SecOps.it

I just remembered a funny chain of events.

Some time ago, a colleague texted me asking why our secondary GitLab server was not only restricted to outsiders, but also (without getting into too many details) had its front-end locked down with an auth_basic directive in Nginx?
I jokingly replied that if it was really making his life miserable, we could disable it for his pool of IPs, both work and home. Or he could just open it himself, since he’s a sysadmin too.

And that was that.