https://mig5.net/ Recent content in Home on mig5 system administration Hugo en-au Sat, 12 Sep 2026 00:00:00 +1000 https://mig5.net/news/qubes-start-deps/ Sat, 12 Sep 2026 00:00:00 +1000 https://mig5.net/news/qubes-start-deps/ A howto for qvm-start-deps: a dom0 script that recursively starts a qube’s declared dependencies (Split SSH vaults, service qubes, custom cross-qube relationships) before the target, using qvm-features as dependency tags. https://mig5.net/news/signal-ai-assistant/ Sat, 05 Sep 2026 00:00:00 +1000 https://mig5.net/news/signal-ai-assistant/ A walkthrough of building a private AI assistant over Signal - with conversation memory, an emoji-driven context reset, a sender allowlist, and a choice between local Ollama inference and a cloud API. https://mig5.net/news/onionshare-cli-systemd/ Sat, 29 Aug 2026 00:00:00 +1000 https://mig5.net/news/onionshare-cli-systemd/ A worked example of running OnionShare CLI as a boot-time systemd service: a persistent Tor onion address for sharing or receiving files, with no torrc edits and no web server to write. https://mig5.net/news/nodered-websocket-push/ Sat, 22 Aug 2026 00:00:00 +1000 https://mig5.net/news/nodered-websocket-push/ Pushing real-time updates to browser clients is easy. Doing it securely - with proper token auth, multi-tab support, and a clean fan-out - is less easy. This is a Node-RED flow that does all three, using a ‘secure hello’ pattern where the client sends a short-lived token after connecting. https://mig5.net/news/php-sqlcipher-history/ Sat, 15 Aug 2026 00:00:00 +1000 https://mig5.net/news/php-sqlcipher-history/ php-sqlcipher has been building drop-in SQLCipher-linked PHP packages since early 2013. What started as a sed-and-compile script is now a Docker + gvisor/runsc pipeline inside a QubesOS VM, tracking SQLCipher across PHP 7.4-8.5 and five Debian/Ubuntu releases. https://mig5.net/news/guardutils/ Sat, 08 Aug 2026 00:00:00 +1000 https://mig5.net/news/guardutils/ GuardUtils is a suite of four small Python CLIs by Marco D’Aleo (SysMD) that share a common philosophy: take the irreversible, mistake-prone commands every sysadmin runs daily and make them reversible, previewable, and fail-closed. chguard, mirro, resrm, and filedust each address a different jam. https://mig5.net/news/cspresso-history/ Sat, 01 Aug 2026 00:00:00 +1000 https://mig5.net/news/cspresso-history/ cspresso uses Playwright’s headless Chromium to crawl a site, observe what loads, and emit a draft Content-Security-Policy header. Over its first few releases it gained CSP bypass, policy evaluation, and non-HTML filtering. https://mig5.net/news/enroll-diff-webhook/ Sat, 25 Jul 2026 00:00:00 +1000 https://mig5.net/news/enroll-diff-webhook/ When a server drifts, you want to know now - not the next time you run a compliance audit. This is a small Node-RED flow that catches Enroll diff webhooks, formats the changes into a readable summary, and sends it to your phone via Signal. Nine nodes, one honest security note. https://mig5.net/news/jinjaturtle-history/ Sat, 18 Jul 2026 00:00:00 +1000 https://mig5.net/news/jinjaturtle-history/ JinjaTurtle started as a quick way to turn TOML and INI files into Jinja2 templates and Ansible defaults. It now handles seven config formats, generates loops from repeated structures, and neutralises template metacharacters to prevent injection from harvested config. https://mig5.net/news/enroll-history/ Sat, 11 Jul 2026 00:00:00 +1000 https://mig5.net/news/enroll-history/ Enroll started as a way to snapshot a snowflake server’s /etc into Ansible roles. After months of development and several security audits, it’s a hardened harvesting tool with remote mode, SOPS encryption, drift detection, and a focus on fail-closed safety. https://mig5.net/about/ Mon, 01 Jan 0001 00:00:00 +0000 https://mig5.net/about/ About Miguel Jacq (he/him) Melbourne-based sysadmin and DevSecOps consultant. Making systems integrate since 2007. Quick facts Australian & French citizen Linux, automation, monitoring, security Remote-friendly (UTC+10/11) How I work I'm known for lateral thinking and pattern recognition - especially when systems are under pressure, or when old infrastructure needs to meet new requirements. Despite many years on the command-line, I have a background in creative writing and can document work and talk through problems clearly, for both technical and non-technical audiences. https://mig5.net/projects/bouquin/ Mon, 01 Jan 0001 00:00:00 +0000 https://mig5.net/projects/bouquin/ Bouquin A local-first notebook & planner with encrypted storage Bouquin ("Book-ahn") is a notebook and planner application written in Python/Qt, backed by SQLCipher so the notebook database is encrypted at rest. Repo Design goals Encrypted-at-rest Every note is a calendar date All changes are version controlled, with a 'diff' viewer Revert to any previous version without losing newer versions Live markdown rendering as you type No syncing: deliberately offline-first Tagging and search One-off or recurring reminders with webhook support Time tracking, invoicing and document storage features Multi-lingual (English, French and Italian translations) Links Source repo Need encryption & key management help? https://mig5.net/contact/ Mon, 01 Jan 0001 00:00:00 +0000 https://mig5.net/contact/ Contact Get in touch Tell me what you're running, what's hurting, and where you want to be in 3–6 weeks. Fastest path Contact form Encrypted email? Use the GPG key link below. Ways to reach me Contact form GPG key Signal: mig5.55 What to include What stack and hosting you're on Where you want to end up (uptime, deploy speed, auditability, costs, etc.) Any deadlines, compliance requirements, or constraints Whether you want ongoing support or a fixed-scope engagement Quick note I'm based in Melbourne (UTC+10/11). https://mig5.net/projects/cspresso/ Mon, 01 Jan 0001 00:00:00 +0000 https://mig5.net/projects/cspresso/ cspresso Turn real page loads into a CSP you can ship cspresso crawls same-origin pages with headless Chromium (Playwright), watches the assets that load, and emits a draft Content-Security-Policy header. Visit cspresso.cafe Repo Copy $ pipx install cspresso $ cspresso https://example.com --max-pages 10 Why it exists CSP is powerful but notoriously fiddly. cspresso automates the "observe what loads" part by letting a real browser execute the app and then distilling observed origins into CSP directives. https://mig5.net/projects/enroll/ Mon, 01 Jan 0001 00:00:00 +0000 https://mig5.net/projects/enroll/ Enroll Get an existing Linux host into Ansible in seconds Enroll inspects a Debian-like or RedHat-like system, harvests the state that matters, and generates Ansible roles/playbooks so you can bring snowflakes under management fast. Visit enroll.sh Repo Copy $ enroll single-shot --harvest ./harvest --out ./ansible $ cd ./ansible && tree -L 2 What it's for Hosts with no config management Fast DR snapshots you can turn into playbooks Detecting drift over time (diff mode + notifications) Highlights Fast Harvest state, then render playbooks locally. https://mig5.net/projects/jinjaturtle/ Mon, 01 Jan 0001 00:00:00 +0000 https://mig5.net/projects/jinjaturtle/ JinjaTurtle Convert real config files into templates you can manage JinjaTurtle is a CLI tool that helps you generate Jinja2 templates and Ansible inventory/vars from native config files (toml/yaml/json/ini/xml and friends). Repo Copy $ jinjaturtle /etc/myapp/config.toml # → Jinja2 template + Ansible defaults When it's useful You inherited a complex config file and need to make it data-driven You want clean diffs and repeatable rollouts You're gradually migrating manual changes into config management Pairs nicely with Enroll Enroll can detect structured configs and hand off to JinjaTurtle for templating. https://mig5.net/thanks/ Mon, 01 Jan 0001 00:00:00 +0000 https://mig5.net/thanks/ Message received Thanks for reaching out! I'll get back to you soon. Explore services Browse projects Back home In the meantime Check out Enroll and cspresso If you need encrypted email, grab the GPG key