Field Notes
Real work. Documented.
Step-by-step guides from actual homelab builds, production incidents, and hands-on implementations. Not what's hot online. Not theory crafting. The work that happens in the lab, at work, or for a friend.
cybersecurity Intermediate
30-60 minutes Proxmox VE Node Hardening: SSH Lockdown and Non-Root Admin Access
Default Proxmox hands root SSH to anyone who can reach port 22. Three targeted layers close that gap: a non-root admin with sudo, root SSH disabled, and iptables restricting SSH to your bastion only.
iptables iptables-persistent openssh
+1
cybersecurity Advanced
4-6 hours Building a Zero-Trust Homelab with YubiKey PIV
Hardware-backed authentication for your homelab using YubiKey PIV smart cards, a private CA, SSH hardening, digital signing, and a Bastion server. No cloud dependencies. No subscriptions. Full control.
ykman step-ca opensc
+2
No notes found in this category.