🧩 Problem

My home network uses a dynamic public IP address, which changes periodically. This breaks remote access to my self-hosted services.

🛠️ Solution Overview

I used an open-source tool (cloudflare-ddns-updater) to automatically update my Cloudflare DNS records whenever my public IP changes.

🔧 Environment

• Ubuntu Server (DDNS host)
• Cloudflare domain
• API Token with DNS edit permissions
• Git installed

🚀 Step 1: Create Cloudflare API Token

1. Log in to Cloudflare
2. Go to My Profile → API Tokens
3. Create a token with:
   • Zone → DNS → Edit
   • Zone Resources → Specific Zone (your domain)

Save the token securely.

🧩 Problem

I wanted to simulate a real-world security environment in my homelab where I could detect and respond to SSH brute-force attacks and at the same time monitor my devices

🛠️ Solution Overview

I deployed Wazuh as a SIEM solution and configured it to detect SSH login attempts and automatically block malicious IPs.

🔧 Environment

• Ubuntu Server (Wazuh Manager)
• Linux target machine (with SSH enabled)
• Public exposure via port forwarding

🚀 Step 1: Install Wazuh

curl -sO https://packages.wazuh.com/4.14/wazuh-install.sh && sudo bash ./wazuh-install.sh -a

After installation, accessed dashboard: