Tag: Security
All the articles with the tag "Security".
GCloud SSH Tunnelling
Close port 22 to the internet on GCP and still SSH in, using the Identity Aware Proxy to tunnel through instead of exposing SSH with firewall rules and public/private key pairs.
Restic Backup Scheduler
Let the Restic backup scheduler take the strain on making your Restic backups work. https://github.com/erikw/restic-automatic-backup-scheduler
Unlocking a LUKS partition with a USB stick
Linux Unified Key Setup LUKS in an “at rest” encryption method for Linux disk media. Once a drive is encrypted using LUKS you will need the password or key
Icinga2 and Cloudflare
With Cloudflare, I wanted to host my Icinga2 instance behind a tunnel. This posed a bit of an issue as whenever I tried to submit a passive result the logs
Knock vs. Knockd
I'm working on a project that requires a machine to be contactable on a client's remote network even when its DHCP fails. We've seen an issue where our dev
AWS: SSH using Systems Manager
Systems Manager Systems Manager adds a layer of management to your EC2’s. One particular benefit is being able to SSH into an EC2 without having to open a
knockd
Updated:Close your ssh service until you really need it, using knockd to manipulate your iptables firewall.
Clerk Authentication
Simple and secure user authentication, complete with everything you need out-of-the-box to provide a secure experience for your users.
WD My Passport and LUKS
I found a 4TB WD My Passport drive, and thought I'd see if I could put it to use on Linux. I'm not going to even try using the built-in AES256 encryption,
certbot and upnp
I don't tend to open port 80 to the outside world on my home system. I have no need of an unsecured, unencrypted web service. For this reason, getting a ce