Adding HTTP Security Headers to a Hugo Site on Netlify

Hardening the security headers to defend against cross-site scripting and clickjacking

Three years are about to pass since this site moved to Hugo. I configured the HTTP security headers for the site, which had been left alone for a while. They are directives used by web applications to configure security measures in the web browser, and they are used to defend against things like cross-site scripting and clickjacking This article covers the configuration for the Hugo + Netlify environment that this site uses Also, I will leave out explanations of the configuration terminology [Read More]

Hardening a Docker Mail Server on Sakura VPS

Enabling SpamAssassin, ClamAV, Fail2ban, Postgrey and Let's Encrypt in docker-mailserver

This is a follow-up to Building a mail server with Sakura VPS + Docker + Freenom , in which I tighten up the security a little If the server from last time is running under docker, stop it Copy $ docker-compose down Closing imap and submission In the previous article I confirmed that imaps and smtps communication works, so I close imap and submission docker-compose.yml (only the changed parts are shown) [Read More]