Security and Compliance

RBAC, golden image hardening, security baselines, iptables, SSL, and web server compliance controls.

6 notes in this category.

3 Aug 2026Security and Compliance9 min read

RBAC patterns for production cloud environments

Role design, automation identities, access review, and break-glass controls for auditable production access across shared cloud estates.

27 Jul 2026Security and Compliance8 min read

Golden Image Architecture for Linux Baselines

An operating model for Packer golden images: bake vs configure boundaries, promotion pipelines, launch-template enforcement, and automatable hardening checks across AWS, Azure, and GCP.

26 Oct 2021Security and Compliance3 min read

Block outgoing URL calls with iptables on Linux

Use iptables string matching to block specific outbound HTTP paths, understand HTTPS limits, and choose safer egress controls when needed.

1 Oct 2019Security and Compliance3 min read

Serve Let's Encrypt ACME challenges on Nginx

Fix Nginx 404 errors on .well-known/acme-challenge during Let's Encrypt HTTP-01 validation with webroot config and renewal checks.

11 Sept 2019Security and Compliance5 min read

Hardening WordPress on LAMP (Apache)

A layered WordPress hardening checklist for Apache on LAMP: SSH, .htaccess, wp-config, uploads, and plugin controls, with Nginx equivalents where useful.

23 Aug 2019Security and Compliance11 min read

Hardened WordPress on Ubuntu 18.04 LEMP

Deploy a production-ready WordPress LEMP stack on Ubuntu 18.04 with Nginx, MariaDB, PHP, TLS via Let's Encrypt, and baseline hardening controls.

I take on a small number of engagements at a time. Tell me what you are working on and I will tell you honestly if I am the right fit.

Start a conversation