Central Linux logins: LDAP or SSH CA
Centralize Linux logins so one change reaches every server. Compare a directory with SSSD, an SSH certificate authority, and Ansible-managed keys.
#access-control
Filtering by topic #access-control · clear
mTLS: client certificates with nginx
Lock an admin panel behind mTLS: build a private CA with openssl, issue client certificates, and configure nginx to refuse anyone without one.