From ef4fb1b87052099c92303ad86a4c3593b7476490 Mon Sep 17 00:00:00 2001
From: davegallant <davegallant@users.noreply.github.com>
Date: Fri, 17 Sep 2021 21:11:01 +0000
Subject: [PATCH] deploy: 693301b03763e8d268ed1e4f7384c56f555cc452

---
 404.html                                      |  10 +-
 about/index.html                              |   8 +-
 authors/index.html                            |  10 +-
 .../16/appgate-sdp-on-arch-linux/index.html   |   8 +-
 .../06/what-to-do-with-a-homelab/index.html   |   8 +-
 .../08/why-i-threw-out-my-dotfiles/index.html |  13 +-
 .../index.html                                | 185 ++++++++++++++++++
 index.html                                    |  23 ++-
 index.xml                                     |   2 +-
 page/index.html                               |  10 +-
 page/search/index.html                        |   8 +-
 page/search/index.json                        |   2 +-
 post/index.html                               |  23 ++-
 post/index.xml                                |   2 +-
 sitemap.xml                                   |   2 +-
 tags/adguard/index.html                       |  10 +-
 tags/aws-vault/index.html                     | 166 ++++++++++++++++
 tags/aws-vault/index.xml                      |   1 +
 tags/aws-vault/page/1/index.html              |   1 +
 tags/aws/index.html                           | 166 ++++++++++++++++
 tags/aws/index.xml                            |   1 +
 tags/aws/page/1/index.html                    |   1 +
 tags/dotfiles/index.html                      |  10 +-
 tags/grafana/index.html                       |  10 +-
 tags/home-manager/index.html                  |  10 +-
 tags/homelab/index.html                       |  10 +-
 tags/index.html                               |  18 +-
 tags/index.xml                                |   2 +-
 tags/jellyfin/index.html                      |  10 +-
 tags/linux/index.html                         |  10 +-
 tags/netdata/index.html                       |  10 +-
 tags/nix/index.html                           |  10 +-
 tags/pihole/index.html                        |  10 +-
 tags/plex/index.html                          |  10 +-
 tags/python/index.html                        |  23 ++-
 tags/python/index.xml                         |   2 +-
 tags/security/index.html                      | 166 ++++++++++++++++
 tags/security/index.xml                       |   1 +
 tags/security/page/1/index.html               |   1 +
 tags/tailscale/index.html                     |  10 +-
 tags/virtualization/index.html                |  10 +-
 tags/vpn/index.html                           |  10 +-
 42 files changed, 949 insertions(+), 54 deletions(-)
 create mode 100644 blog/2021/09/17/automatically-rotating-aws-access-keys/index.html
 create mode 100644 tags/aws-vault/index.html
 create mode 100644 tags/aws-vault/index.xml
 create mode 100644 tags/aws-vault/page/1/index.html
 create mode 100644 tags/aws/index.html
 create mode 100644 tags/aws/index.xml
 create mode 100644 tags/aws/page/1/index.html
 create mode 100644 tags/security/index.html
 create mode 100644 tags/security/index.xml
 create mode 100644 tags/security/page/1/index.html

diff --git a/404.html b/404.html
index 61e87dc7..1ba70341 100644
--- a/404.html
+++ b/404.html
@@ -7,7 +7,7 @@
 <meta property="og:description" content="personal blog">
 <meta property="og:url" content="/404.html">
 <meta property="og:site_name" content="davegallant">
-<meta property="og:type" content="website"><meta property="og:updated_time" content="2021-09-08T00:42:33-04:00"><meta name=twitter:card content="summary">
+<meta property="og:type" content="website"><meta property="og:updated_time" content="2021-09-17T12:48:33-04:00"><meta name=twitter:card content="summary">
 <meta name=generator content="Hugo 0.88.0">
 <title>This page no longer exists, or maybe it never did? Try https://archive.org? • davegallant</title>
 <link rel=canonical href=/404.html>
@@ -44,6 +44,10 @@ personal blog
 <ul class="list taxonomy-cloud"><li>
 <a href=/tags/adguard/ style=font-size:1em>adguard</a>
 </li><li>
+<a href=/tags/aws/ style=font-size:1em>aws</a>
+</li><li>
+<a href=/tags/aws-vault/ style=font-size:1em>aws-vault</a>
+</li><li>
 <a href=/tags/dotfiles/ style=font-size:1em>dotfiles</a>
 </li><li>
 <a href=/tags/grafana/ style=font-size:1em>grafana</a>
@@ -64,7 +68,9 @@ personal blog
 </li><li>
 <a href=/tags/plex/ style=font-size:1em>plex</a>
 </li><li>
-<a href=/tags/python/ style=font-size:1em>python</a>
+<a href=/tags/python/ style=font-size:2em>python</a>
+</li><li>
+<a href=/tags/security/ style=font-size:1em>security</a>
 </li><li>
 <a href=/tags/tailscale/ style=font-size:1em>tailscale</a>
 </li><li>
diff --git a/about/index.html b/about/index.html
index 76756f46..4b4dc1c2 100644
--- a/about/index.html
+++ b/about/index.html
@@ -44,6 +44,10 @@ personal blog
 <ul class="list taxonomy-cloud"><li>
 <a href=/tags/adguard/ style=font-size:1em>adguard</a>
 </li><li>
+<a href=/tags/aws/ style=font-size:1em>aws</a>
+</li><li>
+<a href=/tags/aws-vault/ style=font-size:1em>aws-vault</a>
+</li><li>
 <a href=/tags/dotfiles/ style=font-size:1em>dotfiles</a>
 </li><li>
 <a href=/tags/grafana/ style=font-size:1em>grafana</a>
@@ -64,7 +68,9 @@ personal blog
 </li><li>
 <a href=/tags/plex/ style=font-size:1em>plex</a>
 </li><li>
-<a href=/tags/python/ style=font-size:1em>python</a>
+<a href=/tags/python/ style=font-size:2em>python</a>
+</li><li>
+<a href=/tags/security/ style=font-size:1em>security</a>
 </li><li>
 <a href=/tags/tailscale/ style=font-size:1em>tailscale</a>
 </li><li>
diff --git a/authors/index.html b/authors/index.html
index ab2aca73..01584e09 100644
--- a/authors/index.html
+++ b/authors/index.html
@@ -7,7 +7,7 @@
 <meta property="og:description" content="personal blog">
 <meta property="og:url" content="/authors/">
 <meta property="og:site_name" content="davegallant">
-<meta property="og:type" content="website"><meta property="og:updated_time" content="2021-09-08T00:42:33-04:00"><meta name=twitter:card content="summary">
+<meta property="og:type" content="website"><meta property="og:updated_time" content="2021-09-17T12:48:33-04:00"><meta name=twitter:card content="summary">
 <meta name=generator content="Hugo 0.88.0">
 <title>Authors • davegallant</title>
 <link rel=canonical href=/authors/>
@@ -45,6 +45,10 @@ personal blog
 <ul class="list taxonomy-cloud"><li>
 <a href=/tags/adguard/ style=font-size:1em>adguard</a>
 </li><li>
+<a href=/tags/aws/ style=font-size:1em>aws</a>
+</li><li>
+<a href=/tags/aws-vault/ style=font-size:1em>aws-vault</a>
+</li><li>
 <a href=/tags/dotfiles/ style=font-size:1em>dotfiles</a>
 </li><li>
 <a href=/tags/grafana/ style=font-size:1em>grafana</a>
@@ -65,7 +69,9 @@ personal blog
 </li><li>
 <a href=/tags/plex/ style=font-size:1em>plex</a>
 </li><li>
-<a href=/tags/python/ style=font-size:1em>python</a>
+<a href=/tags/python/ style=font-size:2em>python</a>
+</li><li>
+<a href=/tags/security/ style=font-size:1em>security</a>
 </li><li>
 <a href=/tags/tailscale/ style=font-size:1em>tailscale</a>
 </li><li>
diff --git a/blog/2020/03/16/appgate-sdp-on-arch-linux/index.html b/blog/2020/03/16/appgate-sdp-on-arch-linux/index.html
index 04e56913..14fcf72b 100644
--- a/blog/2020/03/16/appgate-sdp-on-arch-linux/index.html
+++ b/blog/2020/03/16/appgate-sdp-on-arch-linux/index.html
@@ -44,6 +44,10 @@ personal blog
 <ul class="list taxonomy-cloud"><li>
 <a href=/tags/adguard/ style=font-size:1em>adguard</a>
 </li><li>
+<a href=/tags/aws/ style=font-size:1em>aws</a>
+</li><li>
+<a href=/tags/aws-vault/ style=font-size:1em>aws-vault</a>
+</li><li>
 <a href=/tags/dotfiles/ style=font-size:1em>dotfiles</a>
 </li><li>
 <a href=/tags/grafana/ style=font-size:1em>grafana</a>
@@ -64,7 +68,9 @@ personal blog
 </li><li>
