Gitea – Ansible Installer Role

Automation and configuration management are not just about comfort.They provide security, auditability and operational freedom. For this reason Tom’s IT Cafe provides an Ansible role that: The role focuses on a small, auditable code base with strong security.

Continue reading →

How to Run a WordPress Site on Both .onion and a Public Domain (Dark Net & Clear Net)

Want your blog reachable by anyone – both Tor users and regular browsers – without running two separate installations?The trick is one code-base, two reverse proxies, and a single database. Below is a quick 400-500 word guide for Ubuntu/Debian that shows the minimal steps.

Continue reading →

Protecting The Wire – Semaphore Behind SSL Proxy

Mission Brief Plain text communication is loud. It’s bleeding data.Prying eyes can see every bit in the wire. You have to isolate the backend – the Semaphore UI and MySQL containers stay locked down. Unreachable for the external work.Open a tiny hole on the stronghold to the world – the frontend is an NginX SSL…

Continue reading →

🧊 DeadSwitch Technical Dispatch // Fortify the Flow: Proxy Frontlines & The Truth in Certificates

“In shadows, the strongest signal is trust.” You don’t expose your secrets to the streets. You don’t hang your backend out for the world to poke. You proxy.

Continue reading →

How To Set Up Vhosts In The Nginx Webserver?

NGINX, pronounced “engine-ex,” is an open-source web server software used for various purposes, including web serving, reverse proxying, caching, load balancing, and media streaming. It was initially designed to handle large numbers of concurrent connections, making it suitable for high-performance web applications.

Continue reading →

How to configure an SSL reverse proxy with Nginx?

A reverse proxy is a server that sits in front of web servers and forwards client requests to those web servers. It acts as an intermediary, intercepting and inspecting incoming client requests before forwarding them to the web server. Reverse proxies can provide additional levels of abstraction, control, security, and performance optimization. They are commonly used for load balancing, web…

Continue reading →

How To Install Vaultwarden Password Manager In Podman?

Vaultwarden is an open-source password manager that is a fork of Bitwarden. It is written in Rust and is designed to be lightweight, easy to set up, and run on various platforms. Vaultwarden is an alternative backend for the password manager Bitwarden, and while it does not implement the same feature set as the Bitwarden…

Continue reading →

Installing web and database servers on Debian Bullseye with Ansible playbooks

Installing web servers, database services and such tools are tedious task especially when we have to repeat it over and over again, for example in a test environment. Here are some useful playbooks that we can use to simplify the process.

Continue reading →