The Curious Engineer

All blogs / Networking

Jan-Piet Mens

jpmens.net

NetworkingSecurityDevOps / SRE / infrastructureLinux / Unix

’05’10’15’20’25
Posts
1,633 from 23 Aug 2005 to 13 Oct 2026
Posting
monthly (9 in the last year)
Kind
personal blog
Feed
https://jpmens.net/atom.xml

Latest

October 2026

  1. Root DNSSEC trust anchors

August 2026

  1. Yet another password manager: pass with Pass for iOS

July 2026

  1. Rediscovering converting reveal.js slides to PDF

May 2026

  1. A wiki from a single Go binary: LeoMoon Wiki-Go

April 2026

  1. Deploying SSH host keys and certificates with Ansible
  2. SSH certificates: the better SSH experience

January 2026

  1. Providing zone transfers directly from Netbox DNS
  2. My Albert Heijn shopping bag
  3. Ansible lookup plugin for generating TSIG keys

October 2025

  1. Notes to self: Semaphore-UI secrets

August 2025

  1. A friend in need ...
  2. Blast from the past: Facit A2400 terminal
  3. Accessing KeePassXC password stores with an Ansible lookup plugin
  4. If only I'd known ... Debian repo signing
  5. Git credentials helper

July 2025

  1. tmux and gist and trying to make students happier

May 2025

  1. Migrating BIND9 auto-dnssec to dnssec-policy

April 2025

  1. Overriding GnuPG's PIN entry
  2. Forwarding GnuPG agent over SSH

March 2025

  1. A very theoretical scenario, DNS edition
  2. SSH keys from a command: sshd's AuthorizedKeysCommand directive
  3. DNSSEC Policy and Key template support in NetBox DNS
  4. A look at DNS hosting with deSEC

February 2025

  1. Notes to self: signing git commits with an SSH key
  2. Notes to self on OctoDNS and its providers
  3. NetBox and Configuration Contexts/Templates
  4. Netbox, DNS, and a pinch of OctoDNS
  5. Notes to self on NetBox and Ansible
  6. Ansible one hundred

January 2025

  1. Create a new issue in a Github repository with Ansible
  2. Geolocation in Ansible Local Facts
  3. Uploading a message to an IMAP server using curl

December 2024

  1. Tagging POI locations with photos from OwnTracks

October 2024

  1. My small kit of tools
  2. Notes to self: GNOME keyring and libsecret

September 2024

  1. The dot in domain names

August 2024

  1. A revoked DNSSEC KSK in dnsviz
  2. Sunday setups

July 2024

  1. X-MS-Bullshit mail reactions
  2. When my systems send me instructions

June 2024

  1. Eleven years with OwnTracks

April 2024

  1. The times, they change
  2. Notes to self on directing a gpg-agent into a podman container for Ansible Vault
  3. Notes to self: distributing issued ACME DNS-01 certificates

March 2024

  1. RESOLV.CONF (upper case)
  2. Ansible's template module vs. template filter: an unfair comparison

February 2024

  1. Using 2FAS TOTP codes in the terminal
  2. Notes to self: Authy desktop is dead
  3. @rr@txt.udp53.org is NXDOMAIN

January 2024

  1. How not to pre-calculate time zones
  2. Chatting with FLOSS Weekly about OwnTracks

September 2023

  1. Notes to self on Woodpecker-CI
  2. On the importance of logging

August 2023

  1. Using events to drive Ansible: rulebooks

July 2023

  1. Adieu OpenDNSSEC, bienvenido Knot-DNS!

June 2023

  1. Encrypted Ansible local facts and an age encryption/decryption filter

April 2023

  1. The ZONEMD (message digest) resource record

February 2023

  1. Notes to self: Ansible, SSH, and a password
  2. How Knot-DNS simplifies adding member zones to a catalog zone

January 2023

  1. Notes to self: KeePassXC

December 2022

  1. Some things I blogged about in 2022
  2. DNSViz at home
  3. An experimental GoToSocial installation

November 2022

  1. DNSSEC "key tag" or "key ID"?
  2. Red means Kaputt: when DNSSEC turns into a treasure hunt
  3. DNSSEC with NLnetLabs' LDNS and NSD

October 2022

  1. A nifty push notification system: ntfy
  2. Ansible local facts on Windows nodes
  3. Ideas for using Ansible local facts
  4. Ansible module_defaults and a lookup plugin
  5. DNSSEC signing with the se.SAM N200 HSM with PKCS#11