 <a href=/tags/plex/ style=font-size:1em>plex</a>
 </li><li>
-<a href=/tags/python/ style=font-size:1em>python</a>
+<a href=/tags/python/ style=font-size:2em>python</a>
+</li><li>
+<a href=/tags/security/ style=font-size:1em>security</a>
 </li><li>
 <a href=/tags/tailscale/ style=font-size:1em>tailscale</a>
 </li><li>
diff --git a/blog/2021/09/06/what-to-do-with-a-homelab/index.html b/blog/2021/09/06/what-to-do-with-a-homelab/index.html
index 8e49c73d..f5eb7609 100644
--- a/blog/2021/09/06/what-to-do-with-a-homelab/index.html
+++ b/blog/2021/09/06/what-to-do-with-a-homelab/index.html
@@ -44,6 +44,10 @@ personal blog
 <ul class="list taxonomy-cloud"><li>
 <a href=/tags/adguard/ style=font-size:1em>adguard</a>
 </li><li>
+<a href=/tags/aws/ style=font-size:1em>aws</a>
+</li><li>
+<a href=/tags/aws-vault/ style=font-size:1em>aws-vault</a>
+</li><li>
 <a href=/tags/dotfiles/ style=font-size:1em>dotfiles</a>
 </li><li>
 <a href=/tags/grafana/ style=font-size:1em>grafana</a>
@@ -64,7 +68,9 @@ personal blog
 </li><li>
 <a href=/tags/plex/ style=font-size:1em>plex</a>
 </li><li>
-<a href=/tags/python/ style=font-size:1em>python</a>
+<a href=/tags/python/ style=font-size:2em>python</a>
+</li><li>
+<a href=/tags/security/ style=font-size:1em>security</a>
 </li><li>
 <a href=/tags/tailscale/ style=font-size:1em>tailscale</a>
 </li><li>
diff --git a/blog/2021/09/08/why-i-threw-out-my-dotfiles/index.html b/blog/2021/09/08/why-i-threw-out-my-dotfiles/index.html
index 6c66c9d1..cd591043 100644
--- a/blog/2021/09/08/why-i-threw-out-my-dotfiles/index.html
+++ b/blog/2021/09/08/why-i-threw-out-my-dotfiles/index.html
@@ -44,6 +44,10 @@ personal blog
 <ul class="list taxonomy-cloud"><li>
 <a href=/tags/adguard/ style=font-size:1em>adguard</a>
 </li><li>
+<a href=/tags/aws/ style=font-size:1em>aws</a>
+</li><li>
+<a href=/tags/aws-vault/ style=font-size:1em>aws-vault</a>
+</li><li>
 <a href=/tags/dotfiles/ style=font-size:1em>dotfiles</a>
 </li><li>
 <a href=/tags/grafana/ style=font-size:1em>grafana</a>
@@ -64,7 +68,9 @@ personal blog
 </li><li>
 <a href=/tags/plex/ style=font-size:1em>plex</a>
 </li><li>
-<a href=/tags/python/ style=font-size:1em>python</a>
+<a href=/tags/python/ style=font-size:2em>python</a>
+</li><li>
+<a href=/tags/security/ style=font-size:1em>security</a>
 </li><li>
 <a href=/tags/tailscale/ style=font-size:1em>tailscale</a>
 </li><li>
@@ -287,6 +293,11 @@ nix-shell <span style=color:#e6db74>&#39;&lt;home-manager&gt;&#39;</span> -A ins
 <span aria-hidden=true><svg class="icon" xmlns="http://www.w3.org/2000/svg" viewbox="0 0 24 24" stroke-linecap="round" stroke-linejoin="round" stroke-width="2" aria-hidden="true"><line x1="20" y1="12" x2="4" y2="12"/><polyline points="10 18 4 12 10 6"/></svg>
 Previous</span>
 <span class=screen-reader-text>Previous post: </span>What To Do With A Homelab</a>
+</div><div class="next-entry sep-before">
+<a href=/blog/2021/09/17/automatically-rotating-aws-access-keys/>
+<span class=screen-reader-text>Next post: </span>Automatically Rotating AWS Access Keys<span aria-hidden=true>Next<svg class="icon" xmlns="http://www.w3.org/2000/svg" viewbox="0 0 24 24" stroke-linecap="round" stroke-linejoin="round" stroke-width="2" aria-hidden="true"><line x1="4" y1="12" x2="20" y2="12"/><polyline points="14 6 20 12 14 18"/></svg>
+</span>
+</a>
 </div></div>
 </nav>
 <section id=comments class=comments>
diff --git a/blog/2021/09/17/automatically-rotating-aws-access-keys/index.html b/blog/2021/09/17/automatically-rotating-aws-access-keys/index.html
new file mode 100644
index 00000000..e173b34e
--- /dev/null
+++ b/blog/2021/09/17/automatically-rotating-aws-access-keys/index.html
@@ -0,0 +1,185 @@
+<!doctype html><html lang=en dir=auto><head>
+<meta charset=utf-8>
+<meta name=viewport content="width=device-width,initial-scale=1">
+<meta name=description content>
+<meta name=theme-color content="#8979b3">
+<meta property="og:title" content="Automatically Rotating AWS Access Keys • davegallant">
+<meta property="og:description" content>
+<meta property="og:url" content="/blog/2021/09/17/automatically-rotating-aws-access-keys/">
+<meta property="og:site_name" content="davegallant">
+<meta property="og:type" content="article"><meta property="article:section" content="post"><meta property="article:tag" content="aws"><meta property="article:tag" content="python"><meta property="article:tag" content="security"><meta property="article:tag" content="aws-vault"><meta property="article:published_time" content="2021-09-17T12:48:33-04:00"><meta property="article:modified_time" content="2021-09-17T12:48:33-04:00"><meta name=twitter:card content="summary">
+<meta name=generator content="Hugo 0.88.0">
+<title>Automatically Rotating AWS Access Keys • davegallant</title>
+<link rel=canonical href=/blog/2021/09/17/automatically-rotating-aws-access-keys/>
+<link rel=icon href=/favicon.ico>
+<link rel=stylesheet href=/assets/css/main.ab98e12b.css><link rel=stylesheet href=/css/custom.css><style>:root{--color-accent:#8979b3}</style>
+<script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga('create','UA-98710982-2','auto'),ga('send','pageview'))</script>
+<script async src=https://www.google-analytics.com/analytics.js></script>
+</head>
+<body class="page type-post has-sidebar">
+<div class=site><div id=sidebar class=sidebar>
+<a class=screen-reader-text href=#main-menu>Skip to Main Menu</a>
+<div class=container><section class="widget widget-about sep-after">
+<header>
+<div class=logo>
+<a href=/>
+<img src=/images/logo.png>
+</a>
+</div>
+<h2 class="title site-title">
+<a href=/>
+davegallant
+</a>
+</h2>
+<div class=desc>
+personal blog
+</div>
+</header>
+</section>
+<section class="widget widget-taxonomy_cloud sep-after">
+<header>
+<h4 class="title widget-title">Tags</h4>
+</header>
+<div class="container list-container">
+<ul class="list taxonomy-cloud"><li>
+<a href=/tags/adguard/ style=font-size:1em>adguard</a>
+</li><li>
+<a href=/tags/aws/ style=font-size:1em>aws</a>
+</li><li>
+<a href=/tags/aws-vault/ style=font-size:1em>aws-vault</a>
+</li><li>
+<a href=/tags/dotfiles/ style=font-size:1em>dotfiles</a>
+</li><li>
+<a href=/tags/grafana/ style=font-size:1em>grafana</a>
+</li><li>
+<a href=/tags/home-manager/ style=font-size:1em>home-manager</a>
+</li><li>
+<a href=/tags/homelab/ style=font-size:1em>homelab</a>
+</li><li>
+<a href=/tags/jellyfin/ style=font-size:1em>jellyfin</a>
+</li><li>
+<a href=/tags/linux/ style=font-size:1em>linux</a>
+</li><li>
+<a href=/tags/netdata/ style=font-size:1em>netdata</a>
+</li><li>
+<a href=/tags/nix/ style=font-size:1em>nix</a>
+</li><li>
+<a href=/tags/pihole/ style=font-size:1em>pihole</a>
+</li><li>
+<a href=/tags/plex/ style=font-size:1em>plex</a>
+</li><li>
+<a href=/tags/python/ style=font-size:2em>python</a>
+</li><li>
+<a href=/tags/security/ style=font-size:1em>security</a>
+</li><li>
+<a href=/tags/tailscale/ style=font-size:1em>tailscale</a>
+</li><li>
+<a href=/tags/virtualization/ style=font-size:1em>virtualization</a>
+</li><li>
+<a href=/tags/vpn/ style=font-size:1em>vpn</a>
+</li></ul>
+</div>
+</section>
+<section class="widget widget-social_menu sep-after"><nav aria-label="Social Menu">
+<ul><li>
+<a href=https://github.com/davegallant target=_blank rel="noopener me">
+<span class=screen-reader-text>Open Github account in new tab</span><svg class="icon" xmlns="http://www.w3.org/2000/svg" viewbox="0 0 24 24" stroke-linecap="round" stroke-linejoin="round" stroke-width="2" aria-hidden="true"><path d="M9 19c-5 1.5-5-2.5-7-3m14 6v-3.87a3.37 3.37.0 00-.94-2.61c3.14-.35 6.44-1.54 6.44-7A5.44 5.44.0 0020 4.77 5.07 5.07.0 0019.91 1S18.73.65 16 2.48a13.38 13.38.0 00-7 0C6.27.65 5.09 1 5.09 1A5.07 5.07.0 005 4.77 5.44 5.44.0 003.5 8.55c0 5.42 3.3 6.61 6.44 7A3.37 3.37.0 009 18.13V22"/></svg>
+</a>
+</li><li>
+<a href=https://twitter.com/dave_gallant_ target=_blank rel="noopener me">
+<span class=screen-reader-text>Open Twitter account in new tab</span><svg class="icon" xmlns="http://www.w3.org/2000/svg" viewbox="0 0 24 24" stroke-linecap="round" stroke-linejoin="round" stroke-width="2" aria-hidden="true"><path d="M23 3a10.9 10.9.0 01-3.14 1.53 4.48 4.48.0 00-7.86 3v1A10.66 10.66.0 013 4s-4 9 5 13a11.64 11.64.0 01-7 2c9 5 20 0 20-11.5a4.5 4.5.0 00-.08-.83A7.72 7.72.0 0023 3z"/></svg>
+</a>
+</li><li>
+<a href=mailto:davegallant@gmail.com target=_blank rel="noopener me">
+<span class=screen-reader-text>Contact via Email</span><svg class="icon" xmlns="http://www.w3.org/2000/svg" viewbox="0 0 24 24" stroke-linecap="round" stroke-linejoin="round" stroke-width="2" aria-hidden="true"><path d="M4 4h16c1.1.0 2 .9 2 2v12c0 1.1-.9 2-2 2H4c-1.1.0-2-.9-2-2V6c0-1.1.9-2 2-2z"/><polyline points="22,6 12,13 2,6"/></svg>
+</a>
+</li><li>
+<a href=https://linkedin.com/in/dave-gallant target=_blank rel="noopener me">
+<span class=screen-reader-text>Open Linkedin account in new tab</span><svg class="icon" xmlns="http://www.w3.org/2000/svg" viewbox="0 0 24 24" stroke-linecap="round" stroke-linejoin="round" stroke-width="2" aria-hidden="true"><path d="M16 8a6 6 0 016 6v7h-4v-7a2 2 0 00-2-2 2 2 0 00-2 2v7h-4v-7a6 6 0 016-6z"/><rect x="2" y="9" width="4" height="12"/><circle cx="4" cy="4" r="2"/></svg>
+</a>
+</li></ul>
+</nav>
+</section></div>
+<div class=sidebar-overlay></div>
+</div><div class=main><nav id=main-menu class="menu main-menu" aria-label="Main Menu">
+<div class=container>
+<a class=screen-reader-text href=#content>Skip to Content</a>
+<button id=sidebar-toggler class=sidebar-toggler aria-controls=sidebar>
+<span class=screen-reader-text>Toggle Sidebar</span>
+<span class=open><svg class="icon" xmlns="http://www.w3.org/2000/svg" viewbox="0 0 24 24" stroke-linecap="round" stroke-linejoin="round" stroke-width="2" aria-hidden="true"><line x1="3" y1="12" x2="21" y2="12"/><line x1="3" y1="6" x2="21" y2="6"/><line x1="3" y1="18" x2="21" y2="18"/></svg>
+</span>
+<span class=close><svg class="icon" xmlns="http://www.w3.org/2000/svg" viewbox="0 0 24 24" stroke-linecap="round" stroke-linejoin="round" stroke-width="2" aria-hidden="true"><line x1="18" y1="6" x2="6" y2="18"/><line x1="6" y1="6" x2="18" y2="18"/></svg>
+</span>
+</button>
+<ul><li class=item>
+<a href=/>Home</a>
+</li><li class=item>
+<a href=/about/>About</a>
+</li><li class=item>
+<a href=/index.xml>RSS</a>
+</li></ul>
+</div>
+</nav><div class=header-widgets>
+<div class=container></div>
+</div>
+<header id=header class="header site-header">
+<div class="container sep-after">
+</div>
+</header>
+<main id=content>
+<article lang=en class=entry>
+<header class="header entry-header">
+<div class="container sep-after">
+<div class=header-info>
+<h1 class=title>Automatically Rotating AWS Access Keys</h1>
+</div>
+<div class=entry-meta>
+<span class=posted-on><svg class="icon" xmlns="http://www.w3.org/2000/svg" viewbox="0 0 24 24" stroke-linecap="round" stroke-linejoin="round" stroke-width="2" aria-hidden="true"><rect x="3" y="4" width="18" height="18" rx="2" ry="2"/><line x1="16" y1="2" x2="16" y2="6"/><line x1="8" y1="2" x2="8" y2="6"/><line x1="3" y1="10" x2="21" y2="10"/></svg>
+<span class=screen-reader-text>Posted on </span>
+<time class=entry-date datetime=2021-09-17T12:48:33-04:00>2021, Sep 17</time>
+</span>
+<span class=reading-time><svg class="icon" xmlns="http://www.w3.org/2000/svg" viewbox="0 0 24 24" stroke-linecap="round" stroke-linejoin="round" stroke-width="2" aria-hidden="true"><circle cx="12" cy="12" r="10"/><polyline points="12 6 12 12 15 15"/></svg>
+One min read
+</span>
+</div>
+</div>
+</header>
+<div class="container entry-content">
+<p>Rotating credentials is a security best practice. This morning, I read a question about automatically rotating AWS Access Keys without having to go through the hassle of navigating the AWS console. There are some existing solutions already, but I decided to write a <a href=https://gist.github.com/davegallant/2c042686a78684a657fe99e20fa7a924#file-aws_access_key_rotator-py>script</a> since it was incredibly simple. The script could be packed up as a systemd/launchd service to continually rotate access keys in the background.</p>
+<p>In the longer term, migrating my workflows to <a href=https://github.com/99designs/aws-vault>aws-vault</a> seems like a more secure solution. This would mean that credentials (even temporary session credentials) never have to be written in plaintext to disk (i.e. where <a href=https://docs.aws.amazon.com/sdkref/latest/guide/file-location.html>AWS suggests</a>). Any existing applications, such as terraform, could be have their credentials passed to them from aws-vault, which retrieves them from the OS&rsquo;s secure keystore. There is even a <a href=https://github.com/99designs/aws-vault/blob/master/USAGE.md#rotating-credentials>rotate command</a> included.</p>
+</div>
+<footer class=entry-footer>
+<div class="container sep-before"><div class=tags><svg class="icon" xmlns="http://www.w3.org/2000/svg" viewbox="0 0 24 24" stroke-linecap="round" stroke-linejoin="round" stroke-width="2" aria-hidden="true"><path d="M20.59 13.41l-7.17 7.17a2 2 0 01-2.83.0L2 12V2H12l8.59 8.59a2 2 0 010 2.82z"/><line x1="7" y1="7" x2="7" y2="7"/></svg>
+<span class=screen-reader-text>Tags: </span><a class=tag href=/tags/aws/>aws</a>, <a class=tag href=/tags/python/>python</a>, <a class=tag href=/tags/security/>security</a>, <a class=tag href=/tags/aws-vault/>aws-vault</a></div>
+</div>
+</footer>
+</article>
+<nav class=entry-nav>
+<div class=container><div class="prev-entry sep-before">
+<a href=/blog/2021/09/08/why-i-threw-out-my-dotfiles/>
+<span aria-hidden=true><svg class="icon" xmlns="http://www.w3.org/2000/svg" viewbox="0 0 24 24" stroke-linecap="round" stroke-linejoin="round" stroke-width="2" aria-hidden="true"><line x1="20" y1="12" x2="4" y2="12"/><polyline points="10 18 4 12 10 6"/></svg>
+Previous</span>
+<span class=screen-reader-text>Previous post: </span>Why I Threw Out My Dotfiles</a>
+</div></div>
+</nav>
+<section id=comments class=comments>
+<div class="container sep-before">
+<div class=comments-area><div id=disqus_thread></div>
+<script type=application/javascript>var disqus_config=function(){};(function(){if(["localhost","127.0.0.1"].indexOf(window.location.hostname)!=-1){document.getElementById('disqus_thread').innerHTML='Disqus comments not available by default when the website is previewed locally.';return}var b=document,a=b.createElement('script');a.async=!0,a.src='//https-davegallant-github-io.disqus.com/embed.js',a.setAttribute('data-timestamp',+new Date),(b.head||b.body).appendChild(a)})()</script>
+<noscript>Please enable JavaScript to view the <a href=https://disqus.com/?ref_noscript>comments powered by Disqus.</a></noscript>
+<a href=https://disqus.com class=dsq-brlink>comments powered by <span class=logo-disqus>Disqus</span></a>
+</div>
+</div>
+</section>
+</main>
+<footer id=footer class=footer>
+<div class="container sep-before"><div class=copyright>
+<p> &copy; 2020-2021 Dave Gallant </p>
+</div>
+</div>
+</footer>
+</div>
+</div><script>window.__assets_js_src="/assets/js/"</script>
+<script src=/assets/js/main.c3bcf2df.js></script>
+</body>
+</html>
\ No newline at end of file
diff --git a/index.html b/index.html
index 960998c4..b20dc899 100644
--- a/index.html
+++ b/index.html
@@ -7,7 +7,7 @@
 <meta property="og:description" content="personal blog">
 <meta property="og:url" content="/">
 <meta property="og:site_name" content="davegallant">
-<meta property="og:type" content="website"><meta property="og:updated_time" content="2021-09-08T00:42:33-04:00"><meta name=twitter:card content="summary">
+<meta property="og:type" content="website"><meta property="og:updated_time" content="2021-09-17T12:48:33-04:00"><meta name=twitter:card content="summary">
