Writing

Securing your Linux VMs in Azure with Azure Disk EncryptionDiscover why enabling encryption-at-rest on your Azure Linux VMs isn't enough to protect against disk image theft and how Azure Disk Encryption fills that critical security gap. I walked through the process of configuring DM-Crypt-based encryption on Ubuntu 18.04 VMs, detailing the necessary Key Vault setup and potential deployment quirks you should expect.

azureJune 3, 2021

How to lock down a single confidential Resource Group in AzureI discovered the hard way that standard Azure IAM features cannot block inherited permissions at the Resource Group level, making it impossible to restrict access for specific users without revoking their rights across the entire subscription. In this post, I share the trial-and-error process of finding a workaround to lock down confidential resource groups while maintaining broader access, ultimately revealing why common solutions like deny assignments or Blueprints fall short.

azureMay 22, 2021

Building an integration between Azure Sentinel and Unifi infrastructure for a proper SIEM solutionIf you’re looking to centralize security monitoring for your home network, this guide shows how I leveraged a new Microsoft preview solution to connect Unifi hardware logs to Azure Sentinel. I walk you through provisioning a Linux syslog server in Azure and configuring your Unifi controller to ship data, effectively offloading the heavy lifting of integration to Microsoft.

azureMay 20, 2021

Building a homelab - moving to rack-mounted gear, and refreshing the internal network (Part 1)As I prepare for an upcoming move, I’m redesigning my homelab to transition from scattered equipment to a proper rack-mounted setup that supports my current and future technical experiments. In this first installment, I outline my core requirements—such as a 10 Gigabit backbone, high availability for virtual machines, and dedicated IoT networks—while beginning the process of consolidating my gear into a standardized cabinet.

homelabMay 17, 2021

Review: Ubiquiti Networks' Unifi Dream Machine Pro (UDM-Pro) in a home networkIf you are considering a managed UniFi ecosystem for your home network, this review details my experience upgrading to the UDM-Pro to consolidate my controller, firewall, and surveillance needs into a single 1U device. I share insights on the seamless setup process, the cost of adding a large drive for video storage, and the trade-offs between the new and legacy administrative interfaces.

homelabMay 13, 2021

Changing from Data Gateway to Direct Connection in Power Automate Desktop in a hybrid setupIf you are tired of managing the On-Premises Data Gateway to trigger Power Automate Desktop flows, this post explores the new Direct Connection feature that allows hosts to connect directly to the cloud. I explain how this preview capability simplifies infrastructure by using machine groups instead of gateways, while also providing enhanced monitoring and statistics for your automation hosts.

power automateMay 7, 2021

Building an integration for Plex with Azure API ManagementI discovered that while existing tools like Tautulli could handle my Plex notification needs, I decided to build a custom integration using Azure API Management and Logic Apps to deepen my understanding of Azure services. This post details how I leveraged Plex’s webhook capabilities to trigger notifications for my family whenever new episodes are added to our media server.

azureMay 3, 2021

An in-depth look at Microsoft Power Automate Desktop and building Robotic Process AutomationsDrawing on my extensive background in scripting and automation, I explore the distinction between traditional coding methods and Robotic Process Automation, highlighting when tools like UiPath or Microsoft Power Automate Desktop are the right choice. I walk you through getting started with the free Power Automate Desktop tool, covering installation, login procedures, and the basic structure of creating your first automated flow.

automationApril 28, 2021

Using video during meetings - why, or why not?I explore how my perspective on keeping video enabled during remote meetings has evolved from a rigid stance to a more nuanced approach that balances accountability with practicality. By default, I keep my camera on to maintain focus and presence, but I now make exceptions when mobile or attending large, passive conferences to avoid unnecessary fatigue. This shift allows me to respect others' time while acknowledging the realities of multitasking and different meeting contexts.

microsoft teamsApril 28, 2021

Hey Microsoft Azure, where is my data?If you are curious about exactly where your data physically resides within Microsoft Azure, this post explores the nuances of data residency beyond simple region selection. I share my experience investigating data locations for services like Azure AD to help clarify common misconceptions and provide practical answers to customer questions about data sovereignty.

