Security and Compliance

RBAC, golden image hardening, security baselines, iptables, SSL, and web server compliance controls.

6 notes in this category.

3 Aug 2026Security and Compliance8 min read

RBAC in production cloud estates

Role design, OIDC for pipelines, SSO for people, access reviews, and time-boxed break-glass: production access that stays auditable across cloud accounts.

27 Jul 2026Security and Compliance8 min read

Golden image architecture for Linux baselines

Packer golden images: bake vs configure boundaries, promotion pipelines, launch-template enforcement, and baseline hardening checks across AWS, Azure, and GCP.

26 Oct 2021Security and Compliance3 min read

Block outgoing URL calls with iptables on Linux

Use iptables string matching to block specific outbound HTTP paths, understand HTTPS limits, and choose safer egress controls when needed.

1 Oct 2019Security and Compliance3 min read

Serve Let's Encrypt ACME challenges on Nginx

Fix Nginx 404 errors on .well-known/acme-challenge during Let's Encrypt HTTP-01 validation with webroot config and renewal checks.

11 Sept 2019Security and Compliance4 min read

Hardening WordPress on LAMP (Apache)

A layered WordPress hardening checklist for Apache on LAMP: SSH, .htaccess, wp-config, uploads, and plugin controls, with Nginx equivalents where useful.

23 Aug 2019Security and Compliance12 min read

Hardened WordPress on Ubuntu 18.04 LEMP

Deploy a production-ready WordPress LEMP stack on Ubuntu 18.04 with Nginx, MariaDB, PHP, TLS via Let's Encrypt, and baseline hardening controls.

Send a note to start a conversation, or reach out directly by email.

Contact