Security

MagicMirror² Wall Dashboard, Now With Home Lab Pages

A MagicMirror² dashboard with weather, Home Assistant, Spotify, news, stocks and webcams, now rotating through two read-only Grafana pages for the home lab. Covers the hardware history, the kiosk setup and how Grafana is embedded safely.

Diagram of SSH and HTTP flows between the trusted workstation, DMZ web server, internal Git server and comments bridge

Locking Down SSH in a DMZ for Hugo Deployments

Hardening SSH to a DMZ web server revealed that my Hugo deploys also needed outbound Git access. Later I removed the inbound deploy trigger entirely, and that turned out to be the best hardening step.

Diagram of mail clients connecting to OpenLDAP over LDAPS, trusted by a private root CA

Building a Private LDAP Address Book with OpenLDAP

A private OpenLDAP address book secured with LDAPS, providing centralised contact lookup for Mutt and Thunderbird on a LAN.