Recently Updated Pages

Where the edge sits and what it hands off to. The WAF is one boundary in a layered defense, and u...

A single edge host that terminates public TLS, inspects every request, and forwards only what pas...

The single front door to a self-hosted environment: what it inspects, what it terminates, and wha...

Short-lived certificates are only a good idea if renewal is reliably automated. The price of shor...

Why nothing inside the network is trusted without proof, and how to run the CA that makes it poss...

Before the configuration, the model. Three ideas make the rest of this book make sense: where the...

This is where the policy becomes real. The two configurations below, one on the calling side, one...

Every host follows the same bootstrap: make the internal names resolve, trust the CA root, then r...

This is the identity root for every machine in the environment. Everything else in the book depen...

Clone the repo into a location capable of serving a python flask application. git clone https://g...

Pattern: group-aware. BookStack authenticates users through Keycloak and reads their group member...

A running Keycloak does nothing useful until you decide how realms are split, how users prove who...

This runbook defines the network topology, architecture, security configuration, and operational ...

Term Definition 3-2-1 Rule A backup strategy: keep 3 copies of your data, on 2...

Monthly Checklist Time Required: ~30 minutes Backups Verify your computer backup completed...

Ransomware Infection Signs of ransomware Files suddenly encrypted with unfamiliar extension...

Identity Theft Signs of identity theft: Accounts or loans you didn't open appearing on cred...

Compromised Email Account Signs your email might be compromised: Can't log in / password does...

When you discover a security incident: Don't panic - Take a breath; most incidents are recov...

Core Concepts: Protect Your Data, Have a Recovery Plan You need backups BEFORE disaster strikes....