https://blog.gntech.me/tags/security/ Recent content in Security on GnTech Blog Hugo en-us Tue, 16 Jun 2026 17:00:00 -0400 https://blog.gntech.me/posts/2026-06-16-proxmox-firewall-security-hardening/ Tue, 16 Jun 2026 17:00:00 -0400 https://blog.gntech.me/posts/2026-06-16-proxmox-firewall-security-hardening/ Harden Proxmox VE with datacenter-level firewall rules, dynamic IPSets for trusted management networks, fail2ban protection, and cluster-wide security policies. https://blog.gntech.me/posts/2026-06-15-proxmox-api-tokens-rbac-secure-automation/ Mon, 15 Jun 2026 17:00:00 -0400 https://blog.gntech.me/posts/2026-06-15-proxmox-api-tokens-rbac-secure-automation/ Set up Proxmox API tokens with role-based permissions for secure automation, Terraform, Ansible, and third-party tool access without sharing root credentials. https://blog.gntech.me/posts/2026-06-13-podman-rootless-containers-docker-alternative-homelab/ Sat, 13 Jun 2026 14:00:00 -0400 https://blog.gntech.me/posts/2026-06-13-podman-rootless-containers-docker-alternative-homelab/ Migrate from Docker to rootless Podman for safer homelab deployments. Installation, podman-compose, Quadlets, rootless networking, and Docker migration strategies. https://blog.gntech.me/posts/2026-06-13-docker-supply-chain-security-sbom-image-signing/ Sat, 13 Jun 2026 07:00:00 -0400 https://blog.gntech.me/posts/2026-06-13-docker-supply-chain-security-sbom-image-signing/ Secure your container supply chain in the homelab with SBOM generation via Syft, image signing with Cosign, vulnerability scanning via Grype, and Docker Content Trust enforcement. Real commands and workflows. https://blog.gntech.me/posts/2026-06-11-acme-sh-letsencrypt-certificates-homelab-docker/ Thu, 11 Jun 2026 14:00:00 -0400 https://blog.gntech.me/posts/2026-06-11-acme-sh-letsencrypt-certificates-homelab-docker/ Automate Let's Encrypt SSL certificates in your homelab with acme.sh and Docker. Covers DNS-01 challenges, wildcard certs, auto-renewal, and reverse proxy integration. https://blog.gntech.me/posts/2026-06-11-linux-auditd-security-auditing-homelab/ Thu, 11 Jun 2026 14:00:00 -0400 https://blog.gntech.me/posts/2026-06-11-linux-auditd-security-auditing-homelab/ Set up Linux auditd to monitor Docker container execution, Proxmox VM changes, and file access in your homelab. Covers audit rules, ausearch reporting, and integration with systemd-journald. https://blog.gntech.me/posts/2026-06-06-docker-nftables-firewall-backend-homelab/ Sat, 06 Jun 2026 21:00:00 +0000 https://blog.gntech.me/posts/2026-06-06-docker-nftables-firewall-backend-homelab/ Migrate Docker from iptables to nftables with the native firewall backend. Configure, verify, and troubleshoot Docker nftables support on Debian 13 and Ubuntu 24.04 homelab hosts. https://blog.gntech.me/posts/2026-06-05-docker-hardened-images-homelab-migration/ Fri, 05 Jun 2026 16:00:00 -0400 https://blog.gntech.me/posts/2026-06-05-docker-hardened-images-homelab-migration/ Migrate your Docker Compose stack to Docker Hardened Images (DHI) with this practical homelab guide. Drop-in replacements, CVE scanning, and real-world migration patterns for Postgres, Redis, Nginx, and more. https://blog.gntech.me/posts/2026-06-05-gluetun-vpn-gateway-docker-wireguard/ Fri, 05 Jun 2026 16:00:00 -0400 https://blog.gntech.me/posts/2026-06-05-gluetun-vpn-gateway-docker-wireguard/ Route Docker containers through a WireGuard VPN with Gluetun split-tunnel gateway. Full Compose config, kill switch, qBittorrent integration, and Traefik compatibility for homelab privacy. https://blog.gntech.me/posts/2026-06-05-docker-image-security-hardening-distroless/ Fri, 05 Jun 2026 13:30:00 -0400 https://blog.gntech.me/posts/2026-06-05-docker-image-security-hardening-distroless/ Harden your Docker images with multi-stage builds, distroless base images, Trivy vulnerability scanning, and runtime