 <meta name=generator content="Hugo 0.88.0">
 <title>davegallant</title>
 <link rel=canonical href=/>
@@ -45,6 +45,10 @@ personal blog
 <ul class="list taxonomy-cloud"><li>
 <a href=/tags/adguard/ style=font-size:1em>adguard</a>
 </li><li>
+<a href=/tags/aws/ style=font-size:1em>aws</a>
+</li><li>
+<a href=/tags/aws-vault/ style=font-size:1em>aws-vault</a>
+</li><li>
 <a href=/tags/dotfiles/ style=font-size:1em>dotfiles</a>
 </li><li>
 <a href=/tags/grafana/ style=font-size:1em>grafana</a>
@@ -65,7 +69,9 @@ personal blog
 </li><li>
 <a href=/tags/plex/ style=font-size:1em>plex</a>
 </li><li>
-<a href=/tags/python/ style=font-size:1em>python</a>
+<a href=/tags/python/ style=font-size:2em>python</a>
+</li><li>
+<a href=/tags/security/ style=font-size:1em>security</a>
 </li><li>
 <a href=/tags/tailscale/ style=font-size:1em>tailscale</a>
 </li><li>
@@ -132,6 +138,19 @@ personal blog
 <div class=meta>
 <span>
 <span class=screen-reader-text>Posted on </span>
+<time datetime=2021-09-17T12:48:33-04:00>2021, Sep 17</time>
+</span>
+</div>
+<header class=item-header>
+<h3 class=item-title>
+<a href=/blog/2021/09/17/automatically-rotating-aws-access-keys/>Automatically Rotating AWS Access Keys</a>
+</h3>
+</header>
+</li>
+<li class=item>
+<div class=meta>
+<span>
+<span class=screen-reader-text>Posted on </span>
 <time datetime=2021-09-08T00:42:33-04:00>2021, Sep 08</time>
 </span>
 </div>
diff --git a/index.xml b/index.xml
index 84e64516..ef7a144e 100644
--- a/index.xml
+++ b/index.xml
@@ -1 +1 @@
-<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>davegallant</title><link>/</link><description>Recent content on davegallant</description><generator>Hugo -- gohugo.io</generator><language>en-us</language><lastBuildDate>Wed, 08 Sep 2021 00:42:33 -0400</lastBuildDate><atom:link href="/index.xml" rel="self" type="application/rss+xml"/><item><title>About</title><link>/about/</link><pubDate>Mon, 01 Jan 0001 00:00:00 +0000</pubDate><guid>/about/</guid><description>I&amp;rsquo;m a software engineer with a passion for open-source, infrastructure, tooling and security.</description></item><item><title>Why I Threw Out My Dotfiles</title><link>/blog/2021/09/08/why-i-threw-out-my-dotfiles/</link><pubDate>Wed, 08 Sep 2021 00:42:33 -0400</pubDate><guid>/blog/2021/09/08/why-i-threw-out-my-dotfiles/</guid><description/></item><item><title>What To Do With A Homelab</title><link>/blog/2021/09/06/what-to-do-with-a-homelab/</link><pubDate>Mon, 06 Sep 2021 01:12:54 -0400</pubDate><guid>/blog/2021/09/06/what-to-do-with-a-homelab/</guid><description>&lt;p>A homelab can be an inexpensive way to host a multitude of internal/external services and learn &lt;em>a lot&lt;/em> in the process.&lt;/p></description></item><item><title>AppGate SDP on Arch Linux</title><link>/blog/2020/03/16/appgate-sdp-on-arch-linux/</link><pubDate>Mon, 16 Mar 2020 22:00:15 -0400</pubDate><guid>/blog/2020/03/16/appgate-sdp-on-arch-linux/</guid><description>&lt;p>AppGate SDP provides a Zero Trust network. This post describes how to get AppGate SDP &lt;code>4.3.2&lt;/code> working on Arch Linux.&lt;/p></description></item><item><title/><link>/page/search/</link><pubDate>Mon, 01 Jan 0001 00:00:00 +0000</pubDate><guid>/page/search/</guid><description>test</description></item></channel></rss>
\ No newline at end of file
+<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>davegallant</title><link>/</link><description>Recent content on davegallant</description><generator>Hugo -- gohugo.io</generator><language>en-us</language><lastBuildDate>Fri, 17 Sep 2021 12:48:33 -0400</lastBuildDate><atom:link href="/index.xml" rel="self" type="application/rss+xml"/><item><title>About</title><link>/about/</link><pubDate>Mon, 01 Jan 0001 00:00:00 +0000</pubDate><guid>/about/</guid><description>I&amp;rsquo;m a software engineer with a passion for open-source, infrastructure, tooling and security.</description></item><item><title>Automatically Rotating AWS Access Keys</title><link>/blog/2021/09/17/automatically-rotating-aws-access-keys/</link><pubDate>Fri, 17 Sep 2021 12:48:33 -0400</pubDate><guid>/blog/2021/09/17/automatically-rotating-aws-access-keys/</guid><description/></item><item><title>Why I Threw Out My Dotfiles</title><link>/blog/2021/09/08/why-i-threw-out-my-dotfiles/</link><pubDate>Wed, 08 Sep 2021 00:42:33 -0400</pubDate><guid>/blog/2021/09/08/why-i-threw-out-my-dotfiles/</guid><description/></item><item><title>What To Do With A Homelab</title><link>/blog/2021/09/06/what-to-do-with-a-homelab/</link><pubDate>Mon, 06 Sep 2021 01:12:54 -0400</pubDate><guid>/blog/2021/09/06/what-to-do-with-a-homelab/</guid><description>&lt;p>A homelab can be an inexpensive way to host a multitude of internal/external services and learn &lt;em>a lot&lt;/em> in the process.&lt;/p></description></item><item><title>AppGate SDP on Arch Linux</title><link>/blog/2020/03/16/appgate-sdp-on-arch-linux/</link><pubDate>Mon, 16 Mar 2020 22:00:15 -0400</pubDate><guid>/blog/2020/03/16/appgate-sdp-on-arch-linux/</guid><description>&lt;p>AppGate SDP provides a Zero Trust network. This post describes how to get AppGate SDP &lt;code>4.3.2&lt;/code> working on Arch Linux.&lt;/p></description></item><item><title/><link>/page/search/</link><pubDate>Mon, 01 Jan 0001 00:00:00 +0000</pubDate><guid>/page/search/</guid><description>test</description></item></channel></rss>
\ No newline at end of file
diff --git a/page/index.html b/page/index.html
index 6a2a5dd4..135a1866 100644
--- a/page/index.html
+++ b/page/index.html
@@ -7,7 +7,7 @@
 <meta property="og:description" content="personal blog">
 <meta property="og:url" content="/page/">
 <meta property="og:site_name" content="davegallant">
-<meta property="og:type" content="website"><meta property="og:updated_time" content="2021-09-08T00:42:33-04:00"><meta name=twitter:card content="summary">
+<meta property="og:type" content="website"><meta property="og:updated_time" content="2021-09-17T12:48:33-04:00"><meta name=twitter:card content="summary">
 <meta name=generator content="Hugo 0.88.0">
 <title>Pages • davegallant</title>
 <link rel=canonical href=/page/>
@@ -45,6 +45,10 @@ personal blog
 <ul class="list taxonomy-cloud"><li>
 <a href=/tags/adguard/ style=font-size:1em>adguard</a>
 </li><li>
+<a href=/tags/aws/ style=font-size:1em>aws</a>
+</li><li>
+<a href=/tags/aws-vault/ style=font-size:1em>aws-vault</a>
+</li><li>
 <a href=/tags/dotfiles/ style=font-size:1em>dotfiles</a>
 </li><li>
 <a href=/tags/grafana/ style=font-size:1em>grafana</a>
@@ -65,7 +69,9 @@ personal blog
 </li><li>
 <a href=/tags/plex/ style=font-size:1em>plex</a>
 </li><li>
-<a href=/tags/python/ style=font-size:1em>python</a>
+<a href=/tags/python/ style=font-size:2em>python</a>
+</li><li>
+<a href=/tags/security/ style=font-size:1em>security</a>
 </li><li>
 <a href=/tags/tailscale/ style=font-size:1em>tailscale</a>
 </li><li>
diff --git a/page/search/index.html b/page/search/index.html
index ee5d73ac..78bca252 100644
--- a/page/search/index.html
+++ b/page/search/index.html
@@ -44,6 +44,10 @@ personal blog
 <ul class="list taxonomy-cloud"><li>
 <a href=/tags/adguard/ style=font-size:1em>adguard</a>
 </li><li>
+<a href=/tags/aws/ style=font-size:1em>aws</a>
+</li><li>
+<a href=/tags/aws-vault/ style=font-size:1em>aws-vault</a>
+</li><li>
 <a href=/tags/dotfiles/ style=font-size:1em>dotfiles</a>
 </li><li>
 <a href=/tags/grafana/ style=font-size:1em>grafana</a>
@@ -64,7 +68,9 @@ personal blog
 </li><li>
 <a href=/tags/plex/ style=font-size:1em>plex</a>
 </li><li>
-<a href=/tags/python/ style=font-size:1em>python</a>
+<a href=/tags/python/ style=font-size:2em>python</a>
+</li><li>
+<a href=/tags/security/ style=font-size:1em>security</a>
 </li><li>
 <a href=/tags/tailscale/ style=font-size:1em>tailscale</a>
 </li><li>
