Pinned Loading

1. nexus-repository-ol8-stig nexus-repository-ol8-stig Public

   Production-tested DISA STIG hardening guide for Sonatype Nexus Repository 3 on Oracle Linux 8 — tarball install, HTTPS via Jetty, PostgreSQL SSL, custom encryption keys, systemd sandboxing, SELinux…

   PowerShell

2. postgres16-ol8-stig postgres16-ol8-stig Public

   DISA STIG hardened PostgreSQL 16 deployment for Oracle Linux 8. Covers TLS 1.2+, SCRAM-SHA-256, pgaudit, systemd drop-in, LVM storage layout, SELinux, CRL refresh, and rsyslog→SIEM forwarding. Incl…

   PowerShell

3. opnsense-captive-portal opnsense-captive-portal Public

   Production-ready OPNsense 26.x captive portal with self-service registration & password change, DNS statistics, and modern dark UI. Built from real deployment — no comparable guide exists online.

   HTML 1

4. pdns-recursor-ol8-stig pdns-recursor-ol8-stig Public

   Production-tested deployment guide for PowerDNS Recursor on DISA STIG-hardened Oracle Linux 8. Covers DNSSEC full validation, systemd hardening drop-in, EPEL install, and air-gapped deployment vari…

   Lua

5. talos-rpi4-kubernetes-cluster talos-rpi4-kubernetes-cluster Public

   Highly available Kubernetes cluster on Talos Linux using 6 Raspberry Pi 4 boards — 3 control planes + 3 workers with Virtual IP, Cilium CNI, and GatewayAPI. Fully declarative, immutable, no SSH.

6. gre-ipsec-multivendor-lab gre-ipsec-multivendor-lab Public

   Step-by-step GRE over IPsec configuration guide for Cisco IOS, OPNsense, and Palo Alto NGFW — IKEv2, AES-256-GCM, multivendor lab.

   1