secure-by-default

Wireguard auto-installer for Ubuntu, Debian, CentOS and Fedora

Who says you can't be super fast and super secure

Consolidating common, repeatable, secure nginx configs in a globals directory to standardize and simplify the locking down of nginx based webservers.

Firewall-System based on OpenWRT or Pi-Hole with UnBound, TOR, optional Privoxy, opt. ntopng and opt. Configuration of the AVM FRITZ!Box with Presets for Security and Port-List. Please visit:

CI/CD supply chain hardening plugin for Claude Code, designed for Rust projects

Manage your own Git server from the command line

Security-hardened GitHub repository template, designed to prevent supply-chain attacks. Includes vulnerability scanning and AI agent skills.

Stable, Security, Privacy focused independent Linux distribution for x86, musl-libc, built with hardened LLVM/Clang toolchain, non-GNU

Secure-by-default software builder skill for Claude Code

Highly secure, available and durable Cardano Stake Pool environment based on a Docker containers deployed into a cloud environment.

The **Podman AI Stack** is a secure, configurable, and systemd-native orchestration stack for deploying containerized AI environments (Open WebUI and Ollama). It leverages **Podman Quadlets** to provide a seamless integration with systemd, supporting both rootless and rootfull deployments on Fedora and other RPM-based distributions.

Agent config for ontology-driven LLM development. One source, minimal surface, secure by default.

Secure, reusable project foundation for NOERITH repositories.

secure-by-default github template for oss: signed commits, sha-pinned actions, slsa v1.0 provenance, sigstore keyless signing, npm oidc publishing.