Domus Digitalis

Components

Domus Digitalis (Hub) Work Chronicles

Infrastructure Ops ISE Operations ISE Linux 802.1X ISE Windows 802.1X Identity & SSO

Linux Operations Windows Operations Python Operations netapi CLI Automation Ops

Secrets Infrastructure SIEM Operations Observability

Runbooks

PKI & Certificates PKI Strategy DOMUS PKI Ceremony Vault PKI Cert Issuance Vault PKI Quick Reference Vault PKI Verification Vault Cert Deployment ISE Certificate Troubleshooting BYOD Certificate Management

Infrastructure VyOS HA Deployment k3s Kubernetes Windows Server 2025 Core DC ISE 3.4 Deployment 802.1X Troubleshooting

Backup & Recovery Backup Strategy (3-2-1) Backup All Infrastructure Disaster Recovery

Documentation Antora UI Architecture Cloudflare Access + Antora

Tools

Core Tools dsec - Domain Secrets netapi - Network Automation

netapi Commands ISE Commands WLC Commands Cloudflare Commands Vault Commands Keycloak Commands KVM Commands Synology Commands IOS Commands Wazuh Commands

Data Tools DataConnect Queries

Linux

Arch Linux RHEL/Rocky/Alma Debian/Ubuntu

GitHub

Infrastructure Operations

- Overview
- Validated Designs
  - Overview
  - Network Infrastructure
  - Identity & Access
  - PKI & Certificates
  - Secrets Management
  - Virtualization
  - Kubernetes
  - Observability
  - Storage & Backup
  - Automation
  - Documentation
  - CLI Tooling
  - Security
  - VD Template
- Infrastructure
- Documentation Platform
- Services
- Roadmaps
  - Critical
    - Disaster Recovery (P0)
    - Vault Enterprise Hardening (P1)
  - Security
    - Password Consolidation (gopass v3)
    - ISE 3.4 Cert API Auth
  - Platform
  - Hardware
    - Network Visibility TAP
  - Learning
    - Python Crash Course
    - Public Domain Portfolio
  - Templates
    - Roadmap Template
- Projects
  - Project Inventory
  - Migrations
    - VyOS Migration (pfSense → VyOS)
  - Platform Infrastructure
  - CLI Tools
    - netapi CLI
    - dsec Secrets
    - domus-cli Orchestration
    - dotfiles-optimus
  - Documentation Systems
    - domus-docs System
    - architectus.dev
    - Architectus Documentation Site
  - Deployment Patterns
    - Linux Research Workstation
  - Completed
    - DC & Vault PKI Migration
    - dsec Vault Migration
  - Reference
    - Linux Ops Reference
  - Templates
    - Project Template
- Runbooks
  - Active Directory
  - Vault & PKI
  - ISE & 802.1X
  - Firewall & WAN
  - Wireless
    - WLC HA SSO (9800-CL)
    - WLC EAP-TLS VLAN/DACL
  - DNS & Network
  - Kubernetes (k3s)
  - Backup & DR
  - Identity & SSH
  - SIEM & Monitoring
    - Wazuh Integrations
    - Wazuh Dashboard Export
  - DevOps & IaC
  - Templates
    - Runbook Template
- Recovery
- Incidents
- Sessions
  - Overview & Workflow
  - Session Template
- Tools
- Reference
- Hardware
- Reviews
  - Review Template
- Root Cause Analysis
- Change Requests
- Changelog

Infrastructure Operations

Automation Operations
Domus Digitalis
DOMUS ISE Linux
Identity & SSO
Infrastructure Operations
ISE Operations
ISE Windows 802.1X
Linux Operations
netapi - Network Automation Library
Observability Operations
Python Operations
Secrets Infrastructure
SIEM Operations
Windows Operations
Work Chronicles

Infrastructure Operations
Validated Designs
Security
Linux Hardening

Linux Hardening

Status: Draft - Pending deployment and validation

Overview

SSH hardening, firewalld, and SELinux/AppArmor

Architecture

Prerequisites

Configuration

Validation

Troubleshooting

References

Dotfiles Vault Hardening

This page was built using the Antora default UI.

The source code for this UI is licensed under the terms of the MPL-2.0 license.