The Ghost Operator's Signal
Want your blog reachable by anyone – both Tor users and regular browsers – without running two separate installations?
The trick is one code-base, two reverse proxies, and a single database. Below is a quick 400-500 word guide for Ubuntu/Debian that shows the minimal steps.
Plain text communication is loud. It’s bleeding data.
Prying eyes can see every bit in the wire.
You have to isolate the backend – the Semaphore UI and MySQL containers stay locked down. Unreachable for the external work.
Open a tiny hole on the stronghold to the world – the frontend is an NginX SSL proxy.
You use:
“In shadows, the strongest signal is trust.”
You don’t expose your secrets to the streets. You don’t hang your backend out for the world to poke.
You proxy.
Continue reading “🧊 DeadSwitch Technical Dispatch // Fortify the Flow: Proxy Frontlines & The Truth in Certificates”
NGINX, pronounced “engine-ex,” is an open-source web server software used for various purposes, including web serving, reverse proxying, caching, load balancing, and media streaming. It was initially designed to handle large numbers of concurrent connections, making it suitable for high-performance web applications.
Continue reading “How To Set Up Vhosts In The Nginx Webserver?”
A reverse proxy is a server that sits in front of web servers and forwards client requests to those web servers. It acts as an intermediary, intercepting and inspecting incoming client requests before forwarding them to the web server. Reverse proxies can provide additional levels of abstraction, control, security, and performance optimization. They are commonly used for load balancing, web acceleration, and to hide implementation details about the web servers.
Continue reading “How to configure an SSL reverse proxy with Nginx?”Vaultwarden is an open-source password manager that is a fork of Bitwarden. It is written in Rust and is designed to be lightweight, easy to set up, and run on various platforms. Vaultwarden is an alternative backend for the password manager Bitwarden, and while it does not implement the same feature set as the Bitwarden server, its setup is much simpler. Vaultwarden is a great option for small businesses because it is lightweight and runs well on devices with limited resources, such as Raspberry Pi and Synology NAS. It is also easy to set up and use, making it a great choice for businesses that do not have dedicated IT staff. Additionally, Vaultwarden is open-source, which means that businesses can customize it to meet their specific needs.
Installing web servers, database services and such tools are tedious task especially when we have to repeat it over and over again, for example in a test environment.
Here are some useful playbooks that we can use to simplify the process.
Continue reading “Installing web and database servers on Debian Bullseye with Ansible playbooks”
Tom's IT Cafe 