<?xml version="1.0" encoding="utf-8"?>
<feed xmlns="http://www.w3.org/2005/Atom">
  <title>edge — notes</title>
  <subtitle>Occasional write-ups on networking, Linux and the web.</subtitle>
  <link href="https://edge.mainx.ru/feed.xml" rel="self"/>
  <link href="https://edge.mainx.ru/"/>
  <id>https://edge.mainx.ru/</id>
  <updated>2026-05-02T09:00:00Z</updated>
  <author><name>edge</name></author>

  <entry>
    <title>Hardening a single-VPS setup without overthinking it</title>
    <link href="https://edge.mainx.ru/#notes"/>
    <id>https://edge.mainx.ru/notes/hardening-single-vps</id>
    <updated>2026-05-02T09:00:00Z</updated>
    <summary>A pragmatic checklist for locking down one small server: SSH keys, a tight firewall, automatic TLS and just enough monitoring to sleep at night.</summary>
  </entry>

  <entry>
    <title>Why I moved my side projects behind a reverse proxy</title>
    <link href="https://edge.mainx.ru/#notes"/>
    <id>https://edge.mainx.ru/notes/reverse-proxy-side-projects</id>
    <updated>2026-03-18T09:00:00Z</updated>
    <summary>One entry point, clean TLS termination and a much calmer mental model for everything I host.</summary>
  </entry>

  <entry>
    <title>Notes on automating TLS with ACME DNS-01</title>
    <link href="https://edge.mainx.ru/#notes"/>
    <id>https://edge.mainx.ru/notes/acme-dns-01</id>
    <updated>2026-01-27T09:00:00Z</updated>
    <summary>DNS-01 challenges let me issue certificates for services that never need to be exposed directly. Here's the setup I settled on.</summary>
  </entry>
</feed>
