admin - FullStackQuest

Hardening a Debian 13 Rsyslog Server with UFW and Fail2Ban

In a previous tutorial you set up a basic rsyslog server on Debian 13 to receive logs from remote Linux[…]

Centralized logging is one of those boring-sounding things that become incredibly valuable the first time you investigate a security incident.[…]

Goal: Production-ready Matomo on two Debian 13 servers — one for the web app (Nginx + PHP-FPM), one for the[…]

Tested on: Ubuntu 22.04/24.04, Proxmox Mail Gateway 8.2 What You Will Build Inbound flow: Gmail (or the Internet) → Rspamd[…]

Goal: type ssh admin@lab.fullstacklab.site, complete MFA (email + PIN), and land on your server’s shell — all without exposing port[…]

In this tutorial you’ll deploy Bitnami Sealed Secrets on a three-node K3s cluster running in Vagrant/VirtualBox, generate the public key,[…]

In this tutorial you’ll manually install a minimal k3s Kubernetes cluster on three Ubuntu 22.04 VMs provisioned by Vagrant/VirtualBox. We’ll[…]

A clean, reproducible VirtualBox lab is the fastest way to learn Kubernetes the right way—by breaking things safely. In this[…]

Goal: have Argo CD manage our GitOps paths end-to-end and make the pipeline fully idempotent via Ansible. Today looked simple[…]

Today we closed the loop on TLS by exporting live Kubernetes resources (our ClusterIssuer, the Certificate, and the NGINX Ingress[…]