miklosbagi

a log of research, experiments, trainings, tech & code.

2023

• The proto2json experiment
• Unit tests lister for GoLang: get-tests
• Bash util for jwt encode/decode
• Last known good versions for docker-compose
• Mocking tools analysis, mainly for gRPC: gripmock, wiremock, mountebank, protoc
• DB Data synchronization tests dev with variable network conditions
• DB encryption/decryption tests dev in venom
• HACI updates
  • Docker-compose test infrastructure setup
  • Build example Root CA & Intermediate CA scenario
  • Integrte with multiple versions of Home Assistant Docker
• MQTT Client message delivery reliability tests
• Home Assistant local
  • Migration from ZHA -> Z2M
  • MQTT broker cluster tests on openwrt
• Vessel network conditions emulator
  • Traffic restriction between docker containers
  • Throuthput, latency, packet loss simulation (tc, iptables)
  • OVH/Venom custom executor for SDETs
  • Option to change conditions on the fly
  • Network condition presets: awesome/good/normal/bad/terrible/custom
  • Github CI Integration
  • Cross-project portability
• ChatGPT 4 on its way to become my google search alternative
• gRPC multi-stub development (go), ports and test data from env vars
• Building the test infra in docker-compose
  • Various test data injection solutions
  • Postres docker-entrypoint-initdb.db migrations with bind mounts
  • Entrypoint overrides
  • Volumes, dynamic env configs
  • Build images once and run multiple files wihtin the same compose file
• GH CoPilot is awesome help for code generation
• Service tests for microservices \o/
  • Regex custom executor for Venom
  • Tests automation for Grafana & Prometheus data feeds
  • All my tests are on GitHub CI by default \o/
  • One time testpwd generator in make file
  • Over 100 Integration and Service tests with OVH/Venom
  • Custom Venom executor for MQTT and gRPC
  • Makefiles for venom & env builds
  • Quite some trainings in Go
• Built experience with a few MQ brokers
  • VerneMQ MQTT
  • Mosquitto MQTT
  • HiveMQ
  • Nats

2022

• Hello 90poe, thanks for the opportunity :o)
• Proxmox VE: at last, game on
  • Docker + Portainer on LXC
  • ZFS Pool / mirroring
  • Luks crypt VM storage
  • Turnkey LXC snapshots & backups (Py)
  • Jellyfin vs Emby vs Plex playground
  • HomeAssistant playground
  • Smallstep ACME certbot integration
• Small Go + Postgre + Kube + GCP test project
  • Github actions build passing
  • Unit tests (Testify)
  • Sqlc with pgsql
  • TablePlus is just awesome!
  • Docker composed
• Smallstep Step-CA & CLI on a raspberry 3
• Oh Ventoy is a life saver again
• Linkedin skill assessments look useless
• Whatta... SEO ATS for jobs is actually a thing
• Awesome brainkillers from the AlgoExpert folks
• JBFleet: love it, but too heavy for most things
• New OpenVPN client (iOS) bug reveal & unpack
• Oh the 64GB MacBook is awesome for 2⁹ tabs
• iOT / Home Assistant:
  • Toilet button + ceiling fan are connected
  • Energy management
    • Area specific dynamic virtual sensors
    • 10xTRV Radiator Thermostats control
    • Gree climate cool/heat control
    • Room occupancy heat triggers
    • Automated guest room control (heat, power, roomba)
  • Building features with "packages" now
  • Replaced a bunch of eve* with zigbee/zwave alternatives

