Phil Porada

An ACME-based certificate authority, written in Go.

I proposed to my, now, wife via this Perl game.

Shred wrapper

Helps me actually use terraform for multiple environments

A #basic demo for utilizing Vault as a secrets storage mechanism for Kubernetes

Populate an LLM agent with important WebPKI context

My Dotfiles

Pair your phone and stream audio to a Raspberry Pi running Volumio

From the Tom and Phil youtube video!

Mitigates CVE-2016-5195 aka DirtyCOW

No description.

How the fuck does ec2_remote_tags and filtering work?!!?

Installs and configures ConnectWise ScreenConnect.

Vim syntax file for mtail

For Jenny and crew

This is how I like to configure my AWS bastions

Updates a slack channel when deploying a new application version to Elastic BeanStalk on AWS

No description.

Allows an operator to acquire trusted root certificates from the various root programs

Cisco SG200's are trash and only offer a GUI. In the words of Ivan Drago, "I must script you"

Phil's Vim setup

Installs and configures MongoDB

A helm chart for on2itsecurity/etcd-operator. Supports EKS >=1.22.

Installs and configures a public Unifi controller with a Let's Encrypt certificate

Bash shell code

proxy and strip unwanted events from an iCalendar feed

"self-contained and fairly explanatory" agglomeration of HashiVim plugins

OSSEC is an Open Source Host-based Intrusion Detection System that performs log analysis, file integrity checking, policy monitoring, rootkit detection, real-time alerting and active response.

apt method for private S3 buckets

Unbound DNS Server Docker Image

Go client library implementation for ACME v2 (RFC8555)

Enable IPv6 for existing VPCs in your AWS account across each region.

RHEL/CentOS - ELRepo Project

Installs and configures various aspects of SaltStack

Installs and configures yum-cron to keep your Centos servers up to date on an hourly/nightly schedule.

Downloads, verifies, and installs Hashicorp Packer

A script that helps you generate ansible roles faster than light or something like that

Phil's Automated Test Suite

Sharp https://github.com/lovell/sharp running on an Alpine container

Creates a VPC in AWS!

No description.

Lore is a next-generation, open source revision control system

build MySQL binaries for https://github.com/shogo82148/actions-setup-mysql

No description.

Go MySQL Driver is a MySQL driver for Go's (golang) database/sql package

A set of Grafana dashboards and Prometheus alerts for Kubernetes.

A Certificate Transparency log implementation and monitoring API designed for scalability, ease of operation, and reduced cost.

Web service to test DNS resolution against Unbound with config similar to Let's Encrypt

Unbound is a validating, recursive, and caching DNS resolver.

A Rust based DNS client, server, and resolver

Custom Sensu Handlers to support a multi-tenant environment, allowing checks themselves to emit the type of handler behavior they need in the event json

Cloudflare Terraform Provider

VNC viewer to another Qube. Facilitiates screen sharing.

Servo project website

Client for PPP+TLS VPN tunnel services

A simple WebUI with latest events from Falco

Connect Falco to your ecosystem

Website for ISRG's memory safety project, Prossimo.

Let's Encrypt Website and Documentation

No description.

No description.

Account scoped ACME challenges

A collection of liteweight transparency logging tools, compatible with the Sigsum and Omniwitness ecosystems.

Starter repository for creating a new website.

AuthCrunch provides Authentication, Authorization, and Accounting (AAA) Security Functions (SF) in Golang

Redis Go client

A Distributed, Highly Available, Datacenter-Aware Scheduler

Script to check issued certificates by Let's Encrypt on CTL (Certificate Transparency Log) using https://crt.sh

No description.

No description.

Installs and configures Cachet from cachethq.io

Installs rkt https://coreos.com/rkt/

Installs and configures Hashicorp Nomad

EPEL Repository for RHEL distros

No description.

No description.

No description.

No description.

Ansible role for common settings across linux servers

Installs some ruby system packages and specified gems.

No description.

For a test project

For a test project

Installs a MongoDB repository for Cent7

Heavily altered fork of Matthew Finlayson's work

Adds the sysdig http://www.sysdig.org/ repository for Centos

Installs and configures RabbitMQ, like for Sensu!

Installs and configures Jenkins

Configures SELinux

Uses ansible to install the specified version of Hashicorp Vagrant

Downloads and installs Hashicorp Vault.

Installs and configures a Unifi controller

High-performance MySQL proxy with a GPL license.

A pure Unix shell script implementing ACME client protocol

:100:Go Struct and Field validation, including Cross Field, Cross Struct, Map, Slice and Array diving

An implementation of JOSE standards (JWE, JWS, JWT) in Go

YAML support for the Go language.

JDK main-line development https://openjdk.org/projects/jdk

A transparent, highly scalable and cryptographically verifiable data store.

Certificate Transparency Community Website

Source code for the cert-manager.io website, including project documentation

Bash prompt with colors, git statuses, and git branches.

Cloudflare’s developer docs.

No description.

A Prometheus exporter for Unbound.

