Tag:devsecops
All the articles with the tag "devsecops".
All Posts
A NixOS Control Plane and OpenBao in HA
Updated: at 02:00 AMBuild a declarative NixOS control plane that deploys a fleet over SSH, then run OpenBao on it - single node first, then a raft HA cluster.
HashiCorp Vault Lab: Auto-unseal, LDAP Auth, and Team Policies
Published: at 03:00 PMHashiCorp Vault auto-unseal (Azure HSM + Transit), LDAP auth mapped to team policies, and a KV v2 ACL design - a hands-on three-VM lab.
Secret Management with OpenBao and GitLab CI/CD
Published: at 02:08 PMFive ways to get secrets into a deployed app with GitLab CI and OpenBao (Vault), from plain .env files to JWT/AppRole auth, a Vault Agent on the host, and live SDK fetches, plus the full self-hosted GitLab and OpenBao setup.