Development
66 posts found
Self-Hosted AI Agents Don’t Automatically Mean Private
Running an AI agent on your own server doesn't guarantee privacy. Data still leaks through telemetry, model APIs, and logging. Here's what actually happens.
Convert V2Ray Configs Between Protocols with SVM
A practical walkthrough for converting V2Ray proxy configs across protocols using SVM — the Rust tool that saves you from manual config rewriting when switching…
Harden SSH with oryxis: Rust Terminal Emulator and Encrypted Vault
oryxis is a Rust SSH client and terminal emulator with an encrypted vault, SFTP, port forwarding, cloud discovery, and P2P sync. Here is how to set it up and ha…
Invidious: Private YouTube, Self-Hosted
Escape YouTube's surveillance. Invidious offers a self-hosted, open-source alternative for private video consumption, stripping tracking and ads.
BPB-Worker-Panel vs Heimdall: Open-Source Proxy GUI Comparison
Comparing BPB-Worker-Panel and Heimdall — two open-source GUI panels for managing proxy infrastructure. We analyze architecture, security, ease of use, and cost…
Hardening Nginx Reverse Proxy: A Production Case Study
A case study of hardening an Nginx reverse proxy on a $6 VPS against constant internet-facing threats, covering TLS tuning, rate limiting, DNS audit, and the op…
DNS over HTTPS: Encrypting the Last Mile of Resolution
DNS over HTTPS evolved from a 2018 privacy experiment to 2024's invisible infrastructure. Here's how encrypted DNS reshaped the internet, the politics it ignite…
The Essential Self-Hosted Infrastructure Security Checklist
A comprehensive checklist for hardening your self-hosted infrastructure. From container image scanning to robust secrets management, discover the essential step…
Building a Self-Hosted AI Development Environment on Linux
Learn how to build a secure, zero-trust AI coding environment on Linux. Self-host your models and orchestration tools for complete privacy.
Building a Containerized Reconnaissance Lab
Learn how to build a secure, ephemeral OSINT lab using Docker. We deploy WebCheck and Huntkit with strict network isolation and VPN routing for private reconnai…