Tag: ansible

Gitea – Ansible Installer Role

~ Tom's IT Cafe ~ Leave a comment

Automation and configuration management are not just about comfort.
They provide security, auditability and operational freedom.

For this reason Tom’s IT Cafe provides an Ansible role that:

  1. Downloads and installs the Gitea Linux binary
  2. Sets up a system service (as a non-root user)
  3. Sets up PostgreSQL (or SQLite for lightweight setups)
  4. Optionally sets up a reverse proxy with Certbot or self-signed keys
  5. Highly configurable through variables

The role focuses on a small, auditable code base with strong security.

Continue reading “Gitea – Ansible Installer Role” →

Protecting The Wire – Semaphore Behind SSL Proxy

~ Tom's IT Cafe ~ Leave a comment

Mission Brief

Plain text communication is loud. It’s bleeding data.
Prying eyes can see every bit in the wire.

You have to isolate the backend – the Semaphore UI and MySQL containers stay locked down. Unreachable for the external work.
Open a tiny hole on the stronghold to the world – the frontend is an NginX SSL proxy.

You use:

  • Podman pod for network and container isolation
  • The Semaphore and MySQL containers without exposing them to the world
  • An NginX proxy container with SSL
Continue reading “Protecting The Wire – Semaphore Behind SSL Proxy” →