Sandbox Systemd Units
What many do not know is that SystemD offers the possibility to restrict services and very easily displays the exposure level.
Nextcloud's high performance backend behind a Sophos reverse proxy
Nextcloud's High Performance Backend accelerates messaging on larger systems. Connected clients no longer need to poll to see changes to files. Instead, notifications actively inform applications of file changes.
Accelerate SSH connections in ansible
Unfortunately, you keep coming across the nicely-intentioned but far too complicated tip when passing SSH across multiple machines with ansible:ansible_ssh_common_args and ProxyCommand.
Send encrypted logs to Graylog (Bonus: Docker container)
Docker allows logs to be sent unencrypted to a remote log system. Encryption plays a minor role on the intranet, but what if you want to send logs via the web?
Set up a simple SSH bruteforce check in Graylog
There is no security without proper log monitoring, but nobody has time to check all logs all the time. Graylog automates that.
Push icinga2 metrics to Graphite
icinga2 is a monitoring environment that does not inherently process metrics in time series.
