IT Security

The Ansible Tour, Part 5: IT Security – Firewall, SSH, fail2ban, Hardening, SELinux and Detection

series

The Ansible Tour, Part 5: IT Security – Firewall, SSH, fail2ban, Hardening, SELinux and Detection

raphael 19. October 2026

Part 5 of the Ansible Tour: every security role in one place – how each layer is...

A Mail for Every SSH Login: A Two-Minute Tripwire with wtmp and systemd

login_alert

A Mail for Every SSH Login: A Two-Minute Tripwire with wtmp and systemd

raphael 14. October 2026

A mail for every interactive SSH login within two minutes: a systemd timer reading wtmp, quiet for...

Defense in Depth: Nine Layers Between the Internet and My Servers

hardening

Defense in Depth: Nine Layers Between the Internet and My Servers

raphael 13. October 2026

Nine layers between the internet and my servers, an attacker's view of them, and what I changed...

A+ on SSL Labs: What My Blog’s TLS Actually Speaks (and Where the Ansible Code Lives)

ssl

A+ on SSL Labs: What My Blog’s TLS Actually Speaks (and Where the Ansible Code Lives)

raphael 6. October 2026

☝️ A quick word for everyone who just wanted to read a blog post: TLS is the...

Germany Only: Geo-Fencing SSH with nftables and Ansible (and What My Logs Said About Bots and Readers)

Illustration of SSH access limited to Germany by a geo-fencing firewall

Germany Only: Geo-Fencing SSH with nftables and Ansible (and What My Logs Said About Bots and Readers)

raphael 1. October 2026

SSH on a non-standard port, key-only, fail2ban - and still 16 login attempts per hour from all...

Some text and images on this site are AI-assisted or AI-generated. Details