Technical Blog — Coming Soon

Deep dives into
infrastructure,
security & systems.

Justmoor.tech is a hands-on technical blog covering self-hosted infrastructure, home lab engineering, networking, Linux and security topics. Written by someone who actually runs the kit.

Upcoming posts What's covered
wraith676@bhop.justmoor.tech
❯ wg show wg0
interface: wg0
  listening port: 51820
  peers: 2  # vps + homelab

❯ docker ps --format "{{.Names}}\t{{.Status}}"
reverse-proxy   Up 3 days
nextcloud-stack Up 3 days
certbot        Up 3 days

❯ uptime
 up 9 days, healthy — all systems nominal

❯

Coverage areas

What gets written about here

Practical, tested content. If it's on the blog, it's been run in a real environment.

🔍

Networking & Tunnels

WireGuard, VLANs, routing, NAT traversal, VPS-to-homelab tunnels and everything in between.

Networking
🔒

Security & Hardening

SSH hardening, firewall rules, key management, attack surface reduction and access control.

Security
💻

Linux & Systems

Ubuntu, Debian, systemd, scripting, performance tuning and deep dives on kernel-level behaviour.

Linux
🛠

Self-Hosted Infrastructure

Running your own stack — Nextcloud, reverse proxies, Docker Compose, storage and monitoring.

Self-Hosted
☁

VPS & Cloud

Provisioning, hardening and operating VPS instances without handing everything to a managed platform.

Cloud
🔧

Homelab Engineering

NAS, SMB shares, CIFS mounts, local DNS, network topology and making it all reliable.

Homelab

In the pipeline

Upcoming posts

These are being written now, based on real builds done in this lab.

VPS to homelab WireGuard tunnel — end to end Full walkthrough: key generation, peer config, NAT masquerade and LAN routing.
Soon
nginx reverse proxy with Let's Encrypt on Docker Certbot webroot challenge, auto-renewal, HTTPS config and multi-subdomain setup.
Soon
Self-hosted Nextcloud backed by a NAS CIFS share Docker Compose setup, SMB mounts, trusted proxies and keeping data off the VPS.
Soon
SSH hardening from scratch on a fresh Ubuntu VPS ED25519 keys, disabling password auth, fail2ban, port knocking and audit tooling.
Soon
iptables NAT for LAN routing across a WireGuard tunnel MASQUERADE rules, FORWARD chains, persisting with netfilter-persistent and debugging.
Soon

The lab stack

What this runs on

The tools and tech behind the infrastructure covered on this blog.

Ubuntu 24.04 LTS Docker WireGuard nginx Let's Encrypt Nextcloud MariaDB iptables systemd SSH / ED25519 Bash Python VPS (BinaryLane) SMB / CIFS Proxmox