Decisions
A transparent log of technical decisions I've made while automating and securing infrastructure. Each entry documents the context, alternatives considered, and the reasoning behind the choice.
5 decisions documented
Adopting OpenClaude as a Coding AgentA growing share of day-to-day work—automation scripting, infrastructure-as-code, and small development tasks—benefits from an AI coding agent that can read a repository, run comman...Read decisionChoosing OpenBao and Vaultwarden for Secrets ManagementSecrets for machine-to-machine communication and personal/shared credentials were scattered across configuration files and informal channels, without a consistent way to rotate or...Read decisionDeploying FreeIPA for Centralised Identity ManagementUser and host identities were managed inconsistently across systems, with no single source of truth for accounts, groups, or DNS records tied to hosts.
Read decisionAutomating Certificate Issuance with ACME Instead of Manual RenewalTLS certificates across managed machines were issued and renewed manually, which meant renewals were easy to miss and created recurring outage risk when certificates expired unnoti...Read decisionAutomating BlueCat DNS Configuration with AnsibleDNS records across the university infrastructure were maintained manually in the BlueCat DNS management platform, making changes slow, inconsistent, and hard to audit across the In...Read decision