to mitigate this onslaught is Wordfence.
Wordfence is a free security plugin that offers a lot of features to protect your site, one of which is called Firewall Optimiza ...
-
Enable User Password Changes on pfSense
If you have pfSense deployed in a business environment, you may have the need for users to be able to change their own account passwords. Some of you may be wondering, why would my users even have an account on my router? The answer, at least in my daily life, would be OpenVPN.
By default, pfSense doesn't allow anyone but the admin user to login, but this guide will show you how to enable ...
-
Chrooted SFTP, Inotify & Chattr – A Fortified Prison for Backups
In my last post, I touched on ways you could automate remote database backups using SSH and passphrase-less keys. I didn't really go in-depth as I felt this topic deserved its own article and wouldn't you know it, here it is!
Now, as you can tell by the title, we're going to be focusing on using SFTP as our transfer protocol of choice instead of SSH or SCPas I've found its a lot easier to sec ...
-
Automating MariaDB Backups…As Securely as Possible
Right off the bat, I'll tell you that there is no completely secure way to automate your MariaDB backups. I researched this for awhile and haven't found one yet. That isn't to say there aren't ways to mitigate your risk, but as some point you're going to need to store your password somewhere. If you are unwilling to invite any risk to your databases, your best options are to automate entire ba ...
: 
: