Security related posts
Those who want to test APIs usually need passwords or tokens, which almost all API test clients keep plaintext. With Hashicorp Vault as a secret manager, however, you have a way to remedy this deficiency as well.
Two part series: Password security with Hashicorp Vault and Ansible for Docker
In the first part I showed how to set up Hashicorp. Now the whole thing will be automated.
Hashicorp Vault is an incredible tool when it comes to keeping passwords safe on the server. Using Authelia as an example, I will show how to keep Docker passwords secure on the server even without Docker swarm.
Relatively unknown are Nextcloud's audit logs. If you enable them, the admin has the possibility to check his instance for suspicious activities.
Paperless-ngx does not support a second factor by default. However, with Authelia and a NGINX reverse proxy, this can be retrofitted.
OPNsense version of NGINX supports "auth_request" only very limited. 2FA apps like Authelia as authentication provider are not possible behind OPNsense's NGINX version. Nevertheless, you do not have to do without 2FA completely.