DevOps

As part of my infrastructure hardening and automation efforts, I built a CIS-hardened Debian 12 AMI using Packer and the ansible-lockdown/DEBIAN12-CIS Ansible role. For reference or reuse, I’ve made the AMI publicly available: AMI ID: ami-0ded45c1c47569084 Region: us-east-1 This post documents how I did it from scratch. 🛠️ Tools Used Packer Ansible Ansible Lockdown Role AWS EC2 Debian 12 (Official AMI) 📁 Project Structure cis-debian-ami/ ├── packer.pkr.hcl ├── ansible/ │ ├── playbook.yml │ └── roles/ │ └── DEBIAN12-CIS/ # added via git submodule To add the Ansible role: ...

A Clean Naming Convention for Docker Build & Push Workflows In my development projects, I often need to build and push Docker images automatically using CI workflows. Depending on the project, the architecture, and the target registry, the workflows can vary quite a bit. Sometimes I use Gitea Actions, sometimes GitHub Actions, and in some projects, even both. As the number of workflows grew, I realized that my workflow file names were getting messy and inconsistent. So, I decided to come up with a simple, scalable naming convention — one that would work cleanly whether I’m using GitHub, Gitea, or any other CI platform. ...