InfoSec
-
How to store sudoers in AD on RHEL 8 with sudoRoles
Ditch complex sudoers files in favour of a simpler and more powerful approach using AD and sssd
-
Inspecting traffic of popular iOS apps
Performing TLS decryption on my own phone to see what traffic gets sent out.
-
DNS over HTTPS, and why enterprises should block it
The politics of DNS-over-HTTPS and how to stop it on a corporate LAN
-
ufw and firewalld rules to block VPS bots and scrapers
Copy-and-paste rules to block ingress traffic from cheap VPS providers
-
How I back up my VMs
A peek at the architecture and methods I’m using to back up 50+ VMs securely
-
Should I virtualise my firewalls?
A bollocks-free take on the pros and cons of virtualised firewalls
-
Automating HAProxy, Puppet and LetsEncrypt with a DMZ network for securing Internet-facing sites
A tutorial on fronting any web server with HAProxy in a DMZ and automating LetsEncrypt certificates, configured entirely with Puppet code
-
Blocking access to the WordPress users sitemap through Nginx (via .conf or with Puppet)
You can easily slow down attackers by blocking access to wp-sitemap-users-1.xml in Nginx.
-
Authenticating Grafana with OAuth2 against AD FS
A brief guide on how to get Grafana to authenticate with OAuth2 on AD FS.
●●●
You’ve reached the end.