How-tos
Security
Step-by-step guides on Security.
Technitium DNS on Debian 13, locked down from first boot
Install Technitium on Debian 13 and lock it down before the first client uses it: encrypted upstreams, DNSSEC validation, an ACL, rate limits and a firewall.
Firewall Docker-published ports with the DOCKER-USER chain
Limit who can reach the ports your containers publish on Debian 13, with rules that survive reboots and don't break the containers' own outbound traffic.