• Trainings:
  • Udemy Python 100 days of code (in progress)
• Plex Gentoo E-builds May updates
• Goodbye °o° Disney, thanks for all fun! :)
• Trainings:
  • Udemy Python 100 days of code (in progress)
• iOT / Home Assistant:
  • Predictive garden irrigation system test drive
    • Hardware: eve weather, eve aqua, eve extend, gardena 6 tits switcher, blitzwolf shp13 for eve extend reset
    • Sensors for current & forecasted temperature, humiditiy, air pressure, rain past 24h and forecast
    • Sensor clusters & fallbacks (local devices first, cloud fallback)
    • Rules for sensor norms, e.g. no irrigation under 15 °C
    • Computing deviations from norm: ± 30% irrigation or 0
    • 6 irrigation loops, irrigation need / looop, with switching/disable options
    • Fault detection & handling (die btle, die!)
    • Sunrise / Sunset irrigation plans notifications
  • Humidity trend sensor + bathroom vent experiment successful
  • Robovacuum won't start before I wake up
  • Plex now wakes only for local devices, and when needed
  • Somfy shades experiment passed, going for double c/no/nc hardware
  • Installed & contolling a bunch of smart switches
    • Logic differentiates between manual and automated switching, transitions are handled correctly.
    • Movement and light level are at play for automation
• Book: James S. A. Corey - Nemesis Games
• Plex Gentoo E-builds Apr updates
• Experiments:
  • Python Webdriver + Safari actually works
  • APN sounds from HA (using KITT as voice response)
• Book: David Koepp - Cold Storage
• Home Assistant:
  • Connected 4 UPSes via nut
  • Introduced PDO (power degraded operation) for automations, e.g.: power hungry devices will not start on certain events when the power is out
  • Conditional lovelace cards
  • Dedicated secure callback location for iOS push msgs
  • Custom control & status interface for Roborock
• Plex Waker: simple firewall monitoring tool to wake plex from sleep, when needed
• Plex Gentoo E-builds March updates

2021

• Home Assistant:
  • Contrib: HACI: Home Assistant Cert Injector
  • Tricked Eve Extend into HASS (HomeKit2MQTT lol)
  • Actionable push notifications
  • Fireplace heat triggers
  • Multi-input (switches, sensors) light controls
• Killed homebridge
• Experiments:
  • Devices experimented with (Zigbee / Tasmota-MQTT):
    • Sonoff S20
    • A9 Cam research (pub: here and here)
    • BSD33 (ESP8266) Smart Plug
    • Bunch of Tuya Zigbee (unopened)
    • Lonsonho Zigbee + Wi-Fi/RF switches
• Testing:
  • Native iOS & Android testing frameworks
  • Undisclosed native app test framework dev
• PIA-Connector (details undisclosed here)
• Wasting a lot of time with HASS
  • Custom switches to turn computers on/off
  • Full Sony Bravia integration
  • Success with Electrolama's ZZH!
  • Success with Zigbee No-neutral switches
  • Going for a ZWave dongle
  • Contrib: HASS / Brother Integration Docs
• Books:
  • Craig Alanson: Bush Fire
  • Alien: Covenant Origins
• Plex Gentoo E-builds Updates

