<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom">
  <channel>
    <title>yourgeek.it</title>
    <link>https://yourgeek.it/</link>
    <atom:link href="https://yourgeek.it/rss.xml" rel="self" type="application/rss+xml" />
    <description>In-depth technical writing on production infrastructure: Proxmox, Terraform on DigitalOcean, Linux hardening, monitoring, running lean on small servers and migrations off managed cloud.</description>
    <language>en</language>
    <lastBuildDate>Wed, 07 Oct 2026 00:00:00 GMT</lastBuildDate>
    <item>
      <title>Logs Full of Cloudflare IPs: Finding the Real Client</title>
      <link>https://yourgeek.it/real-client-ip-behind-proxy/</link>
      <guid isPermaLink="true">https://yourgeek.it/real-client-ip-behind-proxy/</guid>
      <description>Your app sees the proxy, not the client. How trusted proxies, forwarded headers and origin isolation decide whether the IP in your logs is real.</description>
      <pubDate>Wed, 07 Oct 2026 00:00:00 GMT</pubDate>
      <category>networking</category>
      <category>security</category>
      <category>infrastructure</category>
      <category>troubleshooting</category>
    </item>
    <item>
      <title>Your new server is already being attacked</title>
      <link>https://yourgeek.it/new-server-already-attacked/</link>
      <guid isPermaLink="true">https://yourgeek.it/new-server-already-attacked/</guid>
      <description>A fresh server with no firewall: first SSH knock in 85 seconds, Postgres found in 18 minutes. What the logs showed, and how to close it from minute zero.</description>
      <pubDate>Tue, 06 Oct 2026 00:00:00 GMT</pubDate>
      <category>security</category>
      <category>infrastructure</category>
      <category>networking</category>
    </item>
    <item>
      <title>A Fake sshd on a Production Node: Why SSH Needs Keys</title>
      <link>https://yourgeek.it/ssh-keys-not-passwords/</link>
      <guid isPermaLink="true">https://yourgeek.it/ssh-keys-not-passwords/</guid>
      <description>A cryptominer, a swapped sshd binary and a server that had been online for seven years. What I learned about SSH passwords, keys and the fleet check.</description>
      <pubDate>Mon, 05 Oct 2026 00:00:00 GMT</pubDate>
      <category>security</category>
      <category>incident</category>
      <category>infrastructure</category>
    </item>
    <item>
      <title>Security+ and CEH Courses, Without the Exams</title>
      <link>https://yourgeek.it/security-ceh-courses-without-exams/</link>
      <guid isPermaLink="true">https://yourgeek.it/security-ceh-courses-without-exams/</guid>
      <description>I paid for two security courses in 2020 and never sat the exams. What they changed in how I build servers, run audits and read a CV.</description>
      <pubDate>Sat, 03 Oct 2026 00:00:00 GMT</pubDate>
      <category>security</category>
      <category>human-factor</category>
      <category>infrastructure</category>
    </item>
    <item>
      <title>He Added a Code Snippet 20 Minutes Before a Demo</title>
      <link>https://yourgeek.it/never-deploy-on-friday/</link>
      <guid isPermaLink="true">https://yourgeek.it/never-deploy-on-friday/</guid>
      <description>A webmaster added a code snippet to WordPress right before a demo and the site went down. A few minutes to fix, and a weekend it could have cost.</description>
      <pubDate>Fri, 02 Oct 2026 00:00:00 GMT</pubDate>
      <category>incident</category>
      <category>troubleshooting</category>
      <category>infrastructure</category>
      <category>human-factor</category>
    </item>
    <item>
      <title>A full stack on 1 GB of RAM</title>
      <link>https://yourgeek.it/full-stack-on-1gb-ram/</link>
      <guid isPermaLink="true">https://yourgeek.it/full-stack-on-1gb-ram/</guid>
      <description>Ingress, SSO, database, mail server and API on 1 GB of RAM: what each one takes, the OOM nobody noticed, and why a small limit beats a big plan.</description>
