Technical notebook
Blog
Build notes, recovery procedures, implementation records, and practical observations from a self-hosted environment.
All articles
4 resultsApache Guacamole Part 1: Building the Remote Access Container
Build an isolated Apache Guacamole gateway with Ubuntu 24.04, LXD, Docker Compose, PostgreSQL, TOTP, and controlled application networks.
Read articleApache Guacamole Part 2: Publishing the Gateway through Nginx
Publish Apache Guacamole through Nginx with TLS, WebSocket proxying, real-client addressing, and a backend restricted to the reverse proxy.
Read articleApache Guacamole Part 3: Connecting Private Virtual Machines
Connect a private Windows VM through a controlled guacd network, endpoint firewall allowlist, NLA, and a dedicated non-administrator RDP account.
Read article
When Apache Serves WordPress PHP as Plain Text
A practical incident-response guide for detecting, containing, repairing, and testing PHP source exposure on Ubuntu 24.04 with Apache and PHP 8.3.
Read article