Writing with my AI co-pilot: how I run a security blog with Hermes, and why disclosure beats co-authorship
How I run this security blog with a local AI co-pilot, and why disclosure beats co-authorship.
Security
CompTIA PenTest+ - The Adversarial Testing Layer: Architecting Offensive Validation
The reconnaissance, exploitation, and reporting layers of professional penetration testing.
ISC2 SSCP - The Implementation Layer: Architecting Security Operations and Control
The hands-on implementation of security controls, access management, and operational resilience.
CompTIA Security+ - The Governance Layer: Architecting Policy, Identity, and Trust
The policy, identity, and governance layers that define the security posture of a modern enterprise.
Infrastructure as Code: Architecting a Hardened Hugo Stack
Building a secure, performant, and automated web stack using Hugo, Nginx, and CrowdSec.
ISC2 CC - The Security Awareness Layer: Architecting the Foundation of Trust
The foundational security principles: Risk, Incident Response, and Access Control.
Securing My Stack with CrowdSec and Nginx Proxy Manager
I secured the web stack with CrowdSec, an open-source, collaborative Intrusion Prevention System (IPS)1. The integration with the existing Docker stack is tight: CrowdSec monitors the proxy logs in real time and blocks malicious traffic before it reaches the applications. Here’s an overview of my updated architecture and how the pieces fit together. My Website Architecture The site is built with Hugo, a fast static site generator. For performance and security, docker-compose splits the stack into distinct layers: ...