Managing Secrets on a VPS: Permissions, Env, Vault
Store API keys and tokens safely on a Linux VPS with strict file permissions, protected environment files, and vault basics that survive a leak.
Linux Security7 min read
NetBay journal
Linux Security
18 practical Linux Security articles from Netbay Engineering — written for operators running Linux and Windows VPS in India.
18 articles in this topic
AllLinuxLinux AdministrationWindowsLinux SecurityLinux NetworkingContainersContainers & OrchestrationKubernetesCI/CDGitHubSelf-HostingBackups & DataDatabasesApp DeploymentDNS & TLSObservabilityEmailAI AgentsAI InfrastructureAPI & AutomationProxiesCloud ArchitectureHardware & PerformanceDevOps Practices
Writing sudoers Rules That Are Actually Least-Privilege
Replace blanket sudo with scoped sudoers entries: command allowlists, aliases, NOPASSWD, and runas restrictions that survive a security review.
Linux Security7 min read
AppArmor vs SELinux: Mandatory Access Control Explained
Understand how AppArmor and SELinux confine processes under mandatory access control and choose the MAC layer that fits your distro and density.
Linux Security8 min read
ufw vs firewalld vs nftables: Choosing a Server Firewall
Compare ufw, firewalld, and nftables for a Linux VPS and pick the right filtering layer for your distro, workflow, automation, and threat model.
Linux Security7 min read
Installing and Tuning fail2ban on a Linux VPS
Set up fail2ban to auto-ban brute-force sources across SSH, web, and mail, then tune jails, bantimes, and notifications for real-world traffic.
Linux Security6 min read
Hardening SSH for Internet-Facing Servers
Lock down SSH on a public VPS with ed25519 keys, a hardened sshd config, and fail2ban so brute-force and dictionary attacks stop before they matter.
Linux Security7 min read