Archive for April 2015

Securing SSH Access on a Linux Server

Apr 21, 2015 Jury Sosnovsky Security, System Administration

A practical SSH hardening guide: create a dedicated administrator, authenticate with keys, configure sudo, disable direct root access, and turn off password-based logins. Read the full article

Migrating a Website with Minimal Downtime

Apr 18, 2015 Jury Sosnovsky Security

A practical website migration strategy that keeps the old Nginx server online as a reverse proxy while DNS records propagate and visitors move safely to the new infrastructure. Read the full article

How to Configure HTTPS Securely in Nginx

Apr 13, 2015 Jury Sosnovsky Security, System Administration

A detailed Nginx HTTPS configuration guide covering certificate chains, private keys, secure TLS protocols and ciphers, Diffie–Hellman parameters, OCSP stapling, HSTS, session caching, and HTTP redirects. Read the full article

How to Get a Free SSL Certificate

Apr 8, 2015 Jury Sosnovsky Security

A practical walkthrough of obtaining a free WoSign SSL certificate for a domain and its subdomains, generating a private key and CSR with OpenSSL, and completing domain validation. Read the full article