September 2022

  1. DNSSEC signing with an offline KSK

August 2022

  1. allow-new-zones in BIND 9.16 on CentOS 8 Stream under SELinux

July 2022

  1. An Ansible reference sheet
  2. A human and a spreadsheet

June 2022

  1. Ten years of Ansible

May 2022

  1. A backup is only as good as ...
  2. One gotty(1) Web terminal per user

April 2022

  1. Back to the drawing board: Ansible training machines

January 2022

  1. My requirement for DNSSEC: a napkin
  2. Fun with the DNS SOA expire field

December 2021

  1. Ansible vault password in macOS keychain

November 2021

  1. GeoIP with BIND >= 9.16
  2. PAM SSH agent authentication (with Ansible)
  3. A cow and bull story about Ansible
  4. Ansible "pull mode" or "Runner" as fail-safe rollback methods

October 2021

  1. Vanity DNSSEC key tags
  2. DNSSEC provisioning automation with CDS/CDNSKEY in the real world

September 2021

  1. Specifying duration in BIND's named.conf

June 2021

  1. When and where did our vehicles stop for fuel?
  2. SSH with a SmartCard-HSM and EC keys
  3. A diagram to depict the DNSSEC chain of trust
  4. Using a SmartCard-HSM for DNSSEC with BIND, Knot DNS, and LDNS/NSD

May 2021

  1. Transitioning the .CY ccTLD to DNSSEC
  2. DNS open zone data
  3. An iOS app update that really annoys me

April 2021

  1. Time to solve: 10800 seconds
  2. Storing generic passwords in macOS' keychain
  3. The Unix Magic poster

March 2021

  1. On towels, DNS, and strncmp()
  2. Configure SSH ProxyCommand for Ansible AWX on Kubernetes
  3. Paternoster: a CLI to invoke Ansible playbooks
  4. Alter Ansible's output on debugging
  5. An advanced Ansible course

December 2020

  1. BIND named 'grants' using external authenticator
  2. Look who's rolling his keys ...

November 2020

  1. Delock MQTT-enabled power socket switches

October 2020

  1. Fun with tweets and the Joplin API
  2. Airports of the world, and other data in DNS

September 2020

  1. Using {{ ansible_managed }} in Ansible templates
  2. It used to be simpler to teach

April 2020

  1. Rediscovering CardDAV
  2. Zulu time in the macOS status bar

March 2020

  1. To Zoom or not to Zoom
  2. How to dial a tel: URI with a shell script on macOS
  3. Reverse geocoding the bakery
  4. Looking up words with DICT
  5. $MAILPATH
  6. Simple solution for outgoing mail from a FreeBSD system
  7. New desk phone: Grandstream GXP2135

February 2020

  1. Dial A for Ansible and R for Runner
  2. Charlie &
  3. Short report on the FreeBSD training machine
  4. BIND 9.16 query utilities speak YAML
  5. Dynamic DNS update on self after DHCP
  6. My small Ansible inventory poll
  7. Reading and writing Ansible vault files

January 2020

  1. Creating a simple Python pip repository
  2. Anonymous FTP server on OpenBSD

December 2019

  1. TCP Wrappers and Mosquitto
  2. Display IP address of machine on console
  3. A bit of fun with awk
  4. On building an Ansible training environment on FreeBSD
  5. Add address of FreeBSD iocage jails to PF table

November 2019

  1. OwnTracks on macOS
  2. An authoritative Knot

September 2019

  1. EuroBSDCon 2019
  2. To meet up or not to meetup

August 2019

  1. Testing an OnlyKey hardware password manager
  2. Presentation pointer

June 2019

  1. I care about Ansible
  2. A word or two about a $EDITOR

May 2019

  1. BSDCan 2019
  2. LOADays 2019

April 2019

  1. Automatically start or attach tmux in SSH session
  2. Custom credentials in Ansible Tower/AWX
  3. I mirror my Github repositories to Gitea/Forgejo
  4. Remote-controlling a Restic backup
  5. Challenge accepted: OpenBSD on a laptop
  6. I clone all GitHub repositories I've starred

Every year

2026 92025 232024 192023 92022 212021 232020 252019 272018 72017 82016 132015 282014 202013 412012 762011 1142010 1162009 1682008 1282007 3002006 3502005 108