Runbooks¶

Operational procedures for the systems built after the sticky note incident and the Git history audit. Each runbook covers one component. Read them in order the first time; after that, go straight to the one you need.

Identity and access:

Keycloak deployment
PostgreSQL backend configuration
Golem authentication implementation
Vaultwarden setup
Backup procedures

Secrets management:

Vault HA deployment
Raft configuration
Database secrets engine setup
AppRole authentication
Dynamic credentials workflows
git-secrets implementation

Observability and alerting:

Graylog cluster deployment
OpenSearch configuration
Input setup
Stream rules
Alert configuration
Prometheus deployment
Grafana dashboards

Network security monitoring:

Zeek deployment
Suricata configuration
Port mirroring setup
Custom script development
Log integration with Graylog
PCAP analysis procedures

Infrastructure access control:

Teleport deployment
Vault SSH secrets engine configuration
Certificate-based authentication setup
Approval workflows
Session recording
RBAC policy examples
Migration from password-based access

Backup and disaster recovery:

Restic deployment
Encryption configuration
Backup scheduling
Monitoring setup
Restore procedures
Testing protocols
Multi-region failover procedure