Linux articles

Imagine this: you merge to main, and a minute later your app is live on fresh servers. No SSH keys to manage, no ports open to the world, and nothing to babysit.

That's our setup with Kamal Deploy and GitHub Actions, and you can have it running today. This article covers how to build it, including a not-so-fun Docker surprise that quietly bypasses your firewall, and the one-line fix.

Close every inbound port on your Ubuntu server and still serve the world. Here's how to run a Cloudflare Tunnel as a locked-down systemd service.

ZFS gives you checksummed data, cheap snapshots, and software RAID that you can actually trust. In this article I'll walk through installing Ubuntu Server on a two-drive server with the operating system on a mirrored ZFS pool and the bootloader on plain, mirrored ext4. We'll start with the step most people skip: making sure your RAID controller isn't getting in the way.

We've started to add Ubuntu servers alongside our FreeBSD fleet, and deploying Linux servers has been a learning curve. We still love FreeBSD, but some software packages we need to use depend on Linux.

This article is about how to set up Tailscale on your Ubuntu server and then how to block all inbound traffic.