Skill UI

Details the deployment, hardening, and operation of a resilient Command and Control (C2) infrastructure using the open-source Sliver framework. This guide covers advanced techniques including multi-protocol listeners (mTLS, HTTP/S, DNS, WireGuard), deployable redirectors, and domain fronting, making it essential for authorized red-teaming and sophisticated adversary simulation.

This guide details deploying Tailscale (or self-hosted Headscale) to create a WireGuard-based zero trust mesh VPN. It establishes encrypted peer-to-peer connections between devices, eliminating the need for traditional VPN servers. Features include identity-aware Access Control Lists (ACLs), subnet routing, and secure connectivity for compliance-driven architectures. Use this when enforcing granular, identity-authenticated access control.

This comprehensive guide provides essential security best practices for deploying applications on Fly.io. It covers critical areas such as secrets management, private networking using WireGuard, securing TLS certificates, and properly scoping deploy tokens. The included functions demonstrate how to validate API tokens, verify webhook signatures, and validate deployment configurations to mitigate common cloud and application-level vulnerabilities.

A comprehensive guide to setting up a fast and secure WireGuard VPN server for remote access to your home network (homelab). Learn keypair generation, advanced Linux firewall (iptables) rules, and how to manage different tunneling modes (split vs. full tunnel) for optimal performance.

A comprehensive reference for the `uc` CLI, designed for managing decentralized, self-hosted clusters. Use this skill to deploy services via Docker Compose, configure advanced networking, and manage infrastructure components like machines, volumes, and ports. Supports Caddy ingress routing, WireGuard networking, and scaling across peer machines, making it ideal for robust, highly available self-hosting environments.

A comprehensive guide to setting up a fast and secure WireGuard VPN server for remote access to your home network (homelab). Learn keypair generation, advanced Linux firewall (iptables) rules, and how to manage different tunneling modes (split vs. full tunnel) for optimal performance.

A comprehensive reference for managing Uncloud, a decentralized self-hosting platform. This guide details using the `uc` CLI to deploy services, configure Caddy ingress, manage ports (HTTP/HTTPS/TCP/UDP), scale workloads, and inspect logs across a WireGuard mesh cluster. Ideal for setting up resilient, self-owned microservices infrastructure.

Configure secure network tunnels using WireGuard and OpenVPN protocols. This skill covers setting up remote access for employees, connecting on-premises networks to cloud environments, and encrypting traffic between data centers. It includes server and client configuration, peer management, split tunneling, and firewall rules implementation. Ideal for DevOps engineers and security professionals managing infrastructure connectivity.