Powershell
guest@6admin.io:~$ ls ~/tags/powershell
Scripting is not industrialising
The boundary between ad hoc scripting and an automation platform: desired state, idempotence, inventory, secrets, reporting, traceability. Windows automates very well too; the difference is not the OS, it is platform versus script.
Nginx on Windows in front of Jenkins: the proxy, the logs and the upgrades
Nginx on Windows Server terminating TLS in front of Jenkins: the UI and the WebSocket agents in a single location, the certificate through simple-acme and above all the two operational nuisances nobody writes about on Windows, log rotation and the Chocolatey upgrade.
Which identity runs the service and who can prove it
Windows service accounts: managed accounts, least privilege and traceability of what runs under which identity.
PowerShell execution policy and what it is not
PowerShell ExecutionPolicy: what it actually protects, what it does not and the known bypasses.
Driving Windows from Ansible without leaking credentials
Ansible transport to Windows: WinRM, Kerberos over NTLM and how not to carry domain credentials in cleartext.
Hardening WinRM
WinRM hardening: transport, authentication and what to lock down before exposing Windows remote management.