Work in Progress - This will reference everything regarding my hosting infrastructure.

Plans #

  • Migrating to new env
  • Backup Strategy
  • OS Hardening
  • Access Hardening
  • Container/Service Hardening
  • VPN/Wireguard
  • Test and Prod env

Articles #

If hyperlink = article available

Podman #

  • limiting egress network traffic
  • read-only container
  • non-root container
  • limiting capabilities
  • restricted SECCOMP profile
  • Apparmor SELinux
  • multilayer / distroless Dockerfile
  • Podman secrets
  • Podman Quadlets
  • Podman diff

Linux #

  • OpenSSH server Hardening
  • Firewalls
  • Fail2Ban
  • AV/EDR
  • Logging
  • Decoys