Guides

Projects · Guides

Summary: Stepped write-ups you can skim, then follow. Each piece opens with a title and a purpose, then an on-this-page list and numbered steps. Figures are real captures or an honest note that the shot is missing. Nothing here is a drawn fake UI.

Format reference: Docs-as-code snippet · full standard on Docs.

Published guides

• Pi-hole lab DNS path
  One stable client-facing nameserver path. Lab zones forward to identity DNS. Public recurse stays. Scrubbed figures are live.
• FreeIPA lab identity — verify before rebuild
  Prove a healthy realm with read-only checks. No install, no wipe. FreeIPA UI shots are missing; the lab directory was not opened.
• FreeIPA client enroll — practice, prove, leave
  Practice enroll on a disposable guest, prove SSSD and a keytab, then uninstall and delete the host object. No enroll was run for a screenshot.
• Keycloak lab SSO — federate and prove the issuer
  FreeIPA stays the directory. Keycloak federates read-only LDAP and issues tokens. Scrubbed sandbox figures are wired.
• Lab SSO path — FreeIPA, Keycloak, Forgejo
  Prove the chain with read-only checks. Forgejo login and redirect shots are real. The extra layer-prove terminal shot is missing.
• Vaultwarden — lab password store, registration locked
  Self-hosted vault on the lab LAN, signups locked, prove /alive without printing an item. Figure is a disposable login page, not the lab vault.
• PBS backups — prove restore before you need it
  Dedicated disk, scheduled snapshots, restore a scratch guest. The lab datastore was not opened, so the figure is an honest missing shot.
• Dashboard and monitoring — portal, scrape, graph
  Homepage, Prometheus, Grafana as three jobs. Figure is a disposable Prometheus target page. The lab portal was not opened.
• Git hooks — refuse a bad path before it is trusted
  Public pre-commit sample refuses secret-shaped text. Figure is that refuse in a disposable repo. Server hook is the same idea and is not already installed on the mirror.
• EVPN/VXLAN lab notes — practice only, no underlay
  Notes and a labeled practice sketch. No switch UI and no scrubbed diagram were filed, so none were invented.
• Ansible role skeleton — walk the public sample
  Layout, one debug task, and a package install that stays off. Figure is the public sample tree.
• Before/after — NetBox inventory hygiene
  Move device and IP truth into NetBox so change history stays queryable.
• Lab incident — observability catch
  A metric panel and an alert path caught a lab guest disk-fill. Employer-neutral.
• Docs-as-code snippet (format example)
  Format example of Title, Summary, TOC, steps. Nested under Docs.

Screenshots

No fake pixel images. Where a capture was not safe or was not on file, the figure says the shot is missing.

• Wired from disposable sandboxes or the public samples: Pi-hole, Keycloak, Forgejo login and redirect, Vaultwarden login, Prometheus targets, git pre-commit refuse, Ansible role tree.
• Shot missing, on purpose: FreeIPA (sandbox install aborted; lab directory not opened), FreeIPA enroll, Lab Shell, Agent Console, PBS datastore, EVPN/VXLAN switch UI, the SSO layer-prove terminal.
• NetBox PNGs are staged in assets and are not wired into that write-up in this pass.

Guides nest under Projects. Lab addressing, vault values, and private board text stay off this index.