10 min read
Self-Hosted DNS Resolver on a VPS: Unbound, DoT/DoH and Honest Privacy Limits
Run your own recursive DNS resolver on a VPS with Unbound: DNSSEC, DoT/DoH, ACLs that prevent open-resolver abuse, cache tuning — and what it can't hide.
Blog topic
privacy
8 published articles
12 min read
Anonymous Domain Registration and Private DNS for a Privacy-Focused VPS
How to register a domain with minimal identity exposure, pick DNS hosting that doesn't leak, and avoid Certificate Transparency and PTR correlation.
10 min read
How to Migrate a VPS to a New Provider With Minimal Downtime
A practical VPS migration plan: inventory, DNS TTL, rsync and database cutover, TLS certs, dual-run testing, rollback, and safely decommissioning the old server.
9 min read
VPS Log Minimization: Anonymize IPs, Shrink journald and Set Real Retention
A practical guide to reducing logs on a Linux VPS: anonymized nginx logs, volatile journald, auth/shell history cleanup, retention rules and honest trade-offs.
10 min read
How to Pay for a VPS with Monero Without Deanonymizing Yourself
A practical opsec guide to buying a VPS with Monero: where the money trail leaks, wallet and node choices, account hygiene, and what crypto payment can't hide.
9 min read
Tor Onion Service on a VPS: Setup, Hardening and Honest Limits
Run a v3 Tor onion service on a Linux VPS: torrc config, nginx binding, client auth, PoW DoS defense, key backups — and what an onion address can't hide.
10 min read
Self-Hosted WireGuard VPN on a VPS: Full Setup, DNS Leaks and Honest Limits
Step-by-step WireGuard VPN setup on a Linux VPS: keys, nftables NAT, IPv6, DNS leak prevention, kill switch, MTU fixes — plus what self-hosting can't hide.
10 min read
VPS Full Disk Encryption: What LUKS Really Protects on a Remote Server
An honest technical guide to LUKS disk encryption on a VPS: what it protects, what it can't, remote unlock with dropbear, and safer alternatives.