IT Security

My Own Little Certificate Authority: AD CS, Auto-Enrollment and Goodbye to “Your Connection Is Not Private”

Illustration of a homelab certificate authority with Windows Server

My Own Little Certificate Authority: AD CS, Auto-Enrollment and Goodbye to “Your Connection Is Not Private”

raphael 29. September 2026

My homelab has three domain controllers, two clients, three iLO management boards and, until last week, exactly...

Day Two Operations: Hardening Three Windows Domain Controllers (and Finding a Clock That Answered to Nobody)

Illustration of hardening Windows Server domain controllers

Day Two Operations: Hardening Three Windows Domain Controllers (and Finding a Clock That Answered to Nobody)

raphael 28. September 2026

In the last post three HP boxes became a Windows Server 2025 domain: AD, DNS, DHCP failover,...

151 Pass, 113 Fail: My Linux Box Gets a Reality Check

Illustration of CIS Benchmark results, part two

151 Pass, 113 Fail: My Linux Box Gets a Reality Check

raphael 20. August 2026

Same evening, different layer of the stack. 🥱➡️🤓 After the kube-bench post I got a very reasonable...

Back From Sweden, Straight Into a CIS Benchmark Rabbit Hole

Illustration of a CIS Benchmark security audit, part one

Back From Sweden, Straight Into a CIS Benchmark Rabbit Hole

raphael 20. August 2026

🇸🇪 I’m back from Sweden. Tan: nonexistent (it’s Sweden). Mosquito bite count: illegal. Motivation to touch my...

Teaching My Blog to Sniff Its Own Uploads: ClamAV on WordPress (and Proving It Actually Barks)

Illustration of ClamAV scanning WordPress uploads

Teaching My Blog to Sniff Its Own Uploads: ClamAV on WordPress (and Proving It Actually Barks)

raphael 28. July 2026

A WordPress uploads folder is supposed to hold your holiday photos and the occasional PDF. It is...

Some text and images on this site are AI-assisted or AI-generated. Details