Blog Tags Search CV

Top Tags

security 61 infra 30 wiki 24 vault 22 recon 14 pki 11 podman 11 automation 10 n8n 10 nginx 10 architecture 9 mtls 8

All tags →

All Tags

access ai airtable android api appointments architecture aspnet auth authorization automation backup bugbounty cache caldav checklists ci configuration containers crm customer-experience date-time debugging deployments dev dns espocrm filtering forgejo git github graphql http idempotency infra javascript jenkins jitsi keycloak lab letsencrypt lifestyle llm logging mail matrix monitoring mtls n8n networking nextcloud nginx nuclei oauth observability oidc okta operations ops opsdash performance php pki playwright podman process prod product-design proxy recon recovery reliability reminders review rtc runbook safety salesforce scaling scheduling scripts security ssh stalwart state state-machines state-management systemd testing threat-modeling tls tomcat tools troubleshooting twilio unix ux vault vpn vps vue web-development webhooks websocket whatsapp wiki workflow

Posts

2026

Isolating Generated Websites From Their Build Controller
WebsitePitcher: Binding Visual Approval to the Exact Website Build
Publishing CRM Meetings to CalDAV With ETags and Receipts
Setting Up Stalwart as a Mail and Calendar Service Boundary
Building Record-Level Sharing for a CRM Portal
Extending EspoCRM With Native Pipeline Boards
Checking a Matrix Stack as Several Independent Service Paths
Self-Hosting Jitsi: Login, Room Access, and Media Are Separate Paths
Why Keycloak Became the Identity Boundary for My Applications
Putting a Server-Side Boundary Between a Public Form and a CRM
Building Mail Guard Around Nextcloud's Outgoing Mail Pipeline
Why Opsdash Separates Elapsed Calendar Time From Planned Time
Inside Opsdash: Turning Nextcloud Calendar Data Into a Dashboard
Persisting Conversation State Before Sending a WhatsApp Reply
Certificate Rotation Is a Handoff Between Producer and Consumer
Keeping Recon State Correct After a Partial Probe
Building a Browser-Only Calculator With Reproducible Offers
Building an Automated Conversation Test Framework
Treating WhatsApp Templates as Configuration Roles
Preserving Workflow and Webhook IDs During n8n Upgrades
Building a Deep-Clone System for Campaign Configurations
What I Learned from Optimizing My Lead Intake Too Aggressively
Why Idempotency Matters in Lead Intake Workflows
Adding Multiple Safety Guards to My Reminder System
Designing Consistent Conversation State Across Workflows
Preventing Two Conversation Branches from Answering the Same Message
Falling Back to Real Available Appointment Slots
Handling Natural-Language Appointment Requests Without Endless Regex Rules
Why My Configuration Studio Has Customer and Admin Views
Building a Customer-Friendly Configuration Studio on Top of Airtable
Separating Campaign Configuration from Workflow Logic
Building a Runtime Configuration Layer for My Automation Workflows
Keeping a Jenkins Recon Pipeline Stable Over Time
A Daily and Weekly Review Loop for Recon
From Vault Lab Notes to a Real Ops Repo
Why I Added Stable Wrappers and Versioned Vault Scripts
Running Nuclei Only Where It Matters
What My Vault Platform Actually Looks Like Now
Stateful Recon With Diffs and Cumulative Files
How I Thought About Forgejo Image Pinning and Upgrades
Chunking HTTP Probes for Large Host Lists
How I Thought About Forgejo Backups and Restore
Why My Forgejo Runner Ended Up on the Host
Using SSH Tunnels and Git Broker for a Private Forgejo
Rendering Forgejo Config From Vault Instead of Env Vars
Why I Split Recon Into Three Jenkins Jobs
Why I Started Forgejo as a Private Service
Jenkins Recon Pipeline: The Overview I Wanted From Day One
Backups and Production Clones for My Matrix Stacks
Debugging Matrix Upload Limits Across Multiple NGINX Layers
What Broke When I Added Matrix Authentication Service
Adding MatrixRTC With LiveKit and a JWT Service
Moving My Matrix Secrets Into Vault
Building a Matrix Stack on Rootless Podman

