Tag: security

Isolating Generated Websites From Their Build Controller

04.11.2026

ai containers security architecture

Building Record-Level Sharing for a CRM Portal

25.10.2026

crm espocrm security authorization

Why Keycloak Became the Identity Boundary for My Applications

07.10.2026

keycloak oidc security architecture

Putting a Server-Side Boundary Between a Public Form and a CRM

05.10.2026

architecture api security crm

Building Mail Guard Around Nextcloud's Outgoing Mail Pipeline

02.10.2026

nextcloud mail security php

What My Vault Platform Actually Looks Like Now

01.05.2026

vault pki infra security

How I Thought About Forgejo Image Pinning and Upgrades

24.04.2026

forgejo ops containers security

How I Thought About Forgejo Backups and Restore

23.04.2026

forgejo backup ops security

Rendering Forgejo Config From Vault Instead of Env Vars

18.04.2026

forgejo vault security podman

Why I Started Forgejo as a Private Service

17.04.2026

forgejo git security infra

Adding MatrixRTC With LiveKit and a JWT Service

06.03.2026

matrix rtc podman security

Moving My Matrix Secrets Into Vault

03.03.2026

matrix vault security infra

Why Vault Can Say Invalid Token and Permission Denied at the Same Time

28.12.2025

security vault pki troubleshooting

Next.js Security Playbook (Checklist + Cheatsheet)

23.12.2025

security bugbounty checklists dev

Rotate Everything in Production (Part 4): Proxy Chain Refresh, Restarts, and the 'Connection Reset' Healthcheck

22.12.2025

security vault mtls pki prod reliability podman

Rotate Everything in Production (Part 3): Agent mTLS Login and App Leaf Certs

21.12.2025

security vault mtls pki prod podman

Rotate Everything in Production (Part 2): Admin mTLS + Vault Server TLS (and Why These Two Come First)

20.12.2025

security vault mtls pki prod

Rotate Everything in Production (Part 1): The Order That Keeps You Out of Trouble

18.12.2025

dev security vault mtls pki prod podman

Caido in Practice: A Modern Proxy and the Plugins That Make It Shine

15.12.2025

tools proxy security

Wiki: Vue

14.12.2025

wiki vue security

Wiki: Tomcat

10.12.2025

wiki tomcat security

What I Want to Explore Next in This Lab

09.12.2025

lab infra security

How This Infra Supports My Nomad Lifestyle

05.12.2025

infra lifestyle security

Threat Modeling My Personal Infra Project

02.12.2025

security threat-modeling infra

Creating Checklists for Infra Changes and Security Tests

30.11.2025

infra security process

Lessons From Locking Myself Out of Vault (Multiple Times)

28.11.2025

vault security recovery

Wiki: Security Concept Summary

26.11.2025

wiki security nginx

Wiki: Okta

22.11.2025

wiki okta security

Using VPN/IPsec as a Secure Entry Point

21.11.2025

vpn security networking

Hardening SSH and Network Access to the VPS

18.11.2025

ssh security vps

Wiki: OAuth

17.11.2025

wiki oauth security

Setting Up an Android Testing Lab for Bug Bounty

16.11.2025

android bugbounty security

My HTTP Testing Stack: proxify, Caido and CLI Tools

14.11.2025

http tools proxy security

Turning My VPS Into a Bug Bounty Recon Node

11.11.2025

vps recon security

Vault mTLS for App Agents and Proxy Trust

07.11.2025

vault mtls security

End-to-End PKI and TLS Automation

04.11.2025

pki tls security infra

How I Want Apps to Consume Secrets: Vault Agents and Templates

04.11.2025

vault security infra

Designing My Reverse Proxy Chain

02.11.2025

nginx mtls infra security

Mapping Unix Users to Trust Zones on My VPS

31.10.2025

unix security podman infra

My Vault Access Model: Root, Admin, Services and Humans

28.10.2025

vault security access

Vault Admin Setup

28.10.2025

vault security runbook

Planning Certificate Rotation With Systemd Timers

24.10.2025

tls security systemd

Security Concept Summary

21.10.2025

security nginx infra

Designing a Maintenance Listener: My Break-Glass Door Into Vault

19.10.2025

vault mtls security

Wiki: GraphQL Attack Vectors

17.10.2025

wiki graphql security

Building My Own PKI: Offline Root, Intermediate CAs and Vault as CA

14.10.2025

vault pki security infra

NGINX Reverse Proxy and Sidecar Pattern

14.10.2025

nginx infra security

Designing My VPS Layout: Unix Users and Rootless Podman

10.10.2025

vps podman security infra

Git and Shared SSH Agent Setup

10.10.2025

git ssh security

What I’m Trying to Build With My VPS and Vault

07.10.2025

vps vault infra security

Wiki: Salesforce Aura / Lightning

29.09.2025

wiki salesforce security

Wiki: Web Cache Poisoning

25.09.2025

wiki cache security

Wiki: Web Cache Deception

21.09.2025

wiki cache security

Wiki: Subdomain Takeover

16.09.2025

wiki dns security

Wiki: HTTP Request Smuggling

12.09.2025

wiki security http

Wiki: Cross-Site WebSocket Hijacking

07.09.2025

wiki websocket security

Wiki: GraphQL Testing Checklist

29.08.2025

wiki graphql security

Tools: Web Testing Cheatsheet (curl, ffuf, nuclei)

02.04.2025

tools http security

Tools: Recon Stack (subfinder → httpx → katana → nuclei)

12.03.2025

recon tools security

Bug Bounty: Android Lab (emulator, proxy, Frida)

03.03.2025

bugbounty android security

Bug Bounty: Recon Workflow (fast → deep → repeat)

19.01.2025

bugbounty recon security