azureApril 12, 2021

Building a self-hosted secure password management with Bitwarden and DockerAfter finding KeePass too isolated and 1Password cumbersome for family use, I discovered Bitwarden as a flexible, cross-platform alternative that supports self-hosting. I decided to bypass the subscription fees by deploying the open-source Bitwarden-rs fork using Docker on my always-on Synology NAS to create a secure, synchronized password manager.

homelabApril 9, 2021

So, what's up?I’m sharing a long-overdue life update after a year of remote work, reflecting on how my schedule has changed since the pandemic began. I’ll also take you along on our recent family getaway to northern Finland, highlighting our adventures with husky sleds, podcast recording in the snow, and the launch of our new business.

windowsApril 6, 2021

Replacing an Unifi Cloud Key (Gen 1) with a Docker container-based self-hosted solutionIf you are tired of the reliability issues surrounding Ubiquiti’s Unifi Cloud Key hardware, you might want to consider switching to a self-hosted Docker container solution. After experiencing repeated failures with my aging Gen 1 device, I successfully migrated my network management to a Synology NAS running the jacobalberty/unifi container, which proved to be robust, faster, and significantly easier to backup.

dockerApril 2, 2021

A practical look at using Cloudflare to protect and optimize my siteAfter removing invasive tracking scripts to minimize cookies, I switched to Cloudflare’s privacy-friendly Web Analytics to maintain visibility into my site’s traffic without compromising user data. In this post, I share my experience leveraging their free tier to secure my website with SSL/TLS and DDoS protection while enjoying a simple, anonymized view of my audience engagement.

cybersecurityMarch 31, 2021

Completing my Executive MBA journeyI reflect on completing my two-year Executive MBA journey at Hanken and Stockholm School of Economics, sharing insights for those considering a similar path while balancing full-time work. I discuss why I chose the EMBA over other advanced degrees like a Ph.D. and evaluate whether the significant time and financial investment was truly worth it.

certificationsMarch 23, 2021

Securing Microsoft Azure in 10 stepsDrawing on my experience consulting for organizations of various sizes, I provide a practical starting point for securing Microsoft Azure with ten actionable steps that require no additional licensing beyond a standard subscription. This guide focuses on improving your Identity Secure Score and leveraging Azure Advisor recommendations to enhance your cloud security posture effectively.

azureMarch 23, 2021

Renewing Microsoft certifications in 2021If you are wondering how the new Microsoft certification renewal process works in 2021, I share my personal experience navigating the assessment requirements that replaced traditional exam renewals. I explain how to access these free, open-book assessments through your dashboard, noting that they are significantly easier than the original exams but still require a solid understanding of the technology to pass.

certificationsMarch 15, 2021

Review: Corsair K100 opto-mechanical keyboard for a typistAs a heavy typist averaging 1.2 million words annually, I share my transition from the low-profile Corsair K70 to the opto-mechanical K100, motivated primarily by the need for a more comfortable palm rest to alleviate wrist strain. I discuss the adjustment period required for the new OPX switches and share my mixed feelings regarding the hardware changes, offering a candid look at whether this premium keyboard truly enhances the daily typing experience.

productivityMarch 8, 2021

Building secure access to Teslamate using AzureAlthough this post focuses on deploying the open-source Tesla tracking tool Teslamate, I believe it offers valuable insights into Azure’s flexibility for securing services that might apply to your own projects. I walk through my experience hosting Teslamate on a Synology NAS to handle its Docker requirements, while leveraging Azure to establish a secure, authenticated access layer over the default unencrypted HTTP connection.

azureMarch 3, 2021

Disabling and removing Google Analytics tracking from my siteIf you are curious about reducing third-party tracking on your website, this post explains my decision to remove Google Analytics in favor of a more privacy-focused alternative. I switched to Cloudflare Web Analytics to protect user data while still gaining essential insights into traffic sources and popular content.

cybersecurityFebruary 26, 2021