N

nftables

Ansible that turns a stock Debian/Ubuntu VPS into an Arch Linux (optional CachyOS) desktop: kexec + pacstrap install, LUKS2 root unlocked over WireGuard from the initrd, NoMachine/xrdp reachable only via the tunnel.

Scan-to-SharePoint for offices that still scan at the copier. An on-prem box publishes an SMB share, watches what the copier drops in it, and uploads to a SharePoint library through Microsoft Graph.

Ansible hardening for Enterprise Linux hosts: SSH/2FA, auditd, AIDE, CrowdSec, fail2ban, scanners, reporting, and rollback safety.

Ansible baseline for Debian 13 hosts: users, packages, sysctl, auto-updates, and a single-owner nftables firewall apps extend

Foreman 3.19 + Katello 4.21 on AlmaLinux 9 via Ansible - content management (repo sync, content views, lifecycle envs), Proxmox-provisioned and hardened.

Ansible baseline for Enterprise Linux hosts: users, packages, dotfiles, sysctl, dnf-automatic, and nftables.

Ansible automation to deploy an apt-cacher-ng caching proxy in a Debian Proxmox LXC container.

Hardened HAProxy 3.0 reverse-proxy edge for Debian 13 DMZ — ACME/Cloudflare DNS-01, Tailscale mgmt, nftables; adopts the acidnetworks base/hardening collections.

Ansible automation for a Samba Active Directory domain controller and domain-joined file/print server on Debian 13, with optional Proxmox VE provisioning.