DevSecOps

DevSecOps Chat with OpenAI ChatGPT in Search for Truth Values

There are several applied examples of using Generative Pre-Trained Transformers (GPT) in the context of open-source software which are code generation, documentation generation, issue and pull request triaging, code review assistance, natural language interfaces, code completion, and suggestions.

• 

Tutu Rulianda

3 May 2024 · 22 min read

DAST

Using Zap As A Dynamic Application Security Testing Tool

The practice of analyzing a web app from the front end to find vulnerabilities through simulated attacks is known as dynamic application security testing or DAST. With the "outside-in" methodology, an online application is evaluated from the perspective of a malevolent user. Zap is one of the tools.

• 

Tutu Rulianda

24 Jan 2024 · 12 min read

SAST

Using Insider CLI As A Static Application Security Testing Tool

A software testing technique called static application security testing (SAST) is intended to find security flaws in applications by examining and evaluating their source code, byte code, and binaries for coding and design issues. The Insider CLI is one of the widely used SAST open-source tools.

• 

Tutu Rulianda

23 Jan 2024 · 80 min read

Tailscale

Unveiled Usage of Secure SSH with Peer-To-Peer Tailscale VPN

Tailscale is an app solution that simplifies and secures networking for businesses and individuals. It's built around the concept of a mesh network, where devices can securely communicate with each other over the internet as if they were on the same local network, regardless of physical location.

• 

Tutu Rulianda

10 Apr 2023 · 2 min read

Varnish

Accelerate Ghost CMS Load With Varnish Cache and Webhooks

By integrating Varnish Cache with Ghost Webhooks, publishers can ensure that their content is served quickly and efficiently to users, even during periods of high traffic or frequent content updates. This combination helps improve the overall performance and responsiveness of Ghost publications.

• 

Tutu Rulianda

25 Mar 2023 · 7 min read

Cockpit

Realizing Cockpit Server Manager On Rocky Enterprise Linux

Cockpit Server is a system administration tool that provides a user interface for monitoring and administering servers through a web browser. It allows you to monitor current values and adjust limits on system resources, control the life cycle on container instances, and manipulate container images.

• 

Tutu Rulianda

21 Mar 2023 · 2 min read

Serposcope

Improve Your SEO Performance In Google Search Using Serposcope

Serposcope offers features such as daily rank tracking, customizable tracking regions, and search engines, support for multiple languages, historical data analysis, and email notifications for rank changes. Serposcope includes a web-based user interface for configuration, monitoring, and reporting.

• 

Tutu Rulianda

4 Oct 2022 · 2 min read

Rocket.Chat

Implement Your Own Chat Server Very Easily Using Rocket.Chat

A platform for team collaboration called Rocket.Chat is available for free and provides features including file sharing, video conferencing, and real-time messaging, in a variety of settings, such as companies, organizations, and communities. Rocket.Chat can be deployed on-premise or in the cloud.

• 

Tutu Rulianda

21 Sep 2022 · 2 min read

Cloudflare Zero Trust

Deploying An Internet-Based Web App Using Cloudflare Zero Trust

Cloudflare Zero Trust assumes that no entity, whether inside or outside the network perimeter, should be trusted by default. Zero Trust security models advocate for verifying the identity and security posture of every user and device attempting to access resources, regardless of their location.

• 

Tutu Rulianda

6 Sep 2022 · 1 min read

Portainer

Running Portainer Server and Portainer Agent Using Docker Swarm

Portainer can manage containers anywhere and at any time without being restricted to a specific vendor or technology. Container adoption is accelerated by Portainer. It tackles the security issues with operating containers in Docker, Swarm, Nomad, and Kubernetes and lowers operational complexity.

• 

Tutu Rulianda

14 Aug 2022 · 7 min read

Kubernetes

Utilizing Kubernetes (K8s) with Rancher, VirtualBox, and Vagrant

Kubernetes uses a declarative approach, where users define the desired state of their apps using YAML or JSON config files. The K8s control plane then constantly works to ensure that the current state matches the desired state, orchestrating the deployment and management of containers accordingly.

• 

Tutu Rulianda

6 Aug 2022 · 35 min read

HAProxy

Concept and Utilizing HAProxy, Docker Swarm, and Multiplexing Web Apps

HAProxy is a free, open-source software that provides high availability, load balancing, and proxying for TCP and HTTP-based apps. It is mainly used to distribute incoming traffic across servers, ensuring that no server becomes overwhelmed with requests and maximizing performance and reliability.

• 

Tutu Rulianda

7 Jul 2022 · 4 min read

Guacamole

Implementing Apache Guacamole and Editing the Skin Made Easy

Apache Guacamole is an open-source remote desktop gateway that provides access to your computer systems from anywhere using only a web browser. It allows users to connect to remote computers via protocols like VNC, RDP, and SSH without needing to install any client software on their local devices.

• 

Tutu Rulianda

11 Apr 2022 · 3 min read

WAF Visualization

Implementing WAF Dashboards Using ELK Stack with Filebeat

ModSecurity is an open-source web application firewall (WAF) module that is deployed to enhance the security of web applications and protect them from various types of attacks. This post shares how to implement the ModSecurity web application firewall using ELK Stack for visualization, and Filebeat.

• 

Tutu Rulianda

4 Apr 2022 · 3 min read

ModSecurity

Implementing WAF Using Nginx, ModSecurity, and OWASP Project

ModSecurity operates by analyzing HTTP requests and responses and inspecting their content, headers, and metadata for signs of patterns that indicate potential attacks. When it detects suspicious behavior, it can block the request, log the event, or modify the content to neutralize the threat.

• 

Tutu Rulianda

3 Apr 2022 · 5 min read

Mailu

Implementing Personal Mail Server Using Mailu In Linux VPS

Mailu is an open-source mail server solution designed to provide users with a self-hosted email service. It supports email protocols like SMTP, IMAP, and POP3, making it compatible with a wide range of email clients. Mailu is a flexible and customizable solution for individuals and organizations.

• 

Tutu Rulianda

1 Apr 2022 · 4 min read

ELK Stack

Every Detail About ELK Stack Using Docker with Metricbeat

The ELK stack gives the ability to aggregate logs from all your systems and applications, analyze them, and create visualizations for monitoring them, faster troubleshooting, security analytics, and more. This post implements it using Docker with Metricbeat for feeding CPU monitoring to Logstash.

• 

Tutu Rulianda

24 Mar 2022 · 3 min read