      <pubDate>Thu, 01 Oct 2026 00:00:00 GMT</pubDate>
      <category>infrastructure</category>
      <category>resilience</category>
      <category>troubleshooting</category>
    </item>
    <item>
      <title>Don't panic: the order matters more than the speed</title>
      <link>https://yourgeek.it/incident-response-dont-panic/</link>
      <guid isPermaLink="true">https://yourgeek.it/incident-response-dont-panic/</guid>
      <description>Two incidents, one caused by an attacker and one by me: what panic pushes you to do, what it destroys, and the order of steps that beats it.</description>
      <pubDate>Tue, 29 Sep 2026 00:00:00 GMT</pubDate>
      <category>incident</category>
      <category>human-factor</category>
      <category>security</category>
      <category>troubleshooting</category>
    </item>
    <item>
      <title>AI agent guardrails aren't a sandbox</title>
      <link>https://yourgeek.it/ai-agent-guardrails-not-sandbox/</link>
      <guid isPermaLink="true">https://yourgeek.it/ai-agent-guardrails-not-sandbox/</guid>
      <description>Rule files and prompts are requests an AI agent can ignore. What actually limits the damage: scoped credentials, segregated networks, backups it can't reach.</description>
      <pubDate>Mon, 28 Sep 2026 00:00:00 GMT</pubDate>
      <category>security</category>
      <category>human-factor</category>
      <category>incident</category>
      <category>resilience</category>
    </item>
    <item>
      <title>Fixing PCs teaches you to fix everything else</title>
      <link>https://yourgeek.it/fixing-pcs-fixes-everything-else/</link>
      <guid isPermaLink="true">https://yourgeek.it/fixing-pcs-fixes-everything-else/</guid>
      <description>A burst water filter, a forgotten web server and a weekend lost to Teflon on brass: what IT troubleshooting teaches you, and where it stops working.</description>
      <pubDate>Sat, 26 Sep 2026 00:00:00 GMT</pubDate>
      <category>incident</category>
      <category>human-factor</category>
      <category>troubleshooting</category>
    </item>
    <item>
      <title>The Voice Was Fake: A €95M CEO Fraud at an Italian Bank</title>
      <link>https://yourgeek.it/ceo-fraud-cloned-voice-whatsapp/</link>
      <guid isPermaLink="true">https://yourgeek.it/ceo-fraud-cloned-voice-whatsapp/</guid>
      <description>A fake WhatsApp from the group CEO, a cloned lawyer's voice, and €95M out of a bank treasury. No system was breached: the approval process was.</description>
      <pubDate>Fri, 25 Sep 2026 00:00:00 GMT</pubDate>
      <category>security</category>
      <category>human-factor</category>
      <category>messaging</category>
      <category>phone</category>
    </item>
    <item>
      <title>Seven Years of Proxmox in Production, Without HA</title>
      <link>https://yourgeek.it/proxmox-in-production/</link>
      <guid isPermaLink="true">https://yourgeek.it/proxmox-in-production/</guid>
      <description>Seven years on a 3-node Proxmox cluster with no HA, backups on the same SAN and one sysadmin: what held, what broke, and what I'd change today.</description>
      <pubDate>Fri, 25 Sep 2026 00:00:00 GMT</pubDate>
      <category>virtualization</category>
      <category>resilience</category>
      <category>incident</category>
      <category>human-factor</category>
    </item>
    <item>
      <title>The Seal Was Real: Revolut, PEC and the Human Factor</title>
      <link>https://yourgeek.it/pec-trusted-channel-human-factor/</link>
      <guid isPermaLink="true">https://yourgeek.it/pec-trusted-channel-human-factor/</guid>
      <description>A genuine Italian government PEC mailbox, stolen credentials, 680 customers' data handed over. Why a trusted channel is not a trusted request.</description>
      <pubDate>Thu, 24 Sep 2026 00:00:00 GMT</pubDate>
      <category>security</category>
      <category>human-factor</category>
      <category>email</category>
    </item>
  </channel>
</rss>
