Blog
Practical notes on keeping Linux servers secure.
Docker bypasses UFW: why it happens and how to fix it for good
Why a container stays reachable when UFW allows only SSH, the DOCKER-USER rule many guides get wrong, and fixes that survive a reboot.