Least-Privilege MariaDB Accounts for Small PHP Applications - Let the App Use Only What It Needs
A small PHP application may need only four ordinary database actions: read a row, insert one, update it, and sometimes delete it. Yet its c…
Filesystem Space on a Debian Home Server - Diagnose Blocks, Inodes, and Hidden Open Files
A service cannot append to its database, a backup stops halfway, or an application logs No space left on device. The obvious explanation is…
Password Reset for Small PHP Applications - Make Recovery No Easier Than Login
A password reset form often looks like a small feature: accept an email address, send a link, and let the user choose a new password. But t…
Subresource Integrity for External Scripts - Make the Browser Verify the Bytes
A single external The page delegates more than file delivery. JavaScript loaded this way runs in the page's context. The OWASP Third Part…
systemd Restart Policies for a Home Server - Recover Services Without Hiding Failure
A long-running service on a home server exits at 3 a.m. Should the machine leave it down, restart it immediately, or keep trying until morn…
Structured Outputs for AI Automation - A Schema Is a Contract, Not a Safety Check
A language model can return neat JSON instead of a paragraph. That feels like a decisive step toward reliable automation: the keys are pres…
TOTP Two-Factor Authentication for Small PHP Applications
A password alone protects an account only as long as the password remains secret. Reused passwords leak in one breach and are tried elsewhe…
Secrets for Small PHP Applications - Keep Credentials Out of Code and Ready to Rotate
A small PHP application eventually needs a database password, an API token, or a key for signing messages. Where should that value live? Pu…
Time Synchronization on a Debian Home Server - Give Logs and Services a Shared Clock
A home server can display the right hour and still have an unreliable clock. The timezone may be correct while network synchronization is f…
UPS-Aware Shutdown for a Debian Home Server - Turn Battery Time into a Safe Stop
A home server can survive a brief power cut only if something keeps supplying power. But survival is not the most useful question. A better…