Posts

Three People That Truly Listened: An Open Letter

Para kina Uncle Tutut, Tata Fando, at kay Ninang Gigi, Paano na kaya? Ngayong wala na kayo, madalas kong maitanong sa sarili ko kung sino na ang natitirang makikinig sa akin katulad ng pakikinig ninyo. Sino na ang pwede kong pagkuwentuhan ng mga bagay na naiisip ko, ng mga random na ideas ko, at kahit ng maliliit na achievements na masaya akong ibahagi? May isang quote si Maya Angelou na nagsasabing, "People will forget what you said, people will forget what you did, but people will never forget how you made them feel." At sa tuwing naiisip ko ang quote na iyon, kayong tatlo agad ang naaalala ko. Hindi ko man maalala ang lahat ng mga napag-usapan natin o ang bawat pagkakataong nagkasama tayo, hinding-hindi ko makakalimutan kung paano ninyo ako pinaramdam. You made me feel that I mattered. Na may halaga ako. Na may lugar ako sa mundong ito. Pag kasama ko kayo, naramdaman kong nag-e-exist ako nang buo. Hindi ko kailangang magpanggap, mag-adjust, o baguhin ang sarili ko para lan...

Building a Zero-Recurring-Cost Enterprise SecOps & Low-Power Hardware Architecture

Image
In our previous article, we laid out the foundational design for a resilient, high-availability private cloud. But compute and networking are only half the equation. In a production-grade enterprise environment, observability without active threat defense is a liability , and high-availability virtualization shouldn't come at the cost of massive power bills and noisy server racks. Today, we take a deep dive into our operational Security Operations (SecOps) pipeline: integrating Wazuh SIEM , Suricata v7 IDS/IPS , a Centralized ClamAV Local Mirror UI ( 192.168.88.34 ) , an AI-Driven Incident Digest Pipeline (n8n + Local Qwen LLM) , and our Low-Power Bare-Metal Micro-Cluster Architecture to achieve complete operational autonomy with zero cloud licensing fees[cite: 16, 17]. 1. Multi-Layered Threat Defense Architecture To protect our multi-node Proxmox HA cluster and internal workloads, we enforce a defense-in-depth security approach spanning Layer 3 to Laye...

Complete Bare-Metal Setup of Heimdall Dashboard on Debian 13 Using Apache

Image
Managing a complex home lab or production deployment network environment often involves navigating multiple distinct port parameters and host addresses. The Heimdall Application Dashboard acts as an ideal solution—providing a beautiful, unified directory layout to organize and streamline user web access. While containerized deployment variations like Docker are standard, a bare-metal LAMP stack installation (Apache, PHP, and SQLite) directly on Debian 13 maximizes host resource utilization efficiency, significantly decreases active memory footprints, and maintains native OS-level file structure access. 1. Structural Prerequisites Ensure your lab infrastructure meets the primary bare-metal baseline requirements defined below before starting the software deployment sequence: Operating System & Host Parameters Host Platform: An active deployment instance of Debian 13 (Trixie) operating natively on bare hardware, or mapped as an infrastructure Virtual Machine (VM) or Linux Containe...