Fredric News

Tag: Hardening

  • OPNsense Dynamic DNS (DDNS) with Cloudflare

    💡 OPNsense Dynamic DNS (DDNS) with Cloudflare — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for OPNsense Dynamic DNS (DDNS) with Cloudflare.

  • Legacy Vault Helm Deployment on Kubernetes

    💡 Legacy Vault Helm Deployment on Kubernetes — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for Legacy Vault Helm Deployment on Kubernetes. 1. vault Modify mdware-helm/scripts/vault/transit-vault-deploy.sh, service-vault-deploy.sh When node select is required shell Copy #nodeSelector 입력이 안 먹혀서 직접 chart에 들어가서 수정해야함 #node label kubectl edit node {{ worker-node }} label:…

  • OpenWrt Router OS Setup: Network Interfaces

    💡 OpenWrt Router OS Setup: Network Interfaces — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for OpenWrt Router OS Setup: Network Interfaces. References and Guidelines (NOTE) OpenWrt: Debian Linux-based wired/wireless router OS that supports advanced features such as VLAN tagging (802.1Q) Find firmware OpenWrt References and Guidelines (NOTE) Realtek series chipsets…

  • Docker Desktop Setup & WSL2 Resource Tuning

    💡 Docker Desktop Setup & WSL2 Resource Tuning — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for Docker Desktop Setup & WSL2 Resource Tuning. References and Guidelines (NOTE) docker desktop for Ubuntu Linux I wanted to use the docker init command, but the command is implemented based on Docker Desktop. In…

  • Linux top Command Sheet: CPU & Memory

    💡 Linux top Command Sheet: CPU & Memory — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for Linux top Command Sheet: CPU & Memory. bash Copy top CPU Usage us (user): Time used by processes running in user space. sy (system): Time used by processes running in kernel space. ni (nice):…

  • Kube-apiserver Hardening: RBAC & Admission

    💡 Kube-apiserver Hardening: RBAC & Admission — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for Kube-apiserver Hardening: RBAC & Admission. Common Log analysis to resolve Manifests errors bash Copy # 컨테이너 재시작여부 확인 crictl ps # Manifest 문법오류 탐색 (컨테이너가 안뜨므로 치명적임) journalctl -u kubelet | grep manifest # 종료된 컨테이너…

  • AppArmor Security Profiles for Kubernetes

    💡 AppArmor Security Profiles for Kubernetes — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for AppArmor Security Profiles for Kubernetes. 📑 Table of Contents Understanding AppArmor behavior Why AppArmor? (DAC vs MAC) AppArmor’s core mode and profile controls AppArmor integration in Kubernetes (K8s) environments Key summary References Summary of Kubernetes usage…

  • OPNsense Firewall Archi: Packet Filter & IDS

    💡 OPNsense Firewall Archi: Packet Filter & IDS — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for OPNsense Firewall Archi: Packet Filter & IDS. Installation Management Conceptual Definition IP Band Definition NAT system WireGuard to WAN References and Guidelines (NOTE) $$ \text{Client} \xleftrightarrow{[L3]tunnel/snat} \text{VPN Interface (Original Src)} \xrightarrow{[1]blocked} \text{WAN Interface (Dst)}…

  • HomeLab OPNsense Router & Firewall Setup

    💡 HomeLab OPNsense Router & Firewall Setup — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for HomeLab OPNsense Router & Firewall Setup. Step 0: Preparation Purchase Hardware Download Image 🔗 https://opnsense.org/download/ select amd64 → vga → downalod Create Bootable USB Disk bash Copy brew install balenaetcher –cask Boot BIOS entry: f2,…

  • WireGuard VPN on OPNsense: Server & Peer

    💡 WireGuard VPN on OPNsense: Server & Peer — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for WireGuard VPN on OPNsense: Server & Peer. References and Guidelines (NOTE) System Required: Required to reliably request a VPN instance endpoint from an external network Server in OPNSense Create instance and enable WG Instance…