Projects on mig5 https://mig5.net/projects/ Recent content from Projects on mig5 Hugo -- gohugo.io en-au Bouquin https://mig5.net/projects/bouquin/ Mon, 01 Jan 0001 00:00:00 +0000 https://mig5.net/projects/bouquin/
Bouquin

A local-first notebook & planner with encrypted storage

Bouquin ("Book-ahn") is a notebook and planner application written in Python/Qt, backed by SQLCipher so the notebook database is encrypted at rest.

Repo

Design goals

  • Encrypted-at-rest
  • Every note is a calendar date
  • All changes are version controlled, with a 'diff' viewer
  • Revert to any previous version without losing newer versions
  • Live markdown rendering as you type
  • No syncing: deliberately offline-first
  • Tagging and search
  • One-off or recurring reminders with webhook support
  • Time tracking, invoicing and document storage features
  • Multi-lingual (English, French and Italian translations)
Links
Need encryption & key management help?
I do security-minded sysadmin work: hardening, secrets, and auditability.
Contact me
]]>
Bouquin

A local-first notebook & planner with encrypted storage

Bouquin ("Book-ahn") is a notebook and planner application written in Python/Qt, backed by SQLCipher so the notebook database is encrypted at rest.

Repo

Design goals

  • Encrypted-at-rest
  • Every note is a calendar date
  • All changes are version controlled, with a 'diff' viewer
  • Revert to any previous version without losing newer versions
  • Live markdown rendering as you type
  • No syncing: deliberately offline-first
  • Tagging and search
  • One-off or recurring reminders with webhook support
  • Time tracking, invoicing and document storage features
  • Multi-lingual (English, French and Italian translations)
Links
Need encryption & key management help?
I do security-minded sysadmin work: hardening, secrets, and auditability.
Contact me
]]> CSPresso https://mig5.net/projects/cspresso/ Mon, 01 Jan 0001 00:00:00 +0000 https://mig5.net/projects/cspresso/
CSPresso

Turn real page loads into a CSP you can ship

cspresso crawls same-origin pages with headless Chromium (Playwright), watches the assets that load, and emits a draft Content-Security-Policy header.

Visit cspresso.cafe Repo 
$ pipx install cspresso
$ cspresso https://example.com --max-pages 10

Why it exists

CSP is powerful but notoriously fiddly. cspresso automates the "observe what loads" part by letting a real browser execute the app and then distilling observed origins into CSP directives.

It can help with

  • Discovering which origins your app actually depends on
  • Drafting a baseline policy for review
  • Evaluating candidates as Report-Only and failing CI on violations
Links
Need a CSP rollout?
I can help you roll out CSP safely with monitoring, reporting, and staged enforcement.
Contact me
]]>
CSPresso

Turn real page loads into a CSP you can ship

cspresso crawls same-origin pages with headless Chromium (Playwright), watches the assets that load, and emits a draft Content-Security-Policy header.

Visit cspresso.cafe Repo 
$ pipx install cspresso
$ cspresso https://example.com --max-pages 10

Why it exists

CSP is powerful but notoriously fiddly. cspresso automates the "observe what loads" part by letting a real browser execute the app and then distilling observed origins into CSP directives.

It can help with

  • Discovering which origins your app actually depends on
  • Drafting a baseline policy for review
  • Evaluating candidates as Report-Only and failing CI on violations
Links
Need a CSP rollout?
I can help you roll out CSP safely with monitoring, reporting, and staged enforcement.
Contact me
]]> DumpTales https://mig5.net/projects/dumptales/ Mon, 01 Jan 0001 00:00:00 +0000 https://mig5.net/projects/dumptales/
DumpTales

Find the story between two database snapshots

DumpTales compares MySQL or MariaDB SQL dumps, experimental PostgreSQL COPY dumps, and native SQLite databases. See added, removed and modified rows by primary key without connecting to the database.

Read the example Source and installation
DumpTales duck and database logo

A quick comparison

dumptales old.sql.gz new.sql.gz

dumptales old.sql new.sql --format json > changes.json

DumpTales runs locally and reads snapshots without executing their SQL. MySQL dumps in compatible primary-key order stream through; unordered data uses temporary compressed partitions. SQL dialect and gzip, bzip2 or single-file ZIP compression are detected automatically. Schema coverage varies by dialect. Read the worked example and limitations before using it with your own dumps.

]]>
DumpTales

Find the story between two database snapshots

DumpTales compares MySQL or MariaDB SQL dumps, experimental PostgreSQL COPY dumps, and native SQLite databases. See added, removed and modified rows by primary key without connecting to the database.

Read the example Source and installation
DumpTales duck and database logo

A quick comparison

dumptales old.sql.gz new.sql.gz

dumptales old.sql new.sql --format json > changes.json

DumpTales runs locally and reads snapshots without executing their SQL. MySQL dumps in compatible primary-key order stream through; unordered data uses temporary compressed partitions. SQL dialect and gzip, bzip2 or single-file ZIP compression are detected automatically. Schema coverage varies by dialect. Read the worked example and limitations before using it with your own dumps.

]]> Enroll https://mig5.net/projects/enroll/ Mon, 01 Jan 0001 00:00:00 +0000 https://mig5.net/projects/enroll/
Enroll

Get an existing Linux host into Ansible in seconds

Enroll inspects a Debian-like or RedHat-like system, harvests the state that matters, and generates Ansible roles/playbooks so you can bring snowflakes under management fast.

