Tag

security

All articles with this tag.

BlogNov 2, 2026

Phishing and Social Engineering Defense for Associations: How to Protect Members and Board on Your Virtualmin Server

Learn how to protect your association from phishing and social engineering with DMARC reports, analysis of suspicious login attempts, and a clear reporting workflow – easily implemented on your Virtualmin server.

BlogNov 1, 2026

Securing Nextcloud for Clubs Properly: Setting Up Two-Factor Authentication, Group Permissions, and Encrypted Backups on Your Own Virtualmin Server Step by Step

Learn how to securely set up Nextcloud for your club on a Virtualmin server: with two-factor authentication, granular group permissions, and encrypted backups. Step-by-step guide including tips.

BlogOct 31, 2026

Security Hardening for Club Websites on Your Own Virtualmin Server: The Practical Checklist

Effectively protect your club website on your own Virtualmin server from attacks. Our practical checklist shows you how to close the most common security gaps with Fail2ban, SSH keys, two-factor authentication, restrictive file permissions, and automatic backups.

BlogOct 30, 2026

Emergency Plan for Associations: Detect, Contain and Recover Hacked Websites and Email Accounts on the Virtualmin Server

A multi-stage emergency plan helps associations deal with hacked websites and compromised email accounts on their own Virtualmin server. From detection to containment to recovery.

BlogOct 26, 2026

Choosing and Securing Domain Names for Associations: Tips on Trademark Rights, Data Protection, Ownership, and Protection Against Domain Theft

Learn how to find the perfect domain name for your association, respect trademark rights, ensure data protection, and protect yourself from domain theft. With practical tips and checklists.

BlogOct 25, 2026

Domain Names for Associations: The Most Important Facts Explained Clearly

Learn everything about top-level domains, registration, WHOIS privacy, and secure management of your domain account to prevent domain theft and renew on time.

BlogOct 23, 2026

Nextcloud on Virtualmin for Associations: Secure Operation with 2FA, Permissions and GDPR

Learn how to securely operate Nextcloud on Virtualmin for associations: two-factor authentication, group and sharing permissions, file locks, encrypted external storage and GDPR-compliant retention periods for member data.

BlogOct 23, 2026

Web Application Firewalls and Intrusion Detection for Associations: Setting Up ModSecurity with OWASP Core Rule Set and Fail2ban on Virtualmin Correctly

Protect your association's member data from SQL injection, XSS, and brute-force attacks. We show you how to set up ModSecurity with OWASP Core Rule Set and Fail2ban on Virtualmin.

BlogOct 21, 2026

Reducing Attack Surfaces: A Practical Hardening Guide for Associations' Virtualmin Servers

Learn how to secure your Virtualmin server as an association: with SSH hardening, Fail2ban, firewall rules, and automatic updates – GDPR-compliant under Art. 32.

BlogSep 28, 2026

Properly Securing Nextcloud on Virtualmin for Associations: Setting Up Two-Factor Authentication, Brute-Force Protection, and GDPR-Compliant Access Logs for Member Data

Learn how to securely configure Nextcloud on Virtualmin for associations: two-factor authentication, brute-force protection, and GDPR-compliant access logs for member data.

BlogSep 26, 2026

Security Audit for Club Websites under Virtualmin: Configuring Fail2ban, ModSecurity, and Two-Factor Authentication Correctly

Learn how to significantly increase the security of your club website under Virtualmin with Fail2ban, ModSecurity, and two-factor authentication. Step-by-step guide for administrators.

BlogSep 19, 2026

Detecting and Closing Security Vulnerabilities in Free Association Web Applications like CiviCRM, Nextcloud, and Tiki Wiki under Virtualmin in a GDPR-Compliant Way

Learn how to detect and close security vulnerabilities in free association web applications like CiviCRM, Nextcloud, and Tiki Wiki under Virtualmin using automated scans and patch management in a GDPR-compliant way.