SSL/TLS in Postfix and Dovecot: why and how
Let's Encrypt certificate, ports 465/587/993/995, TLS 1.2 where there is a password, Dovecot 2.3 and 2.4, tests, and MTA-STS against the attack that strips STARTTLS.
Linux
DKIM and DMARC on Postfix with OpenDKIM and OpenDMARC
SPF, DKIM signing with OpenDKIM, DMARC policy, and verification with OpenDMARC on Postfix, tested on Ubuntu 24.04 and 26.04.
Vue.js + Go with Echo v5, part 2: Vue frontend with Vite
Create the Vue 3 frontend with Vite inside the Go project, configure Vue Router and the development proxy for the Echo v5 API.
Vue.js + Go with Echo v5, part 3: tasks REST API
Write a tasks REST API with Echo v5: route groups, JSON binding, validation, HTTPError, and the tasks screen in Vue.
Vue.js + Go with Echo v5, part 4: login with session and cookie
Login with bcrypt, session in HttpOnly cookie, authentication middleware in Echo v5, and protected routes in Vue Router.
Vue.js + Go with Echo v5, part 5: embed, single binary, and Docker
Embed Vue into the Go binary with go:embed, generate a single executable, build with multi-stage Docker, and deploy with systemd and Nginx.
Vue.js + Go with Echo v5, part 1: environment and first API
Series about Vue 3 and Go with Echo v5: what changes in Echo v5, how to install Go and Node, and how to bring up the first API route.
ISPConfig 3.3.2: Ubuntu 26.04, DMARC, and security fixes
ISPConfig 3.3.2 ships Ubuntu 26.04, DMARC on the inbound path, database backups that don't lock up tables, and fixes a SQL injection in the remote API and a privilege escalation in Fetchmail. See what changed, the 3.3.2p1 patch, and how to update safely.
Go Uptime: self-hosted monitoring derived from Gatus
Meet Go Uptime, a fork of Gatus packaged as a single Go binary, with web administration, public status pages, push compatible with Uptime Kuma, MySQL/MariaDB and backup. Installation with Docker and systemd.
VirtualBox API — part 1: SOAP, sessions and security
Understand the VirtualBox web service: WSDL contract, authentication, object references, sessions, and security before implementing a client.