-
Docker Networking Part 2 – what happens in docker stays in docker.
After having created my docker DMZ in part 1, I realized that if I just connected the networks of the docker-containers I wanted to access from the internet to the firewall container, I could avoid exposing their ports to the underlying machine altogether, thereby reducing the number of open ports on the server itself. I…
-
A virtualized DMZ with docker
Being somewhat of a minimalist, having only one server at home, but still trying to make a good, secure and stable infrastructure, it bothered me to forward network traffic directly to my server. Granted, most of the services exposed was running in docker, but it still was forwarding it directly into my «red zone». A…
-
Changing partitions and zfs disklayout without downtime?
When setting up my SSD zpool – which I basically wanted because I wanted *no* constant disk-access to my disk-based zpool, I was lazy. Laziness almost never pays off. Before starting with ZFS, I had almost my full SSD as an LVM physical volume (except the bootdisk). Then, I added my external disk cabinet and…
-
Keeper Password Manager – a small technical review
Last year, the company I work for signed up for Keeper Enterprise. A good password manager was something I’d been vouching for at work for a while, for a few reasons: Security policies often dictate practises that simply isn’t feasible to follow. Even though sharing passwords is discouraged, sometimes it just can’t be helped. There…
-
Moro med backup!
I noen år nå har jeg kjørt duplicity backup både på servesystemer og klienter. Dette har virket bra, men har det samme problemet som all annen inkrementell filbackup: Før eller siden må du ta ny full backup for at det ikke skal bli for tungt å kjøre restore. Med mye data trenger du da relativt…