security options. A practical homelab guide to reducing CVEs and attack surface. https://blog.gntech.me/posts/2026-06-03-fail2ban-docker-deployment-homelab/ Wed, 03 Jun 2026 14:30:00 -0400 https://blog.gntech.me/posts/2026-06-03-fail2ban-docker-deployment-homelab/ Deploy Fail2ban with Docker integration to protect homelab services from brute-force attacks. Covers SSH, Traefik and Nginx jails with Docker-friendly logging. https://blog.gntech.me/posts/2026-05-30-docker-cve-2026-31431-copy-fail-mitigation/ Sat, 30 May 2026 09:30:00 -0400 https://blog.gntech.me/posts/2026-05-30-docker-cve-2026-31431-copy-fail-mitigation/ Complete guide to CVE-2026-31431 'Copy Fail' for Docker users. How the Linux kernel AF_ALG privilege escalation works and how to mitigate it with seccomp, AppArmor, and kernel updates. https://blog.gntech.me/posts/2026-05-29-haproxy-docker-load-balancer/ Fri, 29 May 2026 17:00:00 -0400 https://blog.gntech.me/posts/2026-05-29-haproxy-docker-load-balancer/ Deploy HAProxy with Docker Compose as a TCP/HTTP load balancer for your homelab — SSL termination, health checks, stats dashboard, and backend failover configuration. https://blog.gntech.me/posts/2026-05-27-nftables-linux-firewall-homelab/ Wed, 27 May 2026 13:30:00 +0000 https://blog.gntech.me/posts/2026-05-27-nftables-linux-firewall-homelab/ Practical nftables firewall guide for homelab Linux servers — write IPv4/IPv6 rule sets, manage Docker integration, rate-limit SSH, log dropped packets, and persist rules with systemd. https://blog.gntech.me/posts/2026-05-26-mikrotik-routeros7-best-practices/ Tue, 26 May 2026 14:30:00 -0400 https://blog.gntech.me/posts/2026-05-26-mikrotik-routeros7-best-practices/ Comprehensive MikroTik RouterOS 7 best practices for homelab and production — security hardening, firewall design, VLAN segmentation, FastTrack tuning, DNS over HTTPS, container management, and backup automation. https://blog.gntech.me/posts/2026-05-26-docker-trivy-vulnerability-scanning/ Tue, 26 May 2026 13:30:00 +0000 https://blog.gntech.me/posts/2026-05-26-docker-trivy-vulnerability-scanning/ Automate Docker container vulnerability scanning with Trivy in your homelab — scan images for CVEs, detect misconfigurations and secrets, integrate with systemd timers or cron, and get actionable security reports. https://blog.gntech.me/posts/2026-05-25-wireguard-vpn-proxmox-lxc/ Mon, 25 May 2026 07:00:00 -0400 https://blog.gntech.me/posts/2026-05-25-wireguard-vpn-proxmox-lxc/ Complete step-by-step guide to deploying WireGuard VPN in a Proxmox LXC container — lightweight setup with persistent config, client management, firewall rules, and routing for secure homelab remote access. https://blog.gntech.me/posts/2026-05-24-systemd-service-hardening-linux/ Sun, 24 May 2026 17:00:00 -0400 https://blog.gntech.me/posts/2026-05-24-systemd-service-hardening-linux/ Complete guide to hardening Linux systemd services — sandboxing with ProtectHome and ProtectSystem, capability reduction with CapabilityBoundingSet, NoNewPrivileges, PrivateTmp, systemd-analyze security scoring, and real hardened service files for homelab daemons. https://blog.gntech.me/posts/2026-05-24-caddy-reverse-proxy-docker/ Sun, 24 May 2026 16:00:00 -0400 https://blog.gntech.me/posts/2026-05-24-caddy-reverse-proxy-docker/ Complete guide to running Caddy as a Docker reverse proxy — automatic Let's Encrypt HTTPS, Caddyfile snippets for security headers, zero-downtime reloads, Cloudflare DNS-01 wildcards, and production hardening for homelab services. https://blog.gntech.me/posts/2026-05-24-mikrotik-firewall-rules/ Sun, 24 May 2026 12:00:00 -0400 https://blog.gntech.me/posts/2026-05-24-mikrotik-firewall-rules/ Complete guide to MikroTik RouterOS 7 firewall — filter rules, FastTrack performance tuning, connection tracking states, address lists, and brute force protection for homelab routers.