PocketBase with zero host ports — completely invisible to the public internet. OpenResty Lua drops unauthorized connections with HTTP 444. Post-quantum SSH via ML-KEM-768+X25519 on Ubuntu 26.04.

#PocketBase #Database #OpenResty #Nginx #DevOps #Security #Ansible #Startup

https://mrbu.ch/articles/pocketbase-with-openresty-lua-shields/

Securing a Single-Server Startup: PocketBase with OpenResty Lua Shields

Isolating a single-machine startup stack using programmable OpenResty Lua triggers and post-quantum OpenSSH.

Mr. Buch