Article tag

Cloud Security

Cloud identity, least privilege, infrastructure protection, and auditing

Brushed metal security key entering a white server vault surrounded by green firewall rings

Harden SSH on Ubuntu with Keys, UFW, and Fail2Ban

Lock down Ubuntu SSH with Ed25519 keys, UFW, and Fail2Ban while avoiding remote lockouts, with verification and recovery steps.

Sep 2, 20267 min read

Private application server behind a firewall connected through an encrypted outbound tunnel to distributed edge nodes

Cloud & Infrastructure

Cloudflare Tunnel on Ubuntu: Publish Apps Safely

Publish a self-hosted Ubuntu application through Cloudflare Tunnel with no inbound ports, explicit ingress rules, service management, access control, and monitoring.

Aug 29, 20267 min read

Secure software pipeline exchanging a short-lived identity token for cloud deployment access

Cloud & Infrastructure

Deploy to AWS with GitHub Actions OIDC, Not Keys

Deploy to AWS from GitHub Actions using OIDC and short-lived credentials, with a narrowly scoped trust policy, least privilege, protected environments, and safe verification.

Aug 26, 20266 min read