A

ansible

Ansible: self-hosted Ente Photos (E2E) on Debian 13 - rootless Podman/Quadlet app tier, MinIO storage, gVisor + Coraza WAF edge, adopts the acidnetworks base/hardening collections.

Ansible: self-hosted Immich (photos) on Debian 13 - rootless Podman/Quadlet app tier, gVisor + Coraza WAF Caddy edge, adopts the acidnetworks base/hardening collections.

Hardened HAProxy 3.0 reverse-proxy edge for Debian 13 DMZ — ACME/Cloudflare DNS-01, Tailscale mgmt, nftables; adopts the acidnetworks base/hardening collections.

Ansible automation for a Samba Active Directory domain controller and domain-joined file/print server on Debian 13, with optional Proxmox VE provisioning.