Networking

3-Node Proxmox Cluster on EliteDesk Minis

A 3-node Proxmox cluster on EliteDesk Mini PCs: shared iSCSI storage on a dedicated storage VLAN, HA for the services that matter, and backups that no longer depend on a single box.

Diagram of SSH and HTTP flows between the trusted workstation, DMZ web server, internal Git server and comments bridge

Locking Down SSH in a DMZ for Hugo Deployments

Hardening SSH to a DMZ web server revealed that my Hugo deploys also needed outbound Git access. Later I removed the inbound deploy trigger entirely, and that turned out to be the best hardening step.