Security Articles

Implement self-hosted Single Sign-On (SSO) for Blazor Server using Authelia and OpenID Connect (OIDC).

Stop running as root. Build secure, minimal container images for .NET applications using multi-stage builds and distroless/alpine bases.

Elevating PKI security by moving the Root CA private key to a YubiKey hardware token, ensuring the most critical secret never creates a persistent footprint on disk.

Implement fine-grained access control with Kubernetes RBAC, service accounts, and least-privilege security patterns.

Implement network segmentation and micro-segmentation in Kubernetes using Network Policies for defense in depth.

A step-by-step guide to bootstrapping a private PKI, from generating a Root CA to signing leaf certificates for internal microservices using OpenSSL.

Synchronize secrets from Infisical to Kubernetes using External Secrets Operator for GitOps-friendly secret management.

Host your own OIDC/OAuth2 Identity Provider with Authelia on Kubernetes. Secure your apps with 2FA, SSO, and fine-grained access control.