CompTIA PenTest+ - The Adversarial Testing Layer: Architecting Offensive Validation
A deep dive into the reconnaissance, exploitation, and reporting layers of professional penetration testing.
Security
ISC2 SSCP - The Implementation Layer: Architecting Security Operations and Control
A deep dive into the hands-on implementation of security controls, access management, and operational resilience.
CompTIA Security+ - The Governance Layer: Architecting Policy, Identity, and Trust
A deep dive into the policy, identity, and governance layers that define the security posture of a modern enterprise.
Infrastructure as Code: Architecting a Hardened Hugo Stack
A deep dive into building a secure, performant, and automated web stack using Hugo, Nginx, and CrowdSec.
ISC2 CC - The Security Awareness Layer: Architecting the Foundation of Trust
A deep dive into the foundational security principles: Risk, Incident Response, and Access Control.
Securing My Stack with CrowdSec and Nginx Proxy Manager
Today, I’ve taken a significant step forward in securing my web infrastructure by implementing CrowdSec, an open-source, collaborative Intrusion Prevention System (IPS). I integrated it tightly with my existing Docker stack to actively monitor and block malicious traffic before it ever reaches my applications. Here’s an overview of my updated architecture and how the pieces fit together. My Website Architecture My website is built using Hugo, a blazing-fast static site generator. To optimize performance and security, I’ve structured my stack using docker-compose into several distinct layers: ...