Category: Security & Edge
-
Logto OIDC: Identity Infrastructure
Secure self-hosted deployment of Logto OIDC identity provider in a Debian LXC, decoupled with a remote PostgreSQL cluster to manage SSO and centralized multi-tenant SAML authentications.
-
PostgreSQL: Enterprise Relational Database
High-performance enterprise relational database management utilizing PostgreSQL in a dedicated Proxmox LXC, featuring secure non-interactive credential hardening and restricted host-based network routing.
-
RustFS: S3-Compatible Object Storage
Deployment and policy hardening of RustFS, a modern S3-compatible object storage server, featuring custom AWS IAM bucket policy setups for unprivileged clients.
-
SFTP Storage & FileBrowser
A secure, lightweight storage node utilizing chrooted SFTP and FileBrowser, designed to act as an S3-alternative for application asset management without the resource overhead.
-
Microsoft Exchange: Enterprise Strategy
Strategic migration to Microsoft Exchange to ensure enterprise-grade deliverability and security, moving away from vulnerable shared hosting and high-overhead workspace solutions.
-
Cloudflare: Strategic DNS Infrastructure
Strategic DNS infrastructure design utilizing Cloudflare’s global network to provide performant, API-driven record management while maintaining end-to-end encryption.
-
Vaultwarden: Secure Secrets Management
Secure credential management utilizing Vaultwarden and n8n for automated lifecycle synchronization and real-time security event monitoring via Slack.
-
Nginx Edge Proxy & Security Layer
Edge proxy configuration securing internal infrastructure with SSL termination, Basic Authentication, and optimized WebSocket handling for remote console access.