Best practices for a Linux system at Duke, and requirements for public ssh access: OS kept updated and running a supported distro Logs are sent to splunk CrowdStrike Falcon is installed MFA via duo for password authenitcation Reporting system information into planisphere Technical example for these are available here: Duke GitLab

Video recording of the 2020-12-15 meeting on Certbot and ACME is available here: Duke Box VOD

Demo And Discussion Zoom VOD A two part demo and discussion on Hashicorp Vault setup. This setup is using raft internal storage rather than consul.