Skip to content

Commit 1398dcd

Browse files
committed
fixed
1 parent 1294b0c commit 1398dcd

7 files changed

+33
-36
lines changed

_posts/2024-11-26-eap-tls.md

+7-9
Original file line numberDiff line numberDiff line change
@@ -5,8 +5,6 @@ title: Enhancing WiFi Security with EAP-TLS
55

66
![EAP Ascii](/assets/eap.png "eap ascii")
77

8-
# **🔒 Enhancing WiFi Security with EAP-TLS**
9-
108
---
119

1210
## **Introduction**
@@ -17,11 +15,11 @@ This post covers the motivations behind this initiative, the technical approach,
1715

1816
---
1917

20-
## **🚀 Why Choose EAP-TLS?**
18+
## **🔑 Why Choose EAP-TLS?**
2119

2220
Traditional WiFi security measures, such as password-based authentication, often fall short against advanced threats like phishing or brute force attacks. **EAP-TLS**, by leveraging digital certificates, ensures that only authorized devices can connect to the network.
2321

24-
### 🔑 Benefits of EAP-TLS:
22+
### Benefits of EAP-TLS:
2523
- **Stronger Security**: Certificates replace passwords, mitigating risks associated with weak or stolen credentials.
2624
- **Improved User Experience**: No need for users to manage complex passwords—authentication is seamless.
2725
- **Scalability**: Ideal for large organizations with diverse devices and users.
@@ -44,21 +42,21 @@ To achieve this, we integrated:
4442

4543
---
4644

47-
## **⚙️ Crafting the Solution**
45+
## **🔐 Crafting the Solution**
4846

4947
### **1. Building the Foundation with ADCS**
5048
The backbone of our solution was a Certificate Authority (CA). Using **Active Directory Certificate Services (ADCS)**, we set up an enterprise root CA named `Agicap-CA`. This CA handles certificate issuance, ensuring only authenticated devices can access the network.
5149

5250
### **2. Automating Certificate Management with SCEP**
5351
To simplify certificate distribution, we implemented **Simple Certificate Enrollment Protocol (SCEP)**. SCEP automates certificate issuance and renewal, reducing manual effort and minimizing errors.
5452

55-
### **3. 🔐 Secure Authentication with FreeRADIUS**
53+
### **3. Secure Authentication with FreeRADIUS**
5654
**FreeRADIUS**, deployed on Debian servers, acts as the authentication server. Configured to trust `Agicap-CA`, FreeRADIUS ensures that only devices with valid certificates can access the WiFi network.
5755

58-
### **4. 📡 Network Management with Meraki**
56+
### **4. Network Management with Meraki**
5957
Using Meraki's dashboard, we uploaded the root CA certificate (`Agicap-CA`) and configured the SSID to interact securely with FreeRADIUS servers. This guarantees that only authenticated devices connect to our network.
6058

61-
### **5. 📱 Centralized Device Management with Intune**
59+
### **5. Centralized Device Management with Intune**
6260
With **Microsoft Intune**, we distributed root certificates and WiFi profiles across:
6361
- **Windows**
6462
- **macOS**
@@ -67,7 +65,7 @@ With **Microsoft Intune**, we distributed root certificates and WiFi profiles ac
6765

6866
This approach ensures consistent security policies and seamless onboarding for users.
6967

70-
### **6. 🌩️ Deploying on Azure with Terraform**
68+
### **6. Deploying on Azure with Terraform**
7169
For scalability and high availability, we deployed FreeRADIUS servers on **Azure** using **Terraform**. Load balancers ensure reliability, while infrastructure as code simplifies updates and scaling across regions.
7270

7371
---

_posts/2024-11-26-network.md

+3-1
Original file line numberDiff line numberDiff line change
@@ -3,10 +3,12 @@ layout: post
33
title: Networking for a New Office
44
---
55

6-
# **🌐 Building a Robust Network for Our New Italy Office: From Concept to Completion**
6+
![Cisco Ascii](/assets/cisco.png "cisco ascii")
77

88
---
99

10+
## **Introduction**
11+
1012
Expanding to a new office location is an exciting milestone, but it also comes with the critical responsibility of establishing a secure and efficient network infrastructure. Recently, I had the opportunity to lead the complete network installation for Agicap's new office in Italy. This project encompassed everything from initial planning to the seamless integration of advanced networking components. Here's a glimpse into why we undertook this endeavor, how we executed it, and the impressive outcomes we've achieved.
1113

1214
---

_posts/2024-11-26-terraform.md

+10-10
Original file line numberDiff line numberDiff line change
@@ -5,10 +5,10 @@ title: Automating Infrastructure with Terraform
55