diff --git a/page/search/index.json b/page/search/index.json
index 3d40b1f8..9896a54e 100644
--- a/page/search/index.json
+++ b/page/search/index.json
@@ -1 +1 @@
-[{"content":"I\u0026rsquo;m a software engineer with a passion for open-source, infrastructure, tooling and security.\n","href":"/about/","title":"About"},{"content":"","href":"/","title":"davegallant"},{"content":"","href":"/tags/dotfiles/","title":"dotfiles"},{"content":"","href":"/tags/home-manager/","title":"home-manager"},{"content":"","href":"/tags/nix/","title":"nix"},{"content":"","href":"/post/","title":"Posts"},{"content":"","href":"/tags/","title":"Tags"},{"content":"Over the years I have collected a number of dotfiles that I have shared across both Linux and macOS machines (~/.zshrc, ~/.config/git/config, ~/.config/tmux/tmux.conf, etc). I have tried several different ways to manage them, including bare git repos and utilities such as GNU Stow. These solutions work well enough, but I have since found what I would consider a much better solution for organizing user configuration: home-manager.\nWhat is home-manager? Before understanding home-manager, it is worth briefly discussing what nix is. nix is a package manager that originally spawned from a PhD thesis. Unlike other package managers, it uses symbolic links to keep track of the currently installed packages, keeping around the old ones in case you may want to rollback.\nFor example, I have used nix to install the package bind which includes dig. You can see that it is available on multiple platforms. The absolute path of dig can be found by running:\n❯ ls -lh $(which dig) lrwxr-xr-x 73 root 31 Dec 1969 /run/current-system/sw/bin/dig -\u0026gt; /nix/store/0r4qdyprljd3dki57jn6c6a8dh2rbg9g-bind-9.16.16-dnsutils/bin/dig Notice that there is a hash included in the file path? This is a nix store path and is computed by the nix package manager. This nix pill does a good job explaining how this hash is computed. All of the nix pills are worth a read, if you are interested in learning more about nix itself. However, using home-manager does not require extensive knowledge of nix.\nPart of the nix ecosystem includes nixpkgs. Many popular tools can be found already packaged in this repository. As you can see with these stats, there is a large number of existing packages that are being maintained by the community. Contributing a new package is easy, and anyone can do it!\nhome-manager leverages the nix package manager (and nixpkgs), as well the nix language so that you can declaratively define your system configuration. I store my nix-config in git so that I can keep track of my packages and configurations, and retain a clean and informative git commit history so that I can understand what changed and why.\nSetting up home-manager  ⚠️ If you run this on your main machine, make sure you backup your configuration files first. home-manager is pretty good about not overwriting existing configuration, but it is better to have a backup! Alternatively, you could test this out on a VM or cloud instance.\n The first thing you should do is install nix:\ncurl -L https://nixos.org/nix/install | sh It\u0026rsquo;s not a good idea to curl and execute files from the internet (without verifying integrity), so you might want to download the install script first and take a peak before executing it!\nOpen up a new shell in your terminal and running nix should work. If not, run . ~/.nix-profile/etc/profile.d/nix.sh\nNow, install home-manager:\nnix-channel --add https://github.com/nix-community/home-manager/archive/master.tar.gz home-manager nix-channel --update nix-shell \u0026#39;\u0026lt;home-manager\u0026gt;\u0026#39; -A install You should see a wave of /nix/store/* paths being displayed on your screen.\nNow, to start off with a basic configuration, open up ~/.config/nixpkgs/home.nix in the editor of your choice and paste this in (you will want to change userName and homeDirectory):\n{ config, pkgs, ... }: { programs.home-manager.enable = true; home = { username = \u0026#34;dave\u0026#34;; homeDirectory = \u0026#34;/home/dave\u0026#34;; stateVersion = \u0026#34;21.11\u0026#34;; packages = with pkgs; [ bind exa fd ripgrep ]; }; programs = { git = { enable = true; aliases = { aa = \u0026#34;add -A .\u0026#34;; br = \u0026#34;branch\u0026#34;; c = \u0026#34;commit -S\u0026#34;; ca = \u0026#34;commit -S --amend\u0026#34;; cb = \u0026#34;checkout -b\u0026#34;; co = \u0026#34;checkout\u0026#34;; d = \u0026#34;diff\u0026#34;; l = \u0026#34;log --graph --pretty=format:\u0026#39;%Cred%h%Creset -%C(yellow)%d%Creset %s %Cgreen(%cr) %C(bold blue)\u0026lt;%an\u0026gt;%Creset\u0026#39; --abbrev-commit\u0026#34;; }; delta = { enable = true; options = { features = \u0026#34;line-numbers decorations\u0026#34;; whitespace-error-style = \u0026#34;22 reverse\u0026#34;; plus-style = \u0026#34;green bold ul \u0026#39;#198214\u0026#39;\u0026#34;; decorations = { commit-decoration-style = \u0026#34;bold yellow box ul\u0026#34;; file-style = \u0026#34;bold yellow ul\u0026#34;; file-decoration-style = \u0026#34;none\u0026#34;; }; }; }; extraConfig = { push = { default = \u0026#34;current\u0026#34;; }; pull = { rebase = true; }; }; }; starship = { enable = true; enableZshIntegration = true; settings = { add_newline = false; scan_timeout = 10; }; }; zsh = { enable = true; enableAutosuggestions = true; enableSyntaxHighlighting = true; history.size = 1000000; localVariables = { CASE_SENSITIVE = \u0026#34;true\u0026#34;; DISABLE_UNTRACKED_FILES_DIRTY = \u0026#34;true\u0026#34;; RPROMPT = \u0026#34;\u0026#34;; # override because macOS defaults to filepath ZSH_AUTOSUGGEST_HIGHLIGHT_STYLE = \u0026#34;fg=#838383,underline\u0026#34;; ZSH_DISABLE_COMPFIX = \u0026#34;true\u0026#34;; }; initExtra = \u0026#39;\u0026#39; export PAGER=less \u0026#39;\u0026#39;; shellAliases = { \u0026#34;..\u0026#34; = \u0026#34;cd ..\u0026#34;; grep = \u0026#34;rg --smart-case\u0026#34;; ls = \u0026#34;exa -la --git\u0026#34;; }; \u0026#34;oh-my-zsh\u0026#34; = { enable = true; plugins = [ \u0026#34;gitfast\u0026#34; \u0026#34;last-working-dir\u0026#34; ]; }; }; }; } Save the file and run:\nhome-manager switch You should see another wave of /nix/store/* paths. The new configuration should now be active.\nIf you run zsh, you should see that you have starship and access to several other utils such as rg, fd, and exa.\nThis basic configuration above is also defining your ~/.config/git/config and .zshrc. If you already have either of these files, home-manager will complain about them already existing.\nIf you run cat ~/.zshrc, you will see the way these configuration files are generated.\nYou can extend this configuration for programs such as (neo)vim, emacs, alacritty, ssh, etc. To see other programs, take a look at home-manager/modules/programs.\nGateway To Nix In ways, home-manager can be seen as a gateway to the nix ecosystem. If you have enjoyed the way you can declare user configuration with home-manager, you may be interested in expanding your configuration to include other system dependencies and configuration. For example, in Linux you can define your entire system\u0026rsquo;s configuration (including the kernel, kernel modules, networking, filesystems, etc) in nix. For macOS, there is nix-darwin that includes nix modules for configuring launchd, dock, and other preferences and services. You may also want to check out Nix Flakes: a more recent feature that allows you declare dependencies, and have them automatically pinned and hashed in flake.lock, similar to that of many modern package managers.\nWrapping up The title of this post is slightly misleading, since it\u0026rsquo;s possible to retain some of your dotfiles and have them intermingle with home-manager by including them alongside nix. The idea of defining user configuration using nix can provide a clean way to maintain your configuration, and allow it to be portable across platforms. Is it worth the effort to migrate away from more from shell scripts and dotfiles? I\u0026rsquo;d say so.