import caso from "cv/proyectos/operacion-servidores-ia";
Server operations with AI and least privilege
caso.summary;
Operations as code for a dedicated server hosting client websites and containerized apps, with a daily security report written by AI under least privilege: its only tool is a closed, audited command menu (restricted sudo).
caso.role;
My part
Full design, automation and operation.
caso.highlights.map(h => <li>{h}</li>);
What it includes
- Hardening with CrowdSec, ModSecurity (OWASP CRS), AppArmor and auditd.
- Encrypted restic backups to the cloud and a documented restore drill.
- The AI only writes: a collector gathers the data and any action goes through a closed, audited menu.
- Migration of client websites to PHP 8.3.
caso.stack;
Stack
- Linux
- Bash
- Python
- Docker
- Dokploy
- Traefik
- CrowdSec
- ModSecurity
- AppArmor
- restic
- Claude Code (headless)
export default <Acciones />