Server-Hardening on Pi Stack

Self-Hosted Server Hardening Automation: DevSec Hardening vs Ansible OS Hardening vs Puppet CIS

Tue, 02 Jun 2026 00:00:00 +0000

Introduction

Server hardening is the systematic process of reducing a server’s attack surface by disabling unnecessary services, applying secure configurations, and enforcing least-privilege principles. The CIS (Center for Internet Security) benchmarks define hundreds of specific controls for each operating system — a manual implementation takes days and is error-prone.

Self-Hosted PAM Authentication Modules: Google Authenticator vs pam_u2f vs pam_oath vs pam_duo

Mon, 01 Jun 2026 00:00:00 +0000

Introduction

Pluggable Authentication Modules (PAM) form the backbone of Linux authentication. Every SSH login, sudo invocation, and system service authentication flows through PAM’s modular stack. While the default pam_unix module handles basic password authentication, modern security requirements demand multi-factor authentication (MFA), hardware token support, and push-based verification.