Security

3 posts

Security · May 13, 2026

Homelab Intrusion Defense with CrowdSec: Engine in Docker, Bouncers on Proxmox and MikroTik

Run CrowdSec in Docker as a central detection engine, with nftables bouncer on Proxmox and cs-routeros-bouncer on MikroTik. Full setup with collection tuning, whitelisting, and CAPI tradeoffs.

Read →

Security · July 27, 2021

Secure SSH Keys using FIDO2/U2F Security Keys

How to use ed25519-sk keys for 2FA SSH authentication. No more GPG hacks. Works with any FIDO2/U2F compatible security key.

Read →

Security · July 24, 2021

Two Factor Authentication on Linux using Yubikey / U2F

Configure pam-u2f for system login, sudo, and su. Individual vs central configuration files, plus passwordless sudo with a Yubikey touch.

Read →