Gitea 28: news and upgrade precautions
Audit, bots, deploy tokens, and Actions in Gitea 28: what changed and the precautions with retention, egress, and WebSocket before upgrading.
security
WordPress: this week's CVEs and how to stay safe
CVEs disclosed from 28/09 to 04/10/2026: affected plugins, fixed versions, mitigation, walkthrough using WP-CLI and security best practices.
Linux users with Ansible: SSH keys, sudo and history in Git
Create, lock and remove Linux users with Ansible: passwordless SSH key, sudo via group or sudoers.d, and every change as a Git commit for auditing. Tested on Ubuntu 24.04 and Debian 13.
FileBrowser Quantum: the successor to File Browser, which has been archived
File Browser was archived on September 1, 2026, with no future security fixes. Understand why the project ended and how to install FileBrowser Quantum, the fork that replaces it, with Docker, systemd, and Nginx.
SSL/TLS in Postfix and Dovecot: why and how
Let's Encrypt certificate, ports 465/587/993/995, TLS 1.2 where there is a password, Dovecot 2.3 and 2.4, tests, and MTA-STS against the attack that strips STARTTLS.