Posts in "dev"

Docker SFTP Port Works on localhost but Times Out from Outside (Debian 12 + ferm + Linode NAT)

I hit a classic “it must be Docker” moment. This post documents what was actually happening and the minimal, correct fix. The setup Symptom, “Local open, remote timeout” On the server: Everything looked correct: Docker was listening on 0.0.0.0:22222, and localhost could connect. But from outside, connections to port 22222 timed out. First principle, don’t… Continue reading

Reseeding MariaDB Master–Slave Replication (Non-GTID) While the Master Stays Online

MariaDB replication breaks at the worst possible time, right when you need the database to be calm, predictable, and boring. If you’re running classic (non-GTID) master–slave replication, the fastest way out of a messy drift is usually not to “skip errors” or “restart services” endlessly. The cleanest recovery is to reseed the slave from a… Continue reading

Install Node.js 24 & PM2 on Debian 13, Including Log Rotation

If you’re running Debian 13 for a production server, Node.js 24 + PM2 is a practical setup, simple deployment, easy process management, and predictable restarts. Below is a production-friendly installation guide, including PM2 log rotation. 1. Install Node.js 24 (via NodeSource) Update packages and install prerequisites: Add the NodeSource GPG key: Add the Node.js 24… Continue reading

Debugging Slow Debian 13 on WSL, When a Single Ping Tells the Whole Story

Sometimes the simplest command reveals the truth hiding beneath the surface. My Debian 13 environment inside WSL had been unusually slow for days. Not broken, not throwing warnings, but hanging on apt update long enough for me to lose patience. “Reading package lists…” would freeze, repository connections took forever, and every small task felt like… Continue reading

How to Install MariaDB on Debian 13 (Trixie) , Root Uses Password (Debian 12-style)

To install MariaDB on Debian 13 (Trixie), follow these steps (same rhythm as my Debian 12 guide, but updated for Debian 13). Debian 13’s repo package is currently mariadb-server (1:11.8.3-0+deb13u1). (Debian Packages) 1. Update Package Index Start by updating the package index to ensure your system has the latest information on available packages. (Optional but… Continue reading

When “Auto Install” Breaks: Installing Longview Manually on Debian 12 (Production Safe)

Production has a very specific kind of silence. It’s not the calm silence of a system that’s healthy. It’s the suspicious silence of a system that hasn’t complained yet. Nginx still serves pages. Your API still returns 200. The business dashboard looks green enough to lull everyone into optimism. But you can feel it, response… Continue reading

Shellshock Attack, Detection, Analysis, and Why Wazuh Proved Its Power

Overview At 02:04:43 UTC, 7 November 2025, our Wazuh SIEM raised a critical level-15 alert, Rule 31168, “Shellshock attack detected” This alert originated from an Nginx access log on agent, proxy-sg2-deb-12-pro-proxy-xxxx (IP 1xx.xxx.xxx.xxx). The source of the request was 193.26.115.195 (Netherlands). Wazuh immediately identified the payload as an active Shellshock exploit attempt (CVE-2014-6271). But here’s… Continue reading