Announcing restic-PyBM v0.1
A Python 3 wrapper to manage restic repositories and monitor them with Nagios-compliant outputs, created by yours truly.
Yubikey & Raspberry Pi based 2-tier CA with step-ca
An affordable solution to set up a basic root CA with physical security for your sensitive keys.
Some notes on a privacy-minded Pi-Hole deployment
Pi-Hole is an excellent solution to block ads, trackers and malware network-wide at the DNS level. With a few tweaks, it can be a great asset for privacy on the…
unbound DNS-over-TLS forwarding server on Debian Buster
Setting up unbound is simple. Getting it to work on Debian Buster with DNS-over-TLS is no rocket science either but does require some fine-tuning explained in this article.
recoll: Going paperless without getting moneyless
A write-up on how I selected a lightweight tool to finally throw away those big piles of paper and get a decent full text index of all these official documents.
Site-to-site OpenVPN in unprivileged containers on Proxmox VE 5
This article covers the specifics of getting OpenVPN to work on unprivileged containers with Proxmox VE 5.2 and the configuration specifics for a site-to-site link.
CTFd on Ubuntu 18.04
CTFd is a nice and easy to use CTF management platform based on Python. This article gives a straight guide for quick deployment on a bare Ubuntu 18.04 VM/Container, in…
Splitting the IPS from the routing function with pfSense
Following performance issues with my all-in-one IPS/Router setup on my home network, I decided to split it between a pfSense-based IPS and a Linux-based router. This article explains why I…
A subjective list of useful cybersecurity resources
In this (supposedly) frequently updated article, I list websites and publications that I find useful as a referential/background for my cybersecurity activities. Basically, this is a dump of my Feedly…
Icinga 2 with InfluxDB & Grafana on CentOS 7
Icinga started out as a Nagios refactor. It has now become so much more, and is a pretty solid tool to monitor efficiently an heterogeneous system with minimal effort. Along…