SSH Agent Forwarding Without Leaking Your Farm
Use ssh-agent for passphrases, prefer ProxyJump over ForwardAgent, and lock confirmation so a compromised jump host cannot silently sign as you.
Linux Administration8 min read
NetBay journal
Guides for operators
Practical guides for Linux, containers, CI/CD, self-hosting, and running VPS infrastructure from Netbay Engineering.
599 articles · 24 topics
AllLinuxLinux AdministrationWindowsLinux SecurityLinux NetworkingContainersContainers & OrchestrationKubernetesCI/CDGitHubSelf-HostingBackups & DataDatabasesApp DeploymentDNS & TLSObservabilityEmailAI AgentsAI InfrastructureAPI & AutomationProxiesCloud ArchitectureHardware & PerformanceDevOps Practices
Why Browser-Use Agents Are Dangerous in Prod
A browser-use agent can click, type, and exfiltrate from any tab it can reach. Run it sandboxed, or do not run it at all on a production VPS.
AI Agents8 min read
Docker Networking: Bridge, Host, Macvlan, Custom
Compare Docker's bridge, host, and macvlan network modes, and learn when custom user-defined networks give services the isolation they need.
Containers8 min read
Building Images with Buildah Without a Daemon
Assemble OCI container images with Buildah's rootless, daemonless build steps and combine them with systemd or CI for reproducible pipelines.
Containers & Orchestration6 min read
Running Jellyfin for Your Own Media Library
Stream your own movies and shows with Jellyfin using Docker Compose, hardware-accelerated transcoding, metadata, and a secure Caddy reverse proxy.
Self-Hosting8 min read
Terraform Basics: Providers, State, and Plan
Start with Terraform by wiring a provider, declaring resources, and learning how plan plus state turn infrastructure changes into a safe diff.
API & Automation7 min read
Expanding LVM Logical Volumes Without Downtime
Grow a VPS volume group and an online ext4 or XFS logical volume with pvresize and lvextend -r, plus the caveats that make shrinking a different sport.
Hardware & Performance5 min read
Serve GGUF Models with llama-server on a VPS
Run llama-server as a long-lived CPU process, bind GGUF weights to localhost, and expose chat routes on an Intel Xeon Platinum VPS without a GPU.
AI Infrastructure8 min read
Services, Labels, and Selectors: How Traffic Reaches Your Pods
Understand labels and selectors so you can build Services that route traffic to exactly the right pods, and avoid common misrouting bugs.
Kubernetes6 min read
Signing Webhook Deliveries So Clients Can Verify Them
Cryptographically sign webhook payloads with HMAC and give clients a safe verification path to reject forged or replayed deliveries quickly.
API & Automation6 min read
PowerShell Essentials for Day-2 Windows VPS Admin
Inventory, patch, services, event logs, and scheduled tasks from PowerShell. These cmdlets cover day-2 Windows VPS work without opening the GUI.
Windows8 min read
mysqldump vs mariadb-dump and a Restore Drill
Pick mariadb-dump or mysqldump on purpose, schedule a logical backup, and run a restore drill on a second host before you ever need it in an incident.
Databases9 min read