Tag
A guide to WireGuard on Debian: keys, server and client configuration, IP forwarding, a site-to-site VPN between two sites and good peer management practices.
Why a bind mount in an unprivileged LXC container shows nobody-owned files, and how to fix it with UID math or with lxc.idmap, subuid and subgid.
How to collect metrics from Linux and Proxmox VE nodes with Prometheus, visualize them in Grafana and get alerts, in a dedicated unprivileged LXC.
ed25519 keys, drop-in configuration, root and password logins disabled, fail2ban and a testing method so you don't lock yourself out of a Debian server.