2020

• Experiments / Research:
  • IOT / Xiaomi Roborock research (his fault)
    • Understanding components, networking
    • Rooting with UART, rootpw deobfuscator
  • Nginx UDP & TCP stream load balancer + 3 x OpenVPN nodes (fast like an army of snails)
  • Batman-ADV vs 802.11r/k/v comparison (batman lost)
  • Welcome OnePlus Nord test devices ;)
  • PIA VPN Nextgen framework upgrade
  • Experiments with OpenSSL TS
  • Hybrid raid: SSD+HDD seems to be great
  • Ran into the username=reponame github secret
  • Magic Mirror \o/
  • iOS14 clipboard issues causes
  • Homeauto with presence and multi-sensor value conditions
  • The log harvester experiement
    • No movement for 30 mins and consumption less than 20 Watts trigger power off after sunset.
    • Humidity under 70% and air pressure under 1015 hPa triggers irrigation at dawn.
    • Light level under 10 lux and light off triggers 5 minutes of light at 50%.
  • Testing homebridge capabilities for sensor data & storing coded rules (can avoid "unbackupable" Apple Home + HUE + EVE madness)
  • Sonoff + Somfy motor seems to work fine
  • Hue + Eve + HomeKit race cond's fixed
  • Git hooks on a router
  • Scripted provisioning of DDWRT, OpenWRT, Rasp 3,4
  • pu.sh iOS Push integration
  • Slack status bot
• Infrastructure:
  • Rack UPS upgrade
  • UPS backup for central heating
• Self-hosting:
  • HTZDNS (undisclosed):
    • Full rebuild
    • Integrate with hetzner dns api
    • HTZDNS Notification framework
  • Raspberry:
    • +2 x 8GB Raspberries :)
    • Few internal web apps Migrated:
      • Migrated to Bitwarden
      • Family recipes
      • House/home tech docs
      • GOGS
      • Calendars
      • Contacts
      • Data sync
      • Password vault
      • Secure notes
• Home automation
  • Home assistant
    • Dedicated HASS
  • Home Bridge
    • WOL integration
    • Sleep, hibernate & shutdown Linux/Windows by rule
    • A bunch of virtual switches
    • Backup harvester reports "ready for power off"
    • Messages are now sent when air is dry or low quality
    • HTTP webhook switches
    • Virtual alarm system
• 3D Modeling:
  • Badenhaus furniture
  • Italgraniti textures 96,2x32 (+gaps) (Affinity)
  • Round shower cabin (Sketchup)
  • Sanitary product conversions (Fusion 360)
  • Curved bathtub mosaic tile raster models
  • Full room design in Belight Live Home 3D
  • Automation plan for sensors, lights, vent
  • Glass-view technical plan (pipes, wiring)
• Testing:
  • Shift left: pod 'XCTest-Gherkin/Native'
  • Shift left: Android-Cucumber
  • ABC News & OTV 2020 US Elections native apps coverage
  • Elections / tons of votedb simulation tests
  • Coverage for the presidential shush/clown event
  • Privacy/infosec test automation framework (log analysis)
  • Letsencrypt Revokespree
  • Ramping up on NatGeo Magazine apps
  • ABC News Mobile Primaries Iowa
  • Fox/Disney merger is mentionable here
  • ABC News voting sumulations (test data flow)
  • Mobile app takeover logic
  • Lots of manual / auto UI tests for interactive maps
  • Webview and browser overlay integration tests for Balance of power, Live blog, Results snippets and pages, projections, key races details
  • Coordination with perf & web, native devs
• Trainings:
  • MQTT v5 for the IOT magic
  • X711A + HASS tests
  • Zigbee v3 USB dongle
  • iOS 13 & Swift 5 dev bootcamp
  • Udemy 2020 complete testing bootcamp
  • Level Access / Digital Accessibility (10 webinar sessions)
• Books:
  • Nicholas Scratch-Scrape Smith: Orbs 1-3
  • Adrian Tchaikovsky: Children of Ruin
  • Adrian Tchaikovsky: Children of Time
  • Craig Alanson: Critical Mass
  • Great Courses: The History of the U.S. (ongoing)
  • Michael Crichton: Sphere
  • James S. A. Corey: Abaddon's Gate
  • John Bolton: Where it all happened
  • Great Courses: The History of the U.S. (ongoing)
  • James S. A. Corey: Cibola Burn
  • Great Courses: The History of the U.S. (ongoing)
  • Robert Greene: 33 Stratgegies of War
  • Keith C. Blackmore: The Hospital
  • James S. A. Corey: Caliban's War
  • James S. A. Corey: Leviathan Wakes
  • Craig Alanson: Valkyre
  • Craig Alanson: Armageddon
  • Craig Alanson: Homefront
  • Craig Alanson: Mavericks
  • Craig Alanson: Renegades
  Plex Gentoo E-builds updates

