Harden infrastructure security.

Bastion Host

A secure, hardened SSH entry point to your infrastructure, with centralised auditing.

CrowdSec

Collaborative protection against attacks — behavioural detection and shared threat intelligence.

Fail2Ban Enhanced

Automatic intrusion blocking — a hardened, production-ready configuration out of the box.

Vaultwarden

Self-hosted Bitwarden in one Rust container — unlimited passwords, zero subscription, your data stays on your VPS.

Infisical

Self-hosted secrets manager — one encrypted vault for API keys, env vars and certificates, injected into your apps and CI/CD instead of copied into `.env` files.

Authelia

Add MFA, SSO and fine-grained access control in front of any app — no code changes required.

Self-hosted Auth0 alternative — full IdP with OIDC, SAML, LDAP, passkeys and a visual flow editor.

Self-hosted Auth0 alternative — user authentication in minutes. OIDC, social login, MFA, user management, SDKs for 20+ frameworks. One compose, no vendor lock-in.

Manage identities, SSO and permissions self-hosted, ready in 5 minutes.

Keycloak

Keycloak — open-source enterprise SSO on your VPS: OIDC, SAML 2.0, realms, LDAP federation and MFA, with no per-user licence.