\n","href":"/blog/2021/09/08/why-i-threw-out-my-dotfiles/","title":"Why I Threw Out My Dotfiles"},{"content":"","href":"/tags/adguard/","title":"adguard"},{"content":"","href":"/tags/grafana/","title":"grafana"},{"content":"","href":"/tags/homelab/","title":"homelab"},{"content":"","href":"/tags/jellyfin/","title":"jellyfin"},{"content":"","href":"/tags/netdata/","title":"netdata"},{"content":"","href":"/tags/pihole/","title":"pihole"},{"content":"","href":"/tags/plex/","title":"plex"},{"content":"","href":"/tags/tailscale/","title":"tailscale"},{"content":"","href":"/tags/virtualization/","title":"virtualization"},{"content":"A homelab can be an inexpensive way to host a multitude of internal/external services and learn a lot in the process.\nDo you want host your own Media server? Ad blocker? Web server? Are you interested in learning more about Linux? Virtualization? Networking? Security? Building a homelab can be an entertaining playground to enhance your computer skills.\nOne of the best parts about building a homelab is that it doesn\u0026rsquo;t have to be a large investment in terms hardware. One of the simplest ways to build a homelab is out of a refurbished computer. Having multiple machines/nodes provides the advantage of increased redundancy, but starting out with a single node is enough to reap many of the benefits of having a homelab.\nVirtualization Virtualizing your hardware is an organized way of dividing up your machine\u0026rsquo;s resources. This can be done with something such as a Virtual Machine or something lighter like a container using LXC or runC. Containers have much less overhead in terms of boot time and storage allocation. This Stack Overflow answer sums it up nicely.\nA hypervisor such as Proxmox can be installed in minutes on a new machine. It provides a web interface and a straight-forward way to spin up new VMs and containers. You\u0026rsquo;ll want to ensure that VT-d and VT-X are enabled in the BIOS if you decide to install a hypervisor to manage your virtualization.\nServices So what are some useful services to deploy?\n Jellyfin or Plex - basically a self-hosted Netflix that can be used to stream from multiple devices, and the best part is that you manage the content! Unlike Plex, Jellyfin is open source and can be found here. changedetection - is a self-hosted equivalent to something like visualping.io that will notify you when a webpage changes and keep track of the diffs Adguard or Pihole - can block a list of known trackers for all clients on your local network. I\u0026rsquo;ve used pihole for a long time, but have recently switched to Adguard since the UI is more modern and it has the ability to toggle on/off a pre-defined list of services, including Netflix (this is useful if you have stealthy young kids). Either of these will speed up your internet experience, simply because you won\u0026rsquo;t need to download all of the extra tracking bloat.  There is a large number of services you can self-host, including your own applications that you might be developing. awesome-self-hosted provides a curated list of services that might be of interest to you.\nVPN You could certainly setup and manage your own VPN by using something like OpenVPN, but there is also something else you can try: tailscale. It is a very quick way to create fully-encrypted connections between clients. And by using its MagicDNS, it is a truly magical solution. If one of your nodes has a hostname of plex, you can simply access it by referring to its hostname (i.e ssh plex@plex). This way you can create a secure tunnel to your homelab from anywhere in the world!\nMonitoring Monitoring can become an important aspect of your homelab after it starts to become something that is relied upon. One of the simplest ways to setup some monitoring is using netdata. It can be installed on individual containers, VMs, and also a hypervisor (such as Proxmox). All of the monitoring works out of the box by detecting disks, memory, network interfaces, etc.\nAdditionally, agents installed on different machines can all be centrally viewed in netdata, and it can alert you when some of your infrastructure is down or in a degraded state. Adding additional nodes to netdata is as simple as a 1-line shell command.\nGrafana is another open source analytics and monitoring solution. If you are looking for ideas, check out Wikimedia\u0026rsquo;s public Grafana.\nIn Summary Building out a homelab can be a rewarding experience and it doesn\u0026rsquo;t require buying a rack full of expensive servers to get a significant amount of utility. There are many services you can run that require very minimal setup, making it possible to get a server up and running in a short period of time, with monitoring, and that can be securely connected to from anywhere.\n","href":"/blog/2021/09/06/what-to-do-with-a-homelab/","title":"What To Do With A Homelab"},{"content":"AppGate SDP provides a Zero Trust network. This post describes how to get AppGate SDP 4.3.2 working on Arch Linux.\nDepending on the AppGate SDP Server that is running, you may require a client that is more recent than the latest package on AUR. As of right now, the latest AUR is 4.2.2-1.\nThese steps highlight how to get it working with Python3.8 by making a 1 line modification to AppGate source code.\nPackaging We already know the community package is currently out of date, so let\u0026rsquo;s clone it:\ngit clone https://aur.archlinux.org/appgate-sdp.git cd appgate-sdp You\u0026rsquo;ll likely notice that the version is not what we want, so let\u0026rsquo;s modify the PKGBUILD to the following:\n# Maintainer: Pawel Mosakowski \u0026lt;pawel at mosakowski dot net\u0026gt; pkgname=appgate-sdp conflicts=(\u0026#39;appgate-sdp-headless\u0026#39;) pkgver=4.3.2 _download_pkgver=4.3 pkgrel=1 epoch= pkgdesc=\u0026#34;Software Defined Perimeter - GUI client\u0026#34; arch=(\u0026#39;x86_64\u0026#39;) url=\u0026#34;https://www.cyxtera.com/essential-defense/appgate-sdp/support\u0026#34; license=(\u0026#39;custom\u0026#39;) # dependecies calculated by namcap depends=(\u0026#39;gconf\u0026#39; \u0026#39;libsecret\u0026#39; \u0026#39;gtk3\u0026#39; \u0026#39;python\u0026#39; \u0026#39;nss\u0026#39; \u0026#39;libxss\u0026#39; \u0026#39;nodejs\u0026#39; \u0026#39;dnsmasq\u0026#39;) source=(\u0026#34;https://sdpdownloads.cyxtera.com/AppGate-SDP-${_download_pkgver}/clients/${pkgname}_${pkgver}_amd64.deb\u0026#34; \u0026#34;appgatedriver.service\u0026#34;) options=(staticlibs) prepare() { tar -xf data.tar.xz } package() { cp -dpr \u0026#34;${srcdir}\u0026#34;/{etc,lib,opt,usr} \u0026#34;${pkgdir}\u0026#34; mv -v \u0026#34;$pkgdir/lib/systemd/system\u0026#34; \u0026#34;$pkgdir/usr/lib/systemd/\u0026#34; rm -vrf \u0026#34;$pkgdir/lib\u0026#34; cp -v \u0026#34;$srcdir/appgatedriver.service\u0026#34; \u0026#34;$pkgdir/usr/lib/systemd/system/appgatedriver.service\u0026#34; mkdir -vp \u0026#34;$pkgdir/usr/share/licenses/appgate-sdp\u0026#34; cp -v \u0026#34;$pkgdir/usr/share/doc/appgate/copyright\u0026#34; \u0026#34;$pkgdir/usr/share/licenses/appgate-sdp\u0026#34; cp -v \u0026#34;$pkgdir/usr/share/doc/appgate/LICENSE.github\u0026#34; \u0026#34;$pkgdir/usr/share/licenses/appgate-sdp\u0026#34; cp -v \u0026#34;$pkgdir/usr/share/doc/appgate/LICENSES.chromium.html.bz2\u0026#34; \u0026#34;$pkgdir/usr/share/licenses/appgate-sdp\u0026#34; } md5sums=(\u0026#39;17101aac7623c06d5fbb95f50cf3dbdc\u0026#39; \u0026#39;002644116e20b2d79fdb36b7677ab4cf\u0026#39;) Let\u0026rsquo;s first make sure we have some dependencies. If you do not have yay, check it out.