https://systemsgolive.com/categories/security/Recent content in Security on SystemsGoliveHugo -- gohugo.ioen© 2026 systemsgolive.com and Mickael Asghar. All rights reserved.Sat, 20 Jun 2026 09:15:36 +0100https://systemsgolive.com/post/multi-stage-docker-builds-smaller-safer-faster/Sat, 20 Jun 2026 09:15:36 +0100https://systemsgolive.com/post/multi-stage-docker-builds-smaller-safer-faster/ Multi-stage Docker builds separate the build environment from the runtime in a single Dockerfile. This post covers the four concrete benefits – smaller images, fewer CVEs, more readable Dockerfiles, and faster builds – using a TypeScript app that dropped from 289MB to 167MB.https://systemsgolive.com/post/ldap-cert-renewal-selinux-context-issue/Wed, 28 Jan 2026 11:54:16 +0000https://systemsgolive.com/post/ldap-cert-renewal-selinux-context-issue/ An internal LDAP certificate renewal failed due to incorrect SELinux contexts on transferred certificate files. Despite correct permissions and ownership, OpenLDAP couldn't initialise TLS. Using `restorecon` to fix the security context resolved the issue immediately, highlighting the importance of SELinux context verification in certificate deployments.https://systemsgolive.com/post/letsencrypt-wildcard-cloudflare-full-strict/Sat, 03 Jan 2026 23:32:31 +0000https://systemsgolive.com/post/letsencrypt-wildcard-cloudflare-full-strict/ This article demonstrates how to implement Full (Strict) SSL/TLS encryption by combining Cloudflare's managed frontend certificates with Let's Encrypt wildcard certificates on your origin server.https://systemsgolive.com/post/tls-ed25519-private-ca-nginx-setup/Thu, 10 Jul 2025 11:37:03 +0100https://systemsgolive.com/post/tls-ed25519-private-ca-nginx-setup/ This guide demonstrates how to set up secure TLS 1.3 communication using Ed25519 elliptic curve certificates and a private Certificate Authority (CA). It covers encrypted client-server communication with modern, efficient cryptographic standards — ideal for internal systems, microservices, and zero-trust network architectures.https://systemsgolive.com/post/mysql-workbench-ssh-tunnel-user/Sat, 21 Jun 2025 15:37:38 +0100https://systemsgolive.com/post/mysql-workbench-ssh-tunnel-user/ A secure and standardised approach to accessing MySQL in non-production environments using SSH tunneling, with a focus on least privilege and improved access controls.