opsadmin
0 followers · 0 following
  • Joined on 2026-08-16
Repositories Projects Packages Public activity Starred repositories
opsadmin pushed to main at selfhostedops/selfhostedops-stack 2026-10-09 07:44:11 +00:00
55b2fe7646 Episode 17: updates one service at a time, a health check that asks real questions, every tag pinned
opsadmin pushed to main at selfhostedops/selfhostedops-stack 2026-09-29 21:28:23 +00:00
1655d04d7d Episode 16: Kuma alerts sorted by rules, a local agent and a script
opsadmin pushed to main at selfhostedops/selfhostedops-stack 2026-09-23 12:20:37 +00:00
54ab43dac7 Episode 15: offboarding waits out the Vaultwarden admin rate limit, fail2ban exception only on the provider host
12542ecb19 Episode 15: Pocket ID as identity provider, tinyauth gate, offboarding script
Compare 2 commits »
opsadmin pushed to main at selfhostedops/selfhostedops-stack 2026-09-19 13:20:33 +00:00
3edef38ba3 Episode 14: an agent reads the WAF blocks, a script beats it, a human merges
opsadmin pushed to main at selfhostedops/selfhostedops-stack 2026-09-17 09:17:56 +00:00
696f3e311d Episode 13: settled RAM figure for the tuned CRS
22300d7a28 Episode 13: correct the CRS exclusion mechanism (ruleRemoveById, not ruleEngine)
26a7da0495 Episode 13: tune the OWASP CRS with per-route exclusions
88670f028f Episode 12/13: CrowdSec next to fail2ban, and an AppSec WAF in Caddy
Compare 4 commits »
opsadmin pushed to main at selfhostedops/selfhostedops-stack 2026-09-13 10:22:43 +00:00
d147f21490 Episode 11: a read-only agent that reads the security logs, one agent vs a crew of three
opsadmin pushed to main at selfhostedops/selfhostedops-stack 2026-09-11 08:21:00 +00:00
bed41cfaf3 Episode 10: hardening - firewall rules Docker cannot bypass, Caddy access log and rate limiting, fail2ban in the right chain
opsadmin pushed to main at selfhostedops/selfhostedops-stack 2026-09-06 11:55:48 +00:00
ccbddab46c Episode 9: an ops triage agent that proposes but never executes
opsadmin pushed to main at selfhostedops/selfhostedops-stack 2026-09-05 10:54:16 +00:00
bb2b5b5e22 Episode 8: n8n as the automation hub, with the editor kept off the public internet
opsadmin pushed to main at selfhostedops/selfhostedops-stack 2026-09-02 18:28:45 +00:00
cf374770c4 Episode 7: nightly restic backup to S3 with consistent dumps, heartbeat, and a restore script for a fresh box
80d5b00b67 Episode 6: Uptime Kuma monitors that mean something, ntfy push server, status page, second eye
Compare 2 commits »
opsadmin pushed to main at selfhostedops/selfhostedops-stack 2026-08-28 10:26:46 +00:00
8cebf425c6 Episode 5: NetBird mesh - control plane behind Caddy, Forgejo as IdP, services off the public internet
opsadmin pushed to main at selfhostedops/selfhostedops-stack 2026-08-26 19:57:55 +00:00
d5398caece Episode 4: Vaultwarden single sign-on via Forgejo
opsadmin pushed to main at selfhostedops/selfhostedops-stack 2026-08-19 20:21:52 +00:00
0341ae777d Episode 2: Forgejo Actions — runner, Docker sandbox, own registry, locked-down deploy
opsadmin created branch main in selfhostedops/selfhostedops-stack 2026-08-16 18:25:20 +00:00
opsadmin pushed to main at selfhostedops/selfhostedops-stack 2026-08-16 18:25:20 +00:00
06f8e8812e Initial stack: Caddy, Forgejo, Outline, Vaultwarden, Uptime Kuma, n8n
opsadmin created repository selfhostedops/selfhostedops-stack 2026-08-16 18:25:11 +00:00