\nyay -S dnsmasq gconf Now, let\u0026rsquo;s install it:\nmakepkg -si Running the client Ok, let\u0026rsquo;s run the client by executing appgate.\nIt complains about not being able to connect.\nEasy fix:\nsudo systemctl start appgatedriver.service Now we should be connected\u0026hellip; but DNS is not working?\nFixing the DNS Running resolvectl should display that something is not right.\nWhy is the DNS not being set by appgate?\n$ head -3 /opt/appgate/linux/set_dns #!/usr/bin/env python3 \u0026#39;\u0026#39;\u0026#39; This is used to set and unset the DNS. It seems like python3 is required for the DNS setting to happen. Let\u0026rsquo;s try to run it.\n$ sudo /opt/appgate/linux/set_dns /opt/appgate/linux/set_dns:88: SyntaxWarning: \u0026#34;is\u0026#34; with a literal. Did you mean \u0026#34;==\u0026#34;? servers = [( socket.AF_INET if x.version is 4 else socket.AF_INET6, map(int, x.packed)) for x in servers] Traceback (most recent call last): File \u0026#34;/opt/appgate/linux/set_dns\u0026#34;, line 30, in \u0026lt;module\u0026gt; import dbus ModuleNotFoundError: No module named \u0026#39;dbus\u0026#39; Ok, let\u0026rsquo;s install it:\n$ sudo python3.8 -m pip install dbus-python Will it work now? Not yet. There\u0026rsquo;s another issue:\n$ sudo /opt/appgate/linux/set_dns /opt/appgate/linux/set_dns:88: SyntaxWarning: \u0026#34;is\u0026#34; with a literal. Did you mean \u0026#34;==\u0026#34;? servers = [( socket.AF_INET if x.version is 4 else socket.AF_INET6, map(int, x.packed)) for x in servers] module \u0026#39;platform\u0026#39; has no attribute \u0026#39;linux_distribution\u0026#39; This is a breaking change in Python3.8.\nSo what is calling platform.linux_distribution?\nLet\u0026rsquo;s search for it:\n$ sudo grep -r \u0026#39;linux_distribution\u0026#39; /opt/appgate/linux/ /opt/appgate/linux/nm.py: if platform.linux_distribution()[0] != \u0026#39;Fedora\u0026#39;: Aha! So this is in the local AppGate source code. This should be an easy fix. Let\u0026rsquo;s just replace this line with:\nif True: # Since we are not using Fedora :) Wrapping up It turns out there are breaking changes in Python3.8.\nThe docs say Deprecated since version 3.5, will be removed in version 3.8: See alternative like the distro package.\nI suppose this highlights one of the caveats of relying upon the system\u0026rsquo;s python, rather than having an isolated, dedicated environment for all dependencies.\n","href":"/blog/2020/03/16/appgate-sdp-on-arch-linux/","title":"AppGate SDP on Arch Linux"},{"content":"","href":"/tags/linux/","title":"linux"},{"content":"","href":"/tags/python/","title":"python"},{"content":"","href":"/tags/vpn/","title":"vpn"},{"content":"test\n","href":"/page/search/","title":""},{"content":"","href":"/authors/","title":"Authors"},{"content":"","href":"/page/","title":"Pages"}]
\ No newline at end of file
+[{"content":"I\u0026rsquo;m a software engineer with a passion for open-source, infrastructure, tooling and security.\n","href":"/about/","title":"About"},{"content":"Rotating credentials is a security best practice. This morning, I read a question about automatically rotating AWS Access Keys without having to go through the hassle of navigating the AWS console. There are some existing solutions already, but I decided to write a script since it was incredibly simple. The script could be packed up as a systemd/launchd service to continually rotate access keys in the background.\nIn the longer term, migrating my workflows to aws-vault seems like a more secure solution. This would mean that credentials (even temporary session credentials) never have to be written in plaintext to disk (i.e. where AWS suggests). Any existing applications, such as terraform, could be have their credentials passed to them from aws-vault, which retrieves them from the OS\u0026rsquo;s secure keystore. There is even a rotate command included.\n","href":"/blog/2021/09/17/automatically-rotating-aws-access-keys/","title":"Automatically Rotating AWS Access Keys"},{"content":"","href":"/tags/aws/","title":"aws"},{"content":"","href":"/tags/aws-vault/","title":"aws-vault"},{"content":"","href":"/","title":"davegallant"},{"content":"","href":"/post/","title":"Posts"},{"content":"","href":"/tags/python/","title":"python"},{"content":"","href":"/tags/security/","title":"security"},{"content":"","href":"/tags/","title":"Tags"},{"content":"","href":"/tags/dotfiles/","title":"dotfiles"},{"content":"","href":"/tags/home-manager/","title":"home-manager"},{"content":"","href":"/tags/nix/","title":"nix"},{"content":"Over the years I have collected a number of dotfiles that I have shared across both Linux and macOS machines (~/.zshrc, ~/.config/git/config, ~/.config/tmux/tmux.conf, etc). I have tried several different ways to manage them, including bare git repos and utilities such as GNU Stow. These solutions work well enough, but I have since found what I would consider a much better solution for organizing user configuration: home-manager.\nWhat is home-manager? Before understanding home-manager, it is worth briefly discussing what nix is. nix is a package manager that originally spawned from a PhD thesis. Unlike other package managers, it uses symbolic links to keep track of the currently installed packages, keeping around the old ones in case you may want to rollback.\nFor example, I have used nix to install the package bind which includes dig. You can see that it is available on multiple platforms. The absolute path of dig can be found by running:\n❯ ls -lh $(which dig) lrwxr-xr-x 73 root 31 Dec 1969 /run/current-system/sw/bin/dig -\u0026gt; /nix/store/0r4qdyprljd3dki57jn6c6a8dh2rbg9g-bind-9.16.16-dnsutils/bin/dig Notice that there is a hash included in the file path? This is a nix store path and is computed by the nix package manager. This nix pill does a good job explaining how this hash is computed. All of the nix pills are worth a read, if you are interested in learning more about nix itself. However, using home-manager does not require extensive knowledge of nix.\nPart of the nix ecosystem includes nixpkgs. Many popular tools can be found already packaged in this repository. As you can see with these stats, there is a large number of existing packages that are being maintained by the community. Contributing a new package is easy, and anyone can do it!\nhome-manager leverages the nix package manager (and nixpkgs), as well the nix language so that you can declaratively define your system configuration. I store my nix-config in git so that I can keep track of my packages and configurations, and retain a clean and informative git commit history so that I can understand what changed and why.\nSetting up home-manager  ⚠️ If you run this on your main machine, make sure you backup your configuration files first. home-manager is pretty good about not overwriting existing configuration, but it is better to have a backup! Alternatively, you could test this out on a VM or cloud instance.\n The first thing you should do is install nix:\ncurl -L https://nixos.org/nix/install | sh It\u0026rsquo;s not a good idea to curl and execute files from the internet (without verifying integrity), so you might want to download the install script first and take a peak before executing it!\nOpen up a new shell in your terminal and running nix should work. If not, run . ~/.nix-profile/etc/profile.d/nix.sh\nNow, install home-manager:\nnix-channel --add https://github.com/nix-community/home-manager/archive/master.tar.gz home-manager nix-channel --update nix-shell \u0026#39;\u0026lt;home-manager\u0026gt;\u0026#39; -A install You should see a wave of /nix/store/* paths being displayed on your screen.