Guides

Build a default-deny nftables firewall, harden network sysctls, and shrink your exposed service footprint on any Linux server.

Enforce strong passwords, account lockout, password aging, secure sudo drop-ins and a tight umask to apply least privilege on Linux systems.

Move SSH to key-only authentication, disable root login, and lock down sshd with a battle-tested configuration.