# Series

> One page from jmrp.io, published as markdown. Index: https://jmrp.io/llms.txt

Canonical: https://jmrp.io/blog/series/
Language: en
Alternate: https://jmrp.io/es/blog/series/index.md
Updated: 2026-09-30
License: https://jmrp.io/license/

Curated reading paths through the blog: Nginx hardening, dual-stack MikroTik networking, and firmware engineering on an ESP32-S3.
Build-Date: 2026-09-30

Some articles here were written as a set. A tag page can only list them; these hubs say why the cluster exists, in what order to read it, and which decision each piece settles.

## Hardening Nginx, edge inward

URL: https://jmrp.io/blog/series/nginx-hardening/
Markdown: https://jmrp.io/blog/series/nginx-hardening/index.md
5 articles

Five Nginx guides in reading order: mTLS, CSP, HTTP/3, virtual files and a tarpit — one edge hardened decision by decision.

## Dual-stack MikroTik, from the ISP to the firewall

URL: https://jmrp.io/blog/series/mikrotik-dual-stack/
Markdown: https://jmrp.io/blog/series/mikrotik-dual-stack/index.md
3 articles

Three RouterOS guides: a dual-stack WireGuard VPN, PPPoE with DHCPv6 prefix delegation, and a honeypot that auto-blocks scanners.

## Kleidos firmware: three decisions under hard constraints

URL: https://jmrp.io/blog/series/kleidos-firmware/
Markdown: https://jmrp.io/blog/series/kleidos-firmware/index.md
3 articles

Three deep dives from a hardware password manager on ESP32-S3: packed i18n strings, an encrypt-then-MAC vault, and device-bound key derivation.