66
![Terraform Ascii](/assets/terraform.png "terraform ascii")
77

8-
# **🤖 Automating Infrastructure with Terraform**
9-
108
---
119

10+
## **Introduction**
11+
1212
In the ever-evolving landscape of technology, **automation** and **security** are pivotal for efficient and reliable operations. At Agicap, I spearheaded several **Terraform-based projects** that not only streamlined our infrastructure management but also fortified our security posture. This blog post explores the motivations behind these initiatives, the strategies I employed, and the impactful results we achieved.
1313

1414
---
@@ -29,10 +29,10 @@ Additionally, integrating Terraform with our **security tools** ensured that our
2929

3030
### **1️⃣ Efficient Management of Azure Resources**
3131

32-
**📌 Motivation:**
32+
**Motivation:**
3333
Agicap's operations spanned multiple regions, requiring a robust and scalable cloud infrastructure. Managing Azure resources manually was becoming increasingly cumbersome and prone to inconsistencies.
3434

35-
**🔧 Approach:**
35+
**Approach:**
3636
I developed comprehensive **Terraform modules** tailored for Azure, enabling automated deployment and management of resources such as virtual networks, storage accounts, and compute instances. These modules encapsulated best practices, ensuring that deployments were efficient and aligned with organizational standards.
3737

3838
**📈 Results:**
@@ -44,10 +44,10 @@ I developed comprehensive **Terraform modules** tailored for Azure, enabling aut
4444

4545
### **2️⃣ Securing Secrets with HashiCorp Vault**
4646

47-
**📌 Motivation:**
47+
**Motivation:**
4848
Managing sensitive information like API keys, passwords, and certificates securely is critical. Traditional methods were inadequate, posing potential security risks.
4949

50-
**🔧 Approach:**
50+
**Approach:**
5151
Using Terraform, I integrated **HashiCorp Vault** into our infrastructure. This setup facilitated secure storage, access, and management of secrets. By automating Vault's deployment and configuration, we ensured the highest levels of security.
5252

5353
**📈 Results:**
@@ -59,10 +59,10 @@ Using Terraform, I integrated **HashiCorp Vault** into our infrastructure. This
5959

6060
### **3️⃣ Streamlining User and Application Management with Okta Integration**
6161

62-
**📌 Motivation:**
62+
**Motivation:**
6363
As Agicap scaled, managing user identities and application access manually was inefficient and posed security challenges.
6464

65-
**🔧 Approach:**
65+
**Approach:**
6666
I automated the integration of **Okta** using Terraform. This included provisioning user accounts, managing group memberships, and configuring application access policies, all codified for reliability and scalability.
6767

6868
**📈 Results:**
@@ -74,10 +74,10 @@ I automated the integration of **Okta** using Terraform. This included provision
7474

7575
### **4️⃣ Optimizing GitHub Organization Management**
7676

77-
**📌 Motivation:**
77+
**Motivation:**
7878
With numerous repositories and teams, managing GitHub organizations manually was becoming unwieldy and inconsistent.
7979

80-
**🔧 Approach:**
80+
**Approach:**
8181
Using Terraform, I streamlined the management of **GitHub organization settings and repositories**. This included automating repository creation, configuring access controls, and enforcing policies.
8282

8383
**📈 Results:**

assets/cisco.png

5.38 KB
Loading

assets/eap.png

-5.2 KB
Loading

assets/terraform.png

1.18 KB
Loading

projects.md

+13-16
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
---
22
layout: default
3-
title: Projects
3+
title: Projects Archive
44
permalink: /projects/
55
---
66

@@ -14,31 +14,28 @@ Welcome to my project archive! Here, you can explore all my blog posts and case
1414

1515
{% assign postsByYearMonth = site.posts | group_by_exp: "post", "post.date | date: '%B %Y'" %}
1616
{% for yearMonth in postsByYearMonth %}
17-
### {{ yearMonth.name }}
18-
<ul class="project-list">
19-
{% for post in yearMonth.items %}
20-
<li>
21-
<a href="{{ post.url }}" class="project-link">{{ post.title }}</a>
22-
</li>
23-
{% endfor %}
24-
</ul>
17+
### {{ yearMonth.name }}
18+
<ul class="project-list">
19+
{% for post in yearMonth.items %}
20+
<li>
21+
<a href="{{ post.url }}" class="project-link">{{ post.title }}</a>
22+
</li>
23+
{% endfor %}
24+
</ul>
2525
{% endfor %}
2626

27-
<style>
28-
/* Archive Page Styles */
29-
body {
30-
font-family: 'Arial', sans-serif;
31-
line-height: 1.6;
32-
}
27+
---
3328

29+
<style>
30+
/* Archive Page Styling */
3431
h1 {
3532
text-align: center;
3633
margin-bottom: 1.5rem;
3734
}
3835

3936
h2, h3 {
4037
color: #007acc;
41-
margin-top: 2rem;
38+
margin-top: 1.5rem;
4239
}
4340

4441
.project-list {

0 commit comments

Comments
 (0)