D

debian-13

Ansible automation to deploy an apt-cacher-ng caching proxy in a Debian Proxmox LXC container.

Ansible hardening for Debian 13 hosts: SSH, CrowdSec/fail2ban, auditd/AIDE, sysctl, and PAM 2FA-- lockout-safe, runs after ansible-base-debian

Ansible automation to deploy Nextcloud on Debian 13/Proxmox — rootless Podman + Quadlet app tier behind a rootful gVisor-sandboxed Caddy + Coraza WAF edge, mTLS between tiers

Ansible: self-hosted Seafile (Pro/CE) on Debian 13 - rootless Podman/Quadlet stack, Caddy TLS proxy, optional LDAP/AD, adopts the acidnetworks base/hardening collections.

Ansible: self-hosted Ente Photos (E2E) on Debian 13 - rootless Podman/Quadlet app tier, MinIO storage, gVisor + Coraza WAF edge, adopts the acidnetworks base/hardening collections.

Ansible: self-hosted Immich (photos) on Debian 13 - rootless Podman/Quadlet app tier, gVisor + Coraza WAF Caddy edge, adopts the acidnetworks base/hardening collections.

Ansible baseline for Debian 13 hosts: users, packages, sysctl, auto-updates, and a single-owner nftables firewall apps extend

Hardened HAProxy 3.0 reverse-proxy edge for Debian 13 DMZ — ACME/Cloudflare DNS-01, Tailscale mgmt, nftables; adopts the acidnetworks base/hardening collections.

Ansible automation for a Samba Active Directory domain controller and domain-joined file/print server on Debian 13, with optional Proxmox VE provisioning.