Hardening a Debian Server
A practical baseline for securing a small Linux server without making it impossible to maintain.
Notes on information security, infrastructure, networking and the systems I build.
$ whoami
ilya
$ interests --list
security
linux
networks
infrastructure
$ status
online_
A practical baseline for securing a small Linux server without making it impossible to maintain.
Separating systems, reducing trust boundaries and keeping infrastructure understandable.
Certificates, keys, encryption and what actually happens when a secure connection is established.
Security is not a product.
It is understanding systems, reducing unnecessary trust and knowing exactly what happens when something fails.
I work with information security, infrastructure and networks. This site is a place for technical notes, experiments and things worth remembering.