Networking

Internet censorship: technical solutions to stay connected

When a government blocks social media, there are technical solutions to bypass censorship. From a simple DNS change to a self-hosted VPN, an overview of methods ranked by difficulty.

Published on: March 9, 202612 min read

vpn security networking

Sovereign VPN: Setting up your own server with Headscale in Switzerland

In this second part, we set up a self-hosted VPN with Headscale and an anti-censorship VLESS+Reality proxy (Xray) on a Swiss VPS. Both services share port 443 through nginx SNI routing.

Published on: March 5, 202620 min read

nas docker self-hosting

Docker on NAS: network architecture and best practices

Organizing Docker services on a Debian NAS with isolated networks, a hardened daemon, and proper storage management on RAID.

Published on: February 10, 20266 min read

nas linux security

Firewall and Fail2ban: locking down NAS network access

Setting up UFW with deny-by-default and Fail2ban with progressive bans to effectively protect a Debian NAS against network intrusions.

Published on: January 20, 20266 min read

Networking

vpn security networking

Internet censorship: technical solutions to stay connected

When a government blocks social media, there are technical solutions to bypass censorship. From a simple DNS change to a self-hosted VPN, an overview of methods ranked by difficulty.

Published on: March 9, 202612 min read

vpn security networking

Sovereign VPN: Setting up your own server with Headscale in Switzerland

In this second part, we set up a self-hosted VPN with Headscale and an anti-censorship VLESS+Reality proxy (Xray) on a Swiss VPS. Both services share port 443 through nginx SNI routing.

Published on: March 5, 202620 min read

nas docker self-hosting

Docker on NAS: network architecture and best practices

Organizing Docker services on a Debian NAS with isolated networks, a hardened daemon, and proper storage management on RAID.

Published on: February 10, 20266 min read

nas linux security

Firewall and Fail2ban: locking down NAS network access

Setting up UFW with deny-by-default and Fail2ban with progressive bans to effectively protect a Debian NAS against network intrusions.

Published on: January 20, 20266 min read