Step-by-step guide to hardening a Linux VPS running multiple Node.js apps — UFW firewall, binding to localhost, reverse proxy security, and common mistakes to avoid.

Codex CLI needs a browser for OAuth login. Here’s how to make it work on a headless server using SSH port forwarding — plus why the OAuth token can’t replace an API key.