\nNow, to start off with a basic configuration, open up ~/.config/nixpkgs/home.nix in the editor of your choice and paste this in (you will want to change userName and homeDirectory):\n{ config, pkgs, ... }: { programs.home-manager.enable = true; home = { username = \u0026#34;dave\u0026#34;; homeDirectory = \u0026#34;/home/dave\u0026#34;; stateVersion = \u0026#34;21.11\u0026#34;; packages = with pkgs; [ bind exa fd ripgrep ]; }; programs = { git = { enable = true; aliases = { aa = \u0026#34;add -A .\u0026#34;; br = \u0026#34;branch\u0026#34;; c = \u0026#34;commit -S\u0026#34;; ca = \u0026#34;commit -S --amend\u0026#34;; cb = \u0026#34;checkout -b\u0026#34;; co = \u0026#34;checkout\u0026#34;; d = \u0026#34;diff\u0026#34;; l = \u0026#34;log --graph --pretty=format:\u0026#39;%Cred%h%Creset -%C(yellow)%d%Creset %s %Cgreen(%cr) %C(bold blue)\u0026lt;%an\u0026gt;%Creset\u0026#39; --abbrev-commit\u0026#34;; }; delta = { enable = true; options = { features = \u0026#34;line-numbers decorations\u0026#34;; whitespace-error-style = \u0026#34;22 reverse\u0026#34;; plus-style = \u0026#34;green bold ul \u0026#39;#198214\u0026#39;\u0026#34;; decorations = { commit-decoration-style = \u0026#34;bold yellow box ul\u0026#34;; file-style = \u0026#34;bold yellow ul\u0026#34;; file-decoration-style = \u0026#34;none\u0026#34;; }; }; }; extraConfig = { push = { default = \u0026#34;current\u0026#34;; }; pull = { rebase = true; }; }; }; starship = { enable = true; enableZshIntegration = true; settings = { add_newline = false; scan_timeout = 10; }; }; zsh = { enable = true; enableAutosuggestions = true; enableSyntaxHighlighting = true; history.size = 1000000; localVariables = { CASE_SENSITIVE = \u0026#34;true\u0026#34;; DISABLE_UNTRACKED_FILES_DIRTY = \u0026#34;true\u0026#34;; RPROMPT = \u0026#34;\u0026#34;; # override because macOS defaults to filepath ZSH_AUTOSUGGEST_HIGHLIGHT_STYLE = \u0026#34;fg=#838383,underline\u0026#34;; ZSH_DISABLE_COMPFIX = \u0026#34;true\u0026#34;; }; initExtra = \u0026#39;\u0026#39; export PAGER=less \u0026#39;\u0026#39;; shellAliases = { \u0026#34;..\u0026#34; = \u0026#34;cd ..\u0026#34;; grep = \u0026#34;rg --smart-case\u0026#34;; ls = \u0026#34;exa -la --git\u0026#34;; }; \u0026#34;oh-my-zsh\u0026#34; = { enable = true; plugins = [ \u0026#34;gitfast\u0026#34; \u0026#34;last-working-dir\u0026#34; ]; }; }; }; } Save the file and run:\nhome-manager switch You should see another wave of /nix/store/* paths. The new configuration should now be active.\nIf you run zsh, you should see that you have starship and access to several other utils such as rg, fd, and exa.\nThis basic configuration above is also defining your ~/.config/git/config and .zshrc. If you already have either of these files, home-manager will complain about them already existing.\nIf you run cat ~/.zshrc, you will see the way these configuration files are generated.\nYou can extend this configuration for programs such as (neo)vim, emacs, alacritty, ssh, etc. To see other programs, take a look at home-manager/modules/programs.\nGateway To Nix In ways, home-manager can be seen as a gateway to the nix ecosystem. If you have enjoyed the way you can declare user configuration with home-manager, you may be interested in expanding your configuration to include other system dependencies and configuration. For example, in Linux you can define your entire system\u0026rsquo;s configuration (including the kernel, kernel modules, networking, filesystems, etc) in nix. For macOS, there is nix-darwin that includes nix modules for configuring launchd, dock, and other preferences and services. You may also want to check out Nix Flakes: a more recent feature that allows you declare dependencies, and have them automatically pinned and hashed in flake.lock, similar to that of many modern package managers.\nWrapping up The title of this post is slightly misleading, since it\u0026rsquo;s possible to retain some of your dotfiles and have them intermingle with home-manager by including them alongside nix. The idea of defining user configuration using nix can provide a clean way to maintain your configuration, and allow it to be portable across platforms. Is it worth the effort to migrate away from more from shell scripts and dotfiles? I\u0026rsquo;d say so.\n","href":"/blog/2021/09/08/why-i-threw-out-my-dotfiles/","title":"Why I Threw Out My Dotfiles"},{"content":"","href":"/tags/adguard/","title":"adguard"},{"content":"","href":"/tags/grafana/","title":"grafana"},{"content":"","href":"/tags/homelab/","title":"homelab"},{"content":"","href":"/tags/jellyfin/","title":"jellyfin"},{"content":"","href":"/tags/netdata/","title":"netdata"},{"content":"","href":"/tags/pihole/","title":"pihole"},{"content":"","href":"/tags/plex/","title":"plex"},{"content":"","href":"/tags/tailscale/","title":"tailscale"},{"content":"","href":"/tags/virtualization/","title":"virtualization"},{"content":"A homelab can be an inexpensive way to host a multitude of internal/external services and learn a lot in the process.\nDo you want host your own Media server? Ad blocker? Web server? Are you interested in learning more about Linux? Virtualization? Networking? Security? Building a homelab can be an entertaining playground to enhance your computer skills.\nOne of the best parts about building a homelab is that it doesn\u0026rsquo;t have to be a large investment in terms hardware. One of the simplest ways to build a homelab is out of a refurbished computer. Having multiple machines/nodes provides the advantage of increased redundancy, but starting out with a single node is enough to reap many of the benefits of having a homelab.\nVirtualization Virtualizing your hardware is an organized way of dividing up your machine\u0026rsquo;s resources. This can be done with something such as a Virtual Machine or something lighter like a container using LXC or runC. Containers have much less overhead in terms of boot time and storage allocation. This Stack Overflow answer sums it up nicely.\nA hypervisor such as Proxmox can be installed in minutes on a new machine. It provides a web interface and a straight-forward way to spin up new VMs and containers. You\u0026rsquo;ll want to ensure that VT-d and VT-X are enabled in the BIOS if you decide to install a hypervisor to manage your virtualization.\nServices So what are some useful services to deploy?\n Jellyfin or Plex - basically a self-hosted Netflix that can be used to stream from multiple devices, and the best part is that you manage the content! Unlike Plex, Jellyfin is open source and can be found here. changedetection - is a self-hosted equivalent to something like visualping.io that will notify you when a webpage changes and keep track of the diffs Adguard or Pihole - can block a list of known trackers for all clients on your local network. I\u0026rsquo;ve used pihole for a long time, but have recently switched to Adguard since the UI is more modern and it has the ability to toggle on/off a pre-defined list of services, including Netflix (this is useful if you have stealthy young kids). Either of these will speed up your internet experience, simply because you won\u0026rsquo;t need to download all of the extra tracking bloat.  There is a large number of services you can self-host, including your own applications that you might be developing. awesome-self-hosted provides a curated list of services that might be of interest to you.\nVPN You could certainly setup and manage your own VPN by using something like OpenVPN, but there is also something else you can try: tailscale. It is a very quick way to create fully-encrypted connections between clients. And by using its MagicDNS, it is a truly magical solution. If one of your nodes has a hostname of plex, you can simply access it by referring to its hostname (i.e ssh plex@plex). This way you can create a secure tunnel to your homelab from anywhere in the world!\nMonitoring Monitoring can become an important aspect of your homelab after it starts to