Visit enroll.sh Repo 
$ enroll single-shot --harvest ./harvest --out ./ansible
$ cd ./ansible && tree -L 2

What it's for

  • Hosts with no config management
  • Fast DR snapshots you can turn into playbooks
  • Detecting drift over time (diff mode + notifications)

Highlights

Fast
Harvest state, then render playbooks locally.
Safe-by-default harvesting
Heuristics to avoid likely secrets; opt-in for more.
Remote over SSH
Harvest from your workstation; generate output locally.
Optional encryption
Store harvests/manifests encrypted at rest (SOPS/GPG).
Links
Need help enrolling infra?
I do contract sysadmin work and can help you adopt tooling like this safely.
Contact me
]]>
Enroll

Get an existing Linux host into Ansible in seconds

Enroll inspects a Debian-like or RedHat-like system, harvests the state that matters, and generates Ansible roles/playbooks so you can bring snowflakes under management fast.

Visit enroll.sh Repo 
$ enroll single-shot --harvest ./harvest --out ./ansible
$ cd ./ansible && tree -L 2

What it's for

  • Hosts with no config management
  • Fast DR snapshots you can turn into playbooks
  • Detecting drift over time (diff mode + notifications)

Highlights

Fast
Harvest state, then render playbooks locally.
Safe-by-default harvesting
Heuristics to avoid likely secrets; opt-in for more.
Remote over SSH
Harvest from your workstation; generate output locally.
Optional encryption
Store harvests/manifests encrypted at rest (SOPS/GPG).
Links
Need help enrolling infra?
I do contract sysadmin work and can help you adopt tooling like this safely.
Contact me
]]> Heckle https://mig5.net/projects/heckle/ Mon, 01 Jan 0001 00:00:00 +0000 https://mig5.net/projects/heckle/
Heckle

Bring an existing git forge under Infrastructure as Code

Heckle inventories a GitHub, GitLab, Gitea or Forgejo namespace, maps supported objects to provider import contracts, and emits an editable project of .tf files and local modules you can adopt with Terraform or OpenTofu. The name is a play on HCL.

Visit heckle.tf Repo 
$ export GITHUB_TOKEN='...'
$ heckle generate github --org example --out ./iac
$ cd ./iac && tofu plan

What it's for

  • Forges with repos, teams, protections and webhooks but no IaC
  • Bringing org/group/repo setup into Terraform or OpenTofu
  • Auditing and reproducing forge configuration as code

Highlights

Safe, no-op discovery
Reads the forge and generates HCL; never runs apply and never persists disposable validation state.
Four forges
GitHub, GitLab, Gitea and Forgejo, including orgs, groups and personal accounts.
Rehearsed adoption
Classifies known provider behaviour and stops on unrecognised plan changes.
Terraform or OpenTofu
OpenTofu is the default; pass --tf terraform to choose otherwise. Heckle itself is not required after adoption.
Links
Heckle is currently alpha software.
Need help adopting IaC?
I can help you bring existing forges and infrastructure under Terraform or OpenTofu safely.
Contact me
]]>
Heckle

Bring an existing git forge under Infrastructure as Code

Heckle inventories a GitHub, GitLab, Gitea or Forgejo namespace, maps supported objects to provider import contracts, and emits an editable project of .tf files and local modules you can adopt with Terraform or OpenTofu. The name is a play on HCL.

Visit heckle.tf Repo 
$ export GITHUB_TOKEN='...'
$ heckle generate github --org example --out ./iac
$ cd ./iac && tofu plan

What it's for

  • Forges with repos, teams, protections and webhooks but no IaC
  • Bringing org/group/repo setup into Terraform or OpenTofu
  • Auditing and reproducing forge configuration as code

Highlights

Safe, no-op discovery
Reads the forge and generates HCL; never runs apply and never persists disposable validation state.
Four forges
GitHub, GitLab, Gitea and Forgejo, including orgs, groups and personal accounts.
Rehearsed adoption
Classifies known provider behaviour and stops on unrecognised plan changes.
Terraform or OpenTofu
OpenTofu is the default; pass --tf terraform to choose otherwise. Heckle itself is not required after adoption.
Links
Heckle is currently alpha software.
Need help adopting IaC?
I can help you bring existing forges and infrastructure under Terraform or OpenTofu safely.
Contact me
]]> JinjaTurtle https://mig5.net/projects/jinjaturtle/ Mon, 01 Jan 0001 00:00:00 +0000 https://mig5.net/projects/jinjaturtle/
JinjaTurtle

Convert real config files into templates you can manage

JinjaTurtle is a CLI tool that helps you generate Jinja2 templates and Ansible inventory/vars from native config files (toml/yaml/json/ini/xml and friends).

Repo 
$ jinjaturtle /etc/myapp/config.toml
# → Jinja2 template + Ansible defaults

When it's useful

  • You inherited a complex config file and need to make it data-driven
  • You want clean diffs and repeatable rollouts
  • You're gradually migrating manual changes into config management
Pairs nicely with Enroll
Enroll can detect structured configs and hand off to JinjaTurtle for templating.
Links
Want to template infra safely?
I can help you adopt config management without breaking prod.
Contact me
]]>
JinjaTurtle

Convert real config files into templates you can manage

JinjaTurtle is a CLI tool that helps you generate Jinja2 templates and Ansible inventory/vars from native config files (toml/yaml/json/ini/xml and friends).

Repo 
$ jinjaturtle /etc/myapp/config.toml
# → Jinja2 template + Ansible defaults

When it's useful

  • You inherited a complex config file and need to make it data-driven
  • You want clean diffs and repeatable rollouts
  • You're gradually migrating manual changes into config management
Pairs nicely with Enroll
Enroll can detect structured configs and hand off to JinjaTurtle for templating.
Links
Want to template infra safely?
I can help you adopt config management without breaking prod.
Contact me
]]>