selfhostedops/selfhostedops-stack
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Commit graph

  • 55b2fe7646 Episode 17: updates one service at a time, a health check that asks real questions, every tag pinned main Maximilian Grimm 2026-10-08 22:04:29 +02:00
  • 1655d04d7d Episode 16: Kuma alerts sorted by rules, a local agent and a script Maximilian Grimm 2026-09-29 22:14:50 +02:00
  • 54ab43dac7 Episode 15: offboarding waits out the Vaultwarden admin rate limit, fail2ban exception only on the provider host Maximilian Grimm 2026-09-23 12:08:08 +02:00
  • 12542ecb19 Episode 15: Pocket ID as identity provider, tinyauth gate, offboarding script Maximilian Grimm 2026-09-23 11:52:17 +02:00
  • 3edef38ba3 Episode 14: an agent reads the WAF blocks, a script beats it, a human merges Maximilian Grimm 2026-09-19 12:56:39 +02:00
  • 696f3e311d Episode 13: settled RAM figure for the tuned CRS Maximilian Grimm 2026-09-17 11:17:54 +02:00
  • 22300d7a28 Episode 13: correct the CRS exclusion mechanism (ruleRemoveById, not ruleEngine) Maximilian Grimm 2026-09-16 21:06:32 +02:00
  • 26a7da0495 Episode 13: tune the OWASP CRS with per-route exclusions Maximilian Grimm 2026-09-16 20:46:16 +02:00
  • 88670f028f Episode 12/13: CrowdSec next to fail2ban, and an AppSec WAF in Caddy Maximilian Grimm 2026-09-16 20:34:18 +02:00
  • d147f21490 Episode 11: a read-only agent that reads the security logs, one agent vs a crew of three Maximilian Grimm 2026-09-13 10:01:13 +02:00
  • bed41cfaf3 Episode 10: hardening - firewall rules Docker cannot bypass, Caddy access log and rate limiting, fail2ban in the right chain Maximilian Grimm 2026-09-11 10:20:56 +02:00
  • ccbddab46c Episode 9: an ops triage agent that proposes but never executes Maximilian Grimm 2026-09-06 13:55:45 +02:00
  • bb2b5b5e22 Episode 8: n8n as the automation hub, with the editor kept off the public internet grimm 2026-09-05 12:54:11 +02:00
  • cf374770c4 Episode 7: nightly restic backup to S3 with consistent dumps, heartbeat, and a restore script for a fresh box Maximilian Grimm 2026-09-02 19:51:35 +02:00
  • 80d5b00b67 Episode 6: Uptime Kuma monitors that mean something, ntfy push server, status page, second eye Maximilian Grimm 2026-09-02 19:51:35 +02:00
  • 8cebf425c6 Episode 5: NetBird mesh - control plane behind Caddy, Forgejo as IdP, services off the public internet Maximilian Grimm 2026-08-28 12:26:31 +02:00
  • d5398caece Episode 4: Vaultwarden single sign-on via Forgejo Maximilian Grimm 2026-08-26 21:54:23 +02:00
  • 0341ae777d Episode 2: Forgejo Actions — runner, Docker sandbox, own registry, locked-down deploy Maximilian Grimm 2026-08-19 22:21:20 +02:00
  • 06f8e8812e Initial stack: Caddy, Forgejo, Outline, Vaultwarden, Uptime Kuma, n8n Maximilian Grimm 2026-08-16 19:29:58 +02:00