Seguridad on Servicios Rogeliowar

Wazuh SIEM with Docker: complete deployment with SSL and compliance rules

Fri, 22 May 2026 00:00:00 +0000

What is ENS and Why It Matters
#

The National Security Framework (ENS) is the mandatory cybersecurity regulatory framework for Spanish Public Administrations and private companies that provide services to them. It is regulated by the Royal Decree 311/2022 and establishes the principles, requirements, and security measures that must be applied to information systems that handle public data or services.

Restic: encrypted backups with deduplication for your Linux server

Mon, 11 May 2026 00:00:00 +0000

I already had backups with rsync and cron, but rsync copies files, not snapshots. If you accidentally delete a file and the backup syncs before you notice, you lose it. Restic solves that and adds something rsync will never provide: AES-256 encryption, deduplication, and snapshots with navigable history.

What makes Restic different
#

Feature	rsync	Restic
AES-256 encryption	No	Yes
Deduplication	No	Yes (block-level)
Navigable snapshots	No	Yes
Multiple backends	No	SFTP, S3, Backblaze, rclone…
Integrity checking	No	`restic check`
Retention policy	Manual	`restic forget --prune`

Deduplication is especially useful for database backups and configuration directories that change little: a Restic repository with 6 months of daily backups usually takes up much less space than 180 full copies.

Emergency replica: how to have your home server backed up on a VPS

Thu, 30 Apr 2026 00:00:00 +0000

Having a server at home has an obvious weak point: if the power goes out, the router fails, or the disk dies, your website disappears. The solution is to have a replica in the cloud ready to activate in minutes.

The architecture
#

[servidor-casa] → rsync cada 6h → [VPS réplica]
 servicios activos réplica en espera
 TTL DNS: 5 min Uptime Kuma vigilando

The home server pushes content to the VPS every 6 hours. If the server goes down, I change the DNS and in 5 minutes the VPS serves the site.

WireGuard VPN: Access your home server from anywhere

Thu, 30 Apr 2026 00:00:00 +0000

One of the classic problems with having a server at home is secure remote access. Opening SSH ports directly to the world is a bad idea — you see it in the auth logs: hundreds of attempts per day. The elegant solution is a VPN, and WireGuard is today’s best available option.

Why WireGuard?
#

Compared to OpenVPN or IPSec:

Seguridad on Servicios Rogeliowar

Wazuh SIEM with Docker: complete deployment with SSL and compliance rules

What is ENS and Why It Matters #