2025

Why Vault Can Say Invalid Token and Permission Denied at the Same Time
Next.js Security Playbook (Checklist + Cheatsheet)
GitHub Actions: Debugging Playwright Timeouts in Nextcloud CI
Rotate Everything in Production (Part 4): Proxy Chain Refresh, Restarts, and the 'Connection Reset' Healthcheck
Rotate Everything in Production (Part 3): Agent mTLS Login and App Leaf Certs
Rotate Everything in Production (Part 2): Admin mTLS + Vault Server TLS (and Why These Two Come First)
GitHub Actions: Nextcloud App CI Pipeline (Matrix + E2E)
Rotate Everything in Production (Part 1): The Order That Keeps You Out of Trouble
Caido in Practice: A Modern Proxy and the Plugins That Make It Shine
Wiki: Vue
Wiki: Tomcat
What I Want to Explore Next in This Lab
How This Infra Supports My Nomad Lifestyle
Wiki: Test Proxy App Integration
Threat Modeling My Personal Infra Project
Creating Checklists for Infra Changes and Security Tests
Lessons From Locking Myself Out of Vault (Multiple Times)
Wiki: Security Concept Summary
Two Nextcloud Instances Backed by Vault PKI
Wiki: Okta
Using VPN/IPsec as a Secure Entry Point
Hardening SSH and Network Access to the VPS
Wiki: OAuth
Setting Up an Android Testing Lab for Bug Bounty
My HTTP Testing Stack: proxify, Caido and CLI Tools
Wiki: OAuth Authentication
Turning My VPS Into a Bug Bounty Recon Node
Wiki: NGINX Reverse Proxy Pattern
Building a Logging Path: From Services to a Single View
Vault mTLS for App Agents and Proxy Trust
End-to-End PKI and TLS Automation
How I Want Apps to Consume Secrets: Vault Agents and Templates
Wiki: Main Gateway App Integration
Designing My Reverse Proxy Chain
Mapping Unix Users to Trust Zones on My VPS
Podman Global Configuration for Rootless Services
Wiki: Manual DNS-01 Wildcard Flow
My Vault Access Model: Root, Admin, Services and Humans
Vault Admin Setup
Wiki: IP Ranges
Overview
Planning Certificate Rotation With Systemd Timers
Wiki: GraphQL Discovery
Automating Certificate Health Checks on My VPS
Security Concept Summary
Designing a Maintenance Listener: My Break-Glass Door Into Vault
Manual Wildcard Certificates with DNS-01
Surviving Expired Admin Certificates in a mTLS-Only Vault Setup
Wiki: GraphQL Attack Vectors
Building My Own PKI: Offline Root, Intermediate CAs and Vault as CA
NGINX Reverse Proxy and Sidecar Pattern
Wiki: EspoCRM Portal on a Separate Subdomain
Designing My VPS Layout: Unix Users and Rootless Podman
Git and Shared SSH Agent Setup
Wiki: Container Network Solutions
Container Networking Options for a Multi-User VPS
What I’m Trying to Build With My VPS and Vault
Wiki: Cache Oracle
Wiki: Salesforce Aura / Lightning
Wiki: Web Cache Poisoning
Wiki: Web Cache Deception
Wiki: Subdomain Takeover
Wiki: HTTP Request Smuggling
Wiki: Cross-Site WebSocket Hijacking
Wiki: ASP.NET
Wiki: GraphQL Testing Checklist
Tools: Web Testing Cheatsheet (curl, ffuf, nuclei)
Tools: Recon Stack (subfinder → httpx → katana → nuclei)
Bug Bounty: Android Lab (emulator, proxy, Frida)
Tools: SSH + File Transfer (scp, rsync, tunnels)
Bug Bounty: HTTP Tooling (proxy → replay → automate)
Bug Bounty: Recon Workflow (fast → deep → repeat)

Tag: authorization

1 Posts

Building Record-Level Sharing for a CRM Portal

25.10.2026

crm espocrm security authorization

© 2026 · Built by blade34242 · gellert innovation · gebaut mit Eleventy

RSS Search Tags