Terraform provider plugin for proxmox

MaxScale metrics exporter for Prometheus

A tool to monitor a CT log for operational problems

No description.

Consume the proxmox API in golang

Fallout 2 map editor

Repository for the CA/Browser Forum Server Certificate Chartered Working Group

💡 Example for setting up a nginx/php stack with docker

No description.

Curated applications for Kubernetes

Ansible is a radically simple IT automation platform that makes your applications and systems easier to deploy. Avoid writing scripts or custom code to deploy and update your applications— automate in a language that approaches plain English, using SSH, with no agents to install on remote systems.

Domain name parser for Go based on the Public Suffix List.

No description.

Exporter for MySQL server metrics

Terraform AWS provider

Docker image with various NGINX rate limit settings to play with burst and nodelay settings

Terraform packet provider

Prometheus Operator creates/configures/manages Prometheus clusters atop Kubernetes

Generate a CAA policy

Docker Networking

Automated testing for Ansible roles

A fedmsg consumer that files bugzilla bugs for upstream releases

An Ansible role template for using Let's Encrypt to issue TLS/SSL certificates which requires no code to be run on your webserver.

The code for the Certbot instruction generator and documentation

[mirror] Go supplementary cryptography libraries

Diagnostic tool/website to help figure out why you can't issue a certificate for Let's Encrypt

Exporter for machine metrics

Auditing for TLS certificates, Go code.

ISRG / Let's Encrypt CP and CPS Documents

How to spread Certificates Authorities like Let's Encrypt

Docker Official Image packaging for golang

SRE programs

Check for abandoned/misconfigured delegations in your Route53 hosted zones.

vagrant up kubernetes cluster

A simple shell script to set NASA Picture of the Day as Wallpaper for Ubuntu.

No description.

Bird protocol state exporter for bird routing daemon to use with https://prometheus.io/

HTTP load testing tool and library. It's over 9000!

Terraform AWS Cloudwatch Alarm with Dashboard Widget JSON Outputs

Transmit fake traceroute responses

X.509 certificate linter, written in Go

No description.

This repo contains CoreRT, a .NET Core runtime optimized for AOT (ahead of time compilation) scenarios, with the accompanying .NET native compiler toolchain.

Find HOT SINGLES in your area!

Sensu plugins for Systemd

My attempts to learn python

Uchiwa Documentation

Testing out how to use the Packet.net TF provider

simple python script that import Tenable Nessus scan result into Atlassian Jira task

The tool for beautiful monitoring and metric analytics & dashboards for Graphite, InfluxDB & Prometheus & More

This script communicates with the Nessus API in an attempt to help with automating scans. Depending on the flag issued with the script, you can list all scans, list all policies, start, stop, pause, and resume a scan.

Running Docker on an Ubuntu usb drive ... for fun!

our chat bot on Slack

Naming is hard. This wrapper script allows you to use set notation with dynamic host groups.

My website

Streisand sets up a new server running L2TP/IPsec, OpenConnect, OpenSSH, OpenVPN, Shadowsocks, sslh, Stunnel, a Tor bridge, and WireGuard. It also generates custom instructions for all of these services. At the end of the run you are given an HTML file with instructions that can be shared with friends, family members, and fellow activists.

Saltstack formula for Golang

A lita plugin for diabetes-related chat rooms

our irc bot

Sensu Slack chat handlers

Creates a public/private domain in AWS

Getting started with the terraform tool can be challenging. Here's what I typically do.

This plugin provides native HTTP instrumentation for monitoring and metrics collection, including: response code, JSON response, HTTP last modified, SSL expiry, and metrics via `curl`.

You have disposable income and taxes, you should donate!

Daemon to fetch OCSP staples from cerificate authorities periodically, for HAProxy and NGINX.

Software to automate the management and configuration of any infrastructure or application at scale. Get access to the Salt software package repository here:

This plugin provides native SSL instrumentation for monitoring, including: hostname and chain verification, cert expiry, and Qualys SSL Labs reporting

Penguicon 2017

nightscout web monitor

Kube-Lego automatically requests certificates for Kubernetes Ingress resources from Let's Encrypt

Vagrant is a tool for building and distributing development environments.

A Test Kitchen Driver for Amazon EC2

RSpec logstash filter on docker container

Some helper scripts and stuff that helps me print out (play)book after (play)book.

Open Automation Framework for Physical Operations

Terraform is a tool for building, changing, and combining infrastructure safely and efficiently.

learn to fly

De-remake of the Oregon Trail card game into a Perl game

A tool for managing secrets.

Creates a boilerplate Ansible role in the style that I prefer

No description.

Vim plugin for hclfmt

Source files for the neveragain.tech site

IRC Bot in Go

Bash Automated Testing System

Displays a mapping of the veth interface on a host to the container utilizing it.

Command line time tracker

No description.

Internal Load Balancer

https://home-assistant.io/

Useful tools that make Terraform more user friendly for me.

A generic python/Flask app with a Docker file

A dark theme for Cleaver

No description.

No description.