2019

• Books:
  • Craig Alanson: Zero Hour
  • Craig Alanson: Black Ops
  • Craig Alanson: Trouble on Paradise
  • Craig Alanson: Paradise
  • Craig Alanson: Spec Ops
  • Craig Alanson: Columbus Day
  • 21 Lessons for the 21st Century
  • Richard D. Lewis: When Cultures Collide: Leading Across Cultures (revisit)
  • Yuval Noah Harari: Sapiens
  • Exurb1a: The Fifth Science
• New horizons; ramping up on:
  • ABC News World Wide
  • ABC7 Los Angeles (KABC)
  • ABC7 News San Francisco (KGO)
  • ABC30 Fresno (KFSN)
  • ABC13 Houston (KTRK)
  • ABC7 New York (WABC)
  • ABC7 Chicago (WLS)
  • 6ABC Philadelphia (WPVI)
  • ABC11 Raleigh-Durham (WTWD)
  • ESPN Worldwide
  • ESPN Cricinfo
  • ESPN Fantasy
• Testing:
  • 2020 elections preps on ABC News
  • Privacy log analyzer proto (undisclosed)
  • Nielsen mobile integration tests (undisclosed)
  • Log analyzers: Google Ad Mgr: key-value pair validator
  • Lots of process sticthing: CI ➞ UI Auto ➞ Network logs ➞ Tests (privacy & infosec scans, GAM, Analytics)
  • Build & dry-run ABC apps (Android, iOS, FireTV and Roku)
  • Preps for Google DFP migration
• Networking:
  • LDAP for home central auth
  • GoLang, Nginx, phpfpm, SQL on DD-WRT, lol
  • Swap on a router
  • Cookbook (WP)
  • House docs (WP), Tech docs (WP)
  • Calendars (NC) and Contacts (NC)
  • Time machine + Windows Backups
  • Push and pull scripts
  • GoLang/Gogs on router gist
  • Contrib: Gogs DDWRT Init
  • Added ExpressVPN for rotation
  • Added PIA VPN for rotation
  • Local deploy pipeline skeleton (web, routers)
  • iOS 13 certs max 825 days
    • Host and user cert generator scripts
    • CRL generator
  • Moving tech docs into git (.md)
  • Testing rt-web for hosting behind VPN
  • Backups (LDAPs, SMB, AFP)
  • FYI: used Routers are cheaper than RaspPi.
  • Swapped to rt0 (been under test for 6mos)
  • OpenVPN CCDs
  • OpenVPN TCP fallback
  • Decoupling DL to rt-dl
  • Upgraded to dedicated APs from mesh
  • NordVPN Connection Profiler (shell)
  • Planned rt-web (vault) and rt-bkup
  • NetSpot mappings for best AP Coverage
  • Adding DNSSEC to local mix
  • Lots of research in ports comms for fw tuning
  • Ditched stock iptables from ddwrt
  • On-demand firewall rules per network zone
  • Zone-to-Zone relations defined
  • Network services & devices map (docs/schematics)
• Contrib:
  • Plex Gentoo E-builds updates
  • Hetzner DynDNS: update to fix csrf changes
• Training:
  • Packt: Mastering OpenVPN
  • ESPN and ABC at ESPN HQ, Bristol, CT.
  • XRay for Jira
  • New set of internal test automation tools
  • Google Ad Manager (VAST 4.1, IMA3 SDK)
  • New set of internal test automation tools
• Research:
  • Distributed transcoder for Plex
  • Checkm8 a bit (need time!)
  • Hue + Eve + HomeKit race cond's fixed
  • Secure notes (NC), Git repos (GOGS)
  • Service montoring
  • Security update monitoring
  • Reverse proxy hosts (photos, music, etc)
  • CNAME hell, Punycode
  • Snort snort
  • HUE + Homekit custom control via homebridge
  • Feasibility stufy of a custom homebridge (not NPM)
  • RasP driven physical security concept
• Everything else:
  • Testing Kernel 5.0.7
  • Kernel upgrades
  • ipset rules for mail
  • 3D furniture design with SketchUp
  • g2l backup cleanup: keep nightlies for current month, but only 1st of month for all older.
  • I live a samsung-free life now :)

