SERIES
Series
Some articles here were written as a set. A tag page can only list them; these hubs say why the cluster exists, in what order to read it, and which decision each piece settles.
Hardening Nginx, edge inward
5 articles
Five Nginx guides in reading order: mTLS, CSP, HTTP/3, virtual files and a tarpit — one edge hardened decision by decision.
Dual-stack MikroTik, from the ISP to the firewall
3 articles
Three RouterOS guides: a dual-stack WireGuard VPN, PPPoE with DHCPv6 prefix delegation, and a honeypot that auto-blocks scanners.
Kleidos firmware: three decisions under hard constraints
3 articles
Three deep dives from a hardware password manager on ESP32-S3: packed i18n strings, an encrypt-then-MAC vault, and device-bound key derivation.