Post #4199821

@IPngNetworks@ublog.tech Amazing work! I have a very similar setup that’s been serving me well for several years now with a few different architectural decisions but equally cool. I like how you created an ACL CLI utility, I used git and PRs. I loved the pf ruleset syntax too! I went for the “Cloud Native” YAML :) For issuance I’m using an ACME CA: https://blog.daknob.net/acme-end-user-client-certificates/ so I can have short-lived certs, but that’s probably overkill. I’m also tying them to hardware such as YubiKeys or FaceID / TouchID.