Blog Tags Search CV

Top Tags

security 56 infra 27 wiki 24 vault 21 recon 13 nginx 10 pki 10 podman 10 mtls 8 forgejo 6 http 6 jenkins 6

All tags →

All Tags

access android aspnet auth automation backup bugbounty cache checklists ci containers dev dns espocrm filtering forgejo git github graphql http infra jenkins lab letsencrypt lifestyle logging matrix monitoring mtls networking nextcloud nginx nuclei oauth observability oidc okta operations ops pki playwright podman process prod proxy recon recovery reliability review rtc runbook salesforce scaling scripts security ssh state systemd testing threat-modeling tls tomcat tools troubleshooting unix vault vpn vps vue websocket wiki workflow

Posts

2026

Keeping a Jenkins Recon Pipeline Stable Over Time
A Daily and Weekly Review Loop for Recon
From Vault Lab Notes to a Real Ops Repo
Why I Added Stable Wrappers and Versioned Vault Scripts
Running Nuclei Only Where It Matters
What My Vault Platform Actually Looks Like Now
Stateful Recon With Diffs and Cumulative Files
How I Thought About Forgejo Image Pinning and Upgrades
Chunking HTTP Probes for Large Host Lists
How I Thought About Forgejo Backups and Restore
Why My Forgejo Runner Ended Up on the Host
Using SSH Tunnels and Git Broker for a Private Forgejo
Rendering Forgejo Config From Vault Instead of Env Vars
Why I Split Recon Into Three Jenkins Jobs
Why I Started Forgejo as a Private Service
Jenkins Recon Pipeline: The Overview I Wanted From Day One
Backups and Production Clones for My Matrix Stacks
Debugging Matrix Upload Limits Across Multiple NGINX Layers
What Broke When I Added Matrix Authentication Service
Adding MatrixRTC With LiveKit and a JWT Service
Moving My Matrix Secrets Into Vault
Building a Matrix Stack on Rootless Podman

2025

Why Vault Can Say Invalid Token and Permission Denied at the Same Time
Next.js Security Playbook (Checklist + Cheatsheet)
GitHub Actions: Debugging Playwright Timeouts in Nextcloud CI
Rotate Everything in Production (Part 4): Proxy Chain Refresh, Restarts, and the 'Connection Reset' Healthcheck
Rotate Everything in Production (Part 3): Agent mTLS Login and App Leaf Certs
Rotate Everything in Production (Part 2): Admin mTLS + Vault Server TLS (and Why These Two Come First)
GitHub Actions: Nextcloud App CI Pipeline (Matrix + E2E)
Rotate Everything in Production (Part 1): The Order That Keeps You Out of Trouble
Caido in Practice: A Modern Proxy and the Plugins That Make It Shine
Wiki: Vue
Wiki: Tomcat
What I Want to Explore Next in This Lab
How This Infra Supports My Nomad Lifestyle
Wiki: Test Proxy App Integration
Threat Modeling My Personal Infra Project
Creating Checklists for Infra Changes and Security Tests
Lessons From Locking Myself Out of Vault (Multiple Times)
Wiki: Security Concept Summary
Two Nextcloud Instances Backed by Vault PKI
Wiki: Okta
Using VPN/IPsec as a Secure Entry Point
Hardening SSH and Network Access to the VPS
Wiki: OAuth
Setting Up an Android Testing Lab for Bug Bounty
My HTTP Testing Stack: proxify, Caido and CLI Tools
Wiki: OAuth Authentication
Turning My VPS Into a Bug Bounty Recon Node
Wiki: NGINX Reverse Proxy Pattern
Building a Logging Path: From Services to a Single View
Vault mTLS for App Agents and Proxy Trust
End-to-End PKI and TLS Automation
How I Want Apps to Consume Secrets: Vault Agents and Templates
Wiki: Main Gateway App Integration
Designing My Reverse Proxy Chain
Mapping Unix Users to Trust Zones on My VPS
Podman Global Configuration for Rootless Services
Wiki: Manual DNS-01 Wildcard Flow
My Vault Access Model: Root, Admin, Services and Humans
Vault Admin Setup
Wiki: IP Ranges
Overview
Planning Certificate Rotation With Systemd Timers
Wiki: GraphQL Discovery
Automating Certificate Health Checks on My VPS
Security Concept Summary
Designing a Maintenance Listener: My Break-Glass Door Into Vault
Manual Wildcard Certificates with DNS-01
Surviving Expired Admin Certificates in a mTLS-Only Vault Setup
Wiki: GraphQL Attack Vectors
Building My Own PKI: Offline Root, Intermediate CAs and Vault as CA
NGINX Reverse Proxy and Sidecar Pattern
Wiki: EspoCRM Portal on a Separate Subdomain
Designing My VPS Layout: Unix Users and Rootless Podman
Git and Shared SSH Agent Setup
Wiki: Container Network Solutions
Container Networking Options for a Multi-User VPS
What I’m Trying to Build With My VPS and Vault
Wiki: Cache Oracle
Wiki: Salesforce Aura / Lightning
Wiki: Web Cache Poisoning
Wiki: Web Cache Deception
Wiki: Subdomain Takeover
Wiki: HTTP Request Smuggling
Wiki: Cross-Site WebSocket Hijacking
Wiki: ASP.NET
Wiki: GraphQL Testing Checklist
Tools: Web Testing Cheatsheet (curl, ffuf, nuclei)
Tools: Recon Stack (subfinder → httpx → katana → nuclei)
Bug Bounty: Android Lab (emulator, proxy, Frida)
Tools: SSH + File Transfer (scp, rsync, tunnels)
Bug Bounty: HTTP Tooling (proxy → replay → automate)
Bug Bounty: Recon Workflow (fast → deep → repeat)

Tag: runbook

1 Posts

← Alle Tags

Vault Admin Setup

28.10.2025

vault security runbook

RSS Search Tags