← Feed

Posts

• Post #4392547

  With this structure, the variables in “host_vars” and “group_vars” are not loaded. This is because the inventory file is not in the root directory. Is there a way to have the inventory file in an inventory folder? #ansible #sysadmin #devops #gitops #automation

• Post #4392546

  Please give me a reason, why #ec2 on #aws has less than 5GB tmp and 0 SWAP space? Sooner or later, you'll run into problems😞 . #sysadmin #linux #cloud

• Post #4392545

  The most interesting supply chain attack I've ever seen: #trivy The attack is really bizarre. I learned a lot about GitHub Actions and how the attack was performed. - https://www.aquasec.com/blog/trivy-supply-chain-attack-what-you-need-to-know/ - https://www.stepsecurity.io/blog/hackerbot-claw-github-actions-exploitation - https://ramimac.me/trivy-teampcp/#timeline - https://snyk.io/articles/trivy-github-actions-supply-chain-compromise/ #cybersecurity #supplychain #github #glassworm #...

• Post #4392544

  Decided to switch from VMware Workstation 17 to QEMU + Virtual Machine Manager today and spent two hours debugging networking. Turned out the VM couldn't reach the internet and my host couldn't ping the VM due to two conflicting routes for the same subnet. Removed the old VM network route and everything started working - finally 🥳 . #networking #sysadmin #dumb #qemu #vmware

• Post #4392543

  @nwcs That does sound interesting. Especially for those who are currently in the process of moving away from VMware Workstation and don't want to have to rebuild and reconfigure all their VMs. Migrating from VMware to Qemu gives me the chance to sort through my roughly 40 VMs and figure out which ones I actually still need (I'll probably delete 30 of them). And I can quickly rebuild the rest using backups and Ansible and get them back up and running.

• Post #4392542

  After quite some time, I finally have all the pieces in place. Over the last 30 minutes, I’ve set up one of my servers from scratch. Here are some key changes: - Reverse Proxy: Nginx with Modsecurity (WAF) - Container Isolation: Every container runs in a seperate linux user - Podman Quadlet: I rewrote all my compose stacks into quadlet files - now all containers are starting probably after reboot 🥳 - Grafana: Grafana's configuration is no managed by Opentofu which provitions at the mome...

• Post #4392541

  Now I get notified when my certificates are expiring before everything breaks. #monitoring #observability #certificates #grafana #selfhosting #sysadmin

• Post #4392540

  Does anyone know if there's an equivalent to "GitLab Components" in Forgejo? #forgejo #Gitlab #CICD #Devops #Devsecops

• Post #4392539

  I’ve been running honeypots on the internet for about four months. I’ve looked in detail at the mdrfckr botnet (Outlaw) and written a blog post about it. https://nheinz.dev/blog/2026/06/mdrfckr---a-almost-decade-old-botnet/ #honeypot #botnet #cybersecurity #threathunting #threatintel

• Post #4392538

  Has anyone tested Coraza as a WAF in Kubernetes? I switched to the traefik-modsecurity-plugin because roughly 50–75% of all HTTP/2 traffic was returning HTTP 500. #Kubernetes #k8s #k3s #traefik #waf #coraza #modsecurity

• Post #4072180

  Since March 2026, I have been running honeypots on the internet to collect data and analyze attack patterns. The amount of data stored in the log database has steadily increased over the past few months and has now reached 70 GB of raw logs. I may need to consider a better archiving strategy, especially since I am thinking about adding a T-Pot instance, which would significantly increase the load on the current database setup. #honeypot #postgresql #sysadmin #cybersecurity #blueteam

• Post #3606335

  What are you using as a Web Application Firewall in Kubernetes Environments with a traefik ingress controller? #kubernetes #traefik #selfhost #homelab #waf #webapplicationfirewall