2018

• Right to repair: Purchased a donor coffee machine :D
• Research
  • A bit of GoLang and GoLand
  • Some new Wordpress magic
  • The Suite.st candybox
  • Charles for iOS
  • Koan
  • Affinity Designer & Photo
  • Kea with CQL
  • IPFS, IPNS for hosting
  • Sniffing Katalon Studio & Kobiton
• Experiments
  • Home automation experiments:
    • Concepts of a Rasp-Pi based wired home security system
    • AppleTV as Home Hub
    • Elgato smart devices and homekit
    • SonOff Basic firmware hacking
    • AndroidTV remote proto (shell)
  • Git hooks on a router
  • Using a 4K TV instead of 3 monitors...
  • CSS3 .pseudo + magic {}
  • OpenSSL extended key usage magic
  • Some slack magic
  • Elgato EVEs for remote server power cut
  • xRail (sync results between testrail instances)
  • Playing around with kubernetes
  • HTTPs network traffic logs out of Roku (MITM)
  • HockeyApp API / AWS S3 sync (Py) intg.
  • Meta for Plex audio tagging
  • Youtube API from/to playback exp.
  • Naive Bayes vs SVM News Filtering
• Trainings
  • Update on Apple AppStore review guidelines
  • Complete Cyber Security course / Network Security
  • Snort network intrusion detection
  • Python PIPEnv/Virtual envs
  • GDPR
• DD-WRT Hacking (at last)
  • Limiting AndroidTV background services
  • Testing with a bunch of devices
  • Firewall rules documented
  • Reworked unknown / jail zone logic
  • AP config with OpenVPN
  • Connected gate UI with DNSMasq & Firewall
  • Autoconfig: nvram setting skeletons
  • Shadow (real users), chroots, hardening
  • DNSMasq multi-subnet magic
    • Client-recognition
    • Automatic IP Range assignment
    • DHCP Helper script (zone split)
    • On-demand firewall rules (zones)
    • Guest device mgt. on mobile
    • Mac address DB resolver
  • OpenVPN & related magic
    • Oh OpenVPN/compress:lz4 + iOS = pain
    • Split/Full-tunnel ondemand iOS profiles
    • UDP Main with TCP 443 fallback
    • SSLH port-sharing
    • iOS Network / SSID Specific profiles
    • Server/Client 360 auth
    • CRL management for OpenVPN Certs
    • Custom User/Pass auth implementation
    • Random remote conn. (avoid DNS cache)
  • AP-only config with svc fallback
  • Speedtest: 869-920 Mbps
  • Gate, on-event network zone selector GUI
  • Default expiration for guest devices
  • Compiled MITMProxy on Asus AC88U/ARM
  • Self CA / CRL for DDWRT Web Interface
  • Travel router flavour
  • Multi-router config mgt (git/gogs)
  • Automatic IOT traffic monitoring
  • WPA2 Enterprise (Certs+Radius)
  • Whole-house Adblock (Adbreak)
  • Network intrusion detection & notification
• Atlassian / Jira workflows
  • The "Automation" status
  • AUtomated cross-linking of sprint deliveries
  • JMWE Groovy / automated approval mails
  • JMWE Groovy / suspicious items warning
  • Automatic detail updates for sub-tasks
  • Workflow transition notifications
  • Automatic subtask generation & assignment
    • Test entry criteria (accounts, builds, etc)
    • Test case development
    • Req. Chain (Dev build < RC > Store)
  • Time in status & KPI tracking
  • Owner/client feedback loop
  • Automatic requirement & bug linker
• Tools
  • iTunes SBX health check (undisclosed)
• DisneyLife.ph (access from PH only)
  • Globe intergation
  • Android, iOS, OTT (incl Roku), Web
• Linux stuff
  • Letsencrypt auto-renew script
  • Kernels: compiled 4.14.52 for all hosts
  • Kernel updates to 4.9.95
  • Nagios & monitoring updates
  • Updates to Hetzner DynDNS
  • Meltdown and Spectre patches on Gentoos
  • Update to kernel 4.14.8 on Gentoos
  • PHP 7.1 migration on 3 hosts
• Networking
  • Wireless mesh setup with 3 nodes (what a crap /o\)
  • DD-WRT custom NordVPN config
• Everything else
  • Plex Gentoo E-builds 2018 updates
  • Mojave (fixes DisplayLink)
  • genTextSubst: Mac Text subst. plist generator
  • Miniflux/2 sniff sniff
  • Oh my own Gogs
  • Preps for testing the magic with Japan
  • BI/Analytics test processes dev
  • Global TCoE Process dev
    • TCoE Process scoping
    • Follow the sun continuous testing processes
    • Remote teams on-boarding
    • Jira workflow & custom transition actions
    • Dashboards (track everything)
    • The SlackBot :)
  • Nagios & monitoring updates
  • Process dev: testing for GDPR (undisclosed)
• Globe token integrations (undisclosed)
• Books
  • Richard Thaler: Misbehaving
  • Ted Chiang: Stories of your life and others
  • Devon C. Ford: After It Happened 1-2
  • Yuval Noah Harari: Homo Deus

2017

• Trainings:
  • UC: Machine learning
  • UC: Descriptive & Inferential Stats
  • CBT Nuggets: Wireshark (refresh)

• Books:
  • Peter Clines: Paradox Bound
  • Kevin Mitnick: The art of invisibility
  • Brian Christian: Algorithms to Live By
  • Todd Rose: The End of Average
  • Mark Manson: The Subtle Art of Not Giving...
  • Chris Voss: Never Split the Difference
  • Jocko Willink: Extreme Ownership
• Key projects:
  • Star Wars Find the Force 2 AR App testing
  • DisneyLife UK | IE (continuous since 2015)
• Mazda hacking :)
  • Rooting Mazda Connect
  • Adding SSH keys (wayback)
  • Amendments to keep WiFi on
  • GPS data backup script
  • Android Auto & Spotify experiments
  • Mazda AIO (oh this was so bad!)
  • Performance tuning
  • Udev rules: trigger stuff for special hw
  • Smart home triggers for "car is home" event
  • Hacking speedcams into Mazda Navigation
  • Automatic speedcam updates on wifi-connect
• Research & Experiments:
  • Blockchain (the tech)
  • Evaluating TestRail as alternative
  • GraphQL tests & proto as rest alternative
  • TestRail / Jira custom defect plugin proto
  • Regexp perf tuning on 62 GiB of test data
  • Continuous testing: Git>CI>Tests>TestRail>Jira
  • Robot Framework vs Serenity (va. experiments)
  • Samsung STV IR keystroke automation
  • Suite.st STV IR/Automation/Testing
  • WatchOS hello world
  • Saucelabs magic :)
  • STV app delivery pipeline concept (DevOps)
  • HeadSpin.io initial tests
  • ScriptFlask alternatives on GraphQL/Nginx
  • JSON data structure test in MySQL
  • Sniffing around php-ai/php-ml
• Security:
  • VPN:
    • Scalable VPN Grid proto
    • Asus AC5300 / OpenVPN 58 countries (#roach)
    • TP-Link Archer C9 24/7 VPN for es, uk, ie, de
    • VPNmounter (undisclosed, yet obvious)
  • SubjectAltName fixes
  • It was time for a proxy SIM
  • Certs renewal
  • Charles Proxy 4.1.x (MITM)
  • NordVPN avoid Root CA workaround
• Contributions:
  • Cooked HU units / WP Plugin ext
  • Miniflux contrib:
    • Miniflux cookies patch
    • picoFeed XPath rules contrib
    • Miniflux Json feed test (related article)
    • Verifypeer/verifyhost SSL patch, github
    • DB Migration error report #677
    • Updated HU translation
  • Plex Gentoo E-builds 2017 updates
• Misc:
  • AndroidTV channel reoder automation
  • HBO Go svc debug
  • NextCloud iOS Client customizations
  • Added http2 support for pretty much everything
  • Updated Hetzner-DynDNS (HTZ changed UI)
  • News feed filter proto in py
  • Project Ireland on 6 platforms
  • Jira based time management
    • Business / recharge mapping
    • Individual, sub-team and full team reports
    • Dynamic bookmarklet for 1 click access
  • iOS & Droid build installer hub (plug & go)
  • iPhone X Simulator product screenshots
  • Drupal 8.4.0 bump on homedoc
  • Lots of kicking Appium iOS / Android from Py
  • Asus RT-AC88U + DDWRT
  • Lots of test design, test plans, test cases
  • Network infra up calc for streaming tests
  • UnRr plugin for TransHelper (undisclosed, shell)
  • Internal Test Management tool (undisclosed)
  • MITM Box / Network design in GNS3
  • Apple Keynote for WWDC17
  • Midmaps + Mockups (balsamiq)
  • Custom fail2ban regex rules for nginx
  • Test management in corp. Jira: fail
  • Simple SSHWrapper / keystore script
  • Personal git repos reorganization
  • PHP FPM stuff
    • PHP FPM Default umask fix
    • PHP 7.0.21 bump
    • PHP-7 migrate (8 sites, scripts, internals)
    • php-7.0.15 bump (security fixes) tnk, w1, mx1
  • Internal iOS App Store / web (1 page prototype)
  • Samsung SmartTV stuff:
    • Tizen CLI/Emu, Webdriver, Behave
    • SmartTV Apps Testing
    • AppleTV (tvOS 10.2.1) Proxy & CA profiles
    • Sony 4k Android TV app tests
  • Self-hosted Wiki (homedoc / drupal)
    • Drupal 8.3.5 bump on homedoc
    • Drupal 8.3.1 bump on homedoc
    • Drupal 8.3.0 bump on homedoc
  • Self-hosted git behind VPN & svn migration
  • Self-hosted miniflux behind VPN
  • Self-hosted minify/tnk (github) as int dev tool
  • Documented int. firewall (3 hosts)
  • Revisited Inside Apple's MDM bbx, research
  • Apple Enterprise Developer Services
    • dev, test & prod endpoints incorp.
    • docs & screenshots, lots of magic
    • app enterprise acceptance criteria
    • MacOS Server: Enterprise/profile mgr.
    • Project IMAS/MDM (github) readup
    • Apple Enterprise experience, MDM / MAM
  • Mobile dev, test & beta distribution
    • XCode Apple Enterprise Developer Provisioning
    • XCode Server & bots for testing
    • XCode 9 vs Jenkins/Travis/Custom CI challenge
    • Update local Fastlane Tools
    • New iOS App (details undisclosed)
    • Cucumber, Appium (iOS/Android)
    • Apteligent (crittercism) SDK research
    • Swift, XCode, iOS (Paul Hegarty)
  • Polr pushed to basz.xx (github)
  • Win7/cmd scripts for network monitor + VPN
  • Transparent MITM box/SSL, test certs
  • Virt migration at Hetzner
  • Migrated miklosbagi.com to new virt
  • LetsEncrypt/Cryptbot for public hosts
  • Hetzner Dyndns was made public (github)
  • Nginx Load balancing rev. proxy
    • Nginx reverse proxy via VPN for Postfixadmin
    • Nginx upstream IP autoupdate (inotify)
    • Nginx to metalog, split to host & err/acc
    • Nginx reverse proxies for various services
  • G2L Gentoo Updater (internal)
    • Added vpnmount as pre_exec & post_exec
    • Dispatch-conf for obvious conf migration
    • Backups: cron, config, kernel, sql, scripts, mail, user data, bin pkg (with config)
    • Updates: sync, layman, news, update, newuse, revdep, preserved, glsa
    • Maintenance: glsa fixes, geoip up, spam/ham learn
    • Cleanup: buildtmp, old pkgs, retain policy
    • Notify success / failure, news (pushover)
    • Dynamic per host configs
  • Mail server rebuild
    • Postfix tls, ssl (self-ca), postfixadmin, mariadb, mail address extensions
    • Amavisd, SpamD, Clamav, PostGrey
    • Courier-imap + tls, ssl (self ca), virtual/db
    • SPF, SPF/2, Backup MX
    • OpenDKIM for all domains, DNS Zone ups
    • Roundcube Webmail (intl/vpn)
  • NextCloud
    • NextCloud 11.0.2 migration #1
    • NextCloud 12 migration
      • Caldav & Carddav data
      • New iOS user profiles for Cal+Card
      • NextCloud mobile app on 4xiOS, Android
      • NextCloud desktop on Mac, Win, Linux
      • Storage shares with user (access rights)
      • App data sync of omnifocus, keepass

  2016

  • OwnCloud 10.x + int. Addressbook & Calendars
  • Mobile app dev, test & beta distribution
    • HockeyApp SDK, Crash reporting
    • HockeyKit: iOS, Android Beta distribution
  • On-Demand OpenVPN on iOS (profiles)
  • Testing OpenVPN + Port Knocking
  • Self Root CA, Interm. CA, Auth/Codesign/SMIME
  • Test Management apps / ISTQB friendly:
    • Failed: Tarantula, TestCube, QABook TestCube, QABook, qaManager, Radi, RTH, RTH-Turbo, TCW, TestLink (perf)), Zephyr, SynapseRT, Behave
  • Nginx
    • Nginx + PHP User Certificate Authentication
    • Nginx + php-fpm (php 5.6) migration tests
    • Migrate all Apache hosted stuff to Nginx
  • Migrate tnk back to ext4 (btrfs is meh lol)
  • Pushover (shell) notification integration
    • Caller auto-detection
    • Caller to pushover app mapping
    • Single & bulk notification option
    • User, app, settings defaults for quick
  • Gentoo on tnk (physical), Linux 4.4.6:
    • HW: i7-6700t, 32gb, 2xeth, 2xSSD+4xHDD
    • SSD Raid (mdadm), dmcrypt lvm, btrfs
    • UPSd, SmartD, Fail2Ban, VPN

  2015

  • Trans-handler (shell, undisclosed)
  • DLRouter (php, undisclosed)
  • iTunes Connect, App Store release (abc apps)
  • AppleTV Apps testing, testflight
  • XCode CLI build & provisioning profiles, resign
  • LG NetCast / WebOS Apps testing
  • Samsung STV Orsay Apps testing