Lutz FInsterle

lutz pushed to main at lutz/OpenBAO

2026-08-22 09:59:53 +02:00

055676c186 RESTORE.md: document the procedure a real restore drill exposed

lutz pushed to main at lutz/OpenBAO

2026-08-22 09:50:33 +02:00

64b20a54dc Ship an encrypted DR bundle offsite to the NAS daily

lutz pushed to main at lutz/OpenBAO

2026-08-22 09:34:04 +02:00

471692c283 Automate demo-app AppRole SecretID rotation on a weekly timer

ee0b8c818f Alert by email when an OpenBAO maintenance unit fails

c5ff1a3fca Upgrade OpenBAO 2.5.5 -> 2.6.2

123e65ee46 Renew root-owned /etc infra tokens too (backups were dead 24 days)

Compare 4 commits »

lutz pushed to main at lutz/Traefik

2026-08-09 19:57:48 +02:00

46dae1acfa README: MikroTik-Bouncer verliert Address-List-Eintraege (Workaround dokumentiert)

lutz pushed to main at lutz/Traefik

2026-08-09 17:11:53 +02:00

26b810509f README: Stack dokumentiert, Verweis auf TraefikConfig-Repo

ecca92f3ed crowdsec: version-control Synology syslog pipeline and ban profiles

Compare 2 commits »

lutz created repository lutz/Pangolin

2026-08-01 11:32:14 +02:00

lutz pushed to main at lutz/OpenBAO

2026-08-01 10:20:13 +02:00

f2919cf50a Add daily app-token renewal (script + systemd timer)

lutz pushed to main at lutz/OpenBAO

2026-08-01 10:08:26 +02:00

63f864b68b gitignore: cover *-credentials.txt (operator login creds)

f12034bab9 apply-policies: fix header always showing [dry-run]

700e4ce15a Add smtp-healthcheck-ro policy (scoped read for ClaudeAdmin SMTP creds)

Compare 3 commits »

lutz pushed to main at lutz/OpenBAO

2026-07-19 10:53:35 +02:00

af31208251 Add prepare-host.sh: one-command SSH host onboarding

lutz pushed to main at lutz/OpenBAO

2026-06-30 21:05:40 +02:00

5e5e7f779f Add governance blueprint: policy-as-code, operator/auditor, identity setup

lutz pushed to main at lutz/OpenBAO

2026-06-28 20:28:35 +02:00

21929fa899 Add personal-backup playground (KV + transit) and AppRole demo

lutz pushed to main at lutz/Traefik

2026-06-28 20:03:15 +02:00

be65ccd70c gitignore: also exclude smtp.pw temp secret

lutz pushed to main at lutz/Traefik

2026-06-28 16:18:49 +02:00

34d11c0e29 Add CrowdSec MikroTik bouncer (edge firewall drop)

lutz pushed to main at lutz/OpenBAO

2026-06-28 14:55:04 +02:00

5a111b7a20 Add SSH CA integration: signed user + host certs, ssh-login helper

lutz pushed to main at lutz/OpenBAO

2026-06-28 14:37:40 +02:00

37a97cb0f4 Add OpenBAO-backed git credential helper for gitea pushes

lutz pushed to main at lutz/OpenBAO

2026-06-28 14:36:49 +02:00

14f46e1082 Add unsealer, internal CA/TLS, auto-unseal, and automated cert+backup

lutz created branch main in lutz/OpenBAO

2026-06-28 14:21:28 +02:00

lutz pushed to main at lutz/OpenBAO

2026-06-28 14:21:28 +02:00

95e1b676e2 Initial Commit

lutz created repository lutz/OpenBAO

2026-06-28 14:21:20 +02:00

lutz created branch main in lutz/Traefik

2026-06-28 14:20:59 +02:00