Tag

DevOps

2 articles

Architecture diagram showing a cloud Wazuh agent connecting over a WireGuard tunnel to a self-hosted Wazuh manager on a private homelab LAN.

Security Jun 7, 2026 13 min read

Monitoring a Cloud Server with a Self-Hosted Wazuh SIEM: Without Exposing It to the Internet

Self-hosting a SIEM is great for cost and control, but how does a cloud server report to a Wazuh manager that has no public IP? Here's the full, reproducible path: a WireGuard tunnel to the manager's private LAN, a …

Security Feb 1, 2026 7 min read

How I Hardened My Web App's Security Headers Using Nuclei and Automated Scanning

After running an automated Nuclei scan against my own infrastructure, I discovered 54 security findings. Here's how I fixed the most impactful ones — missing HTTP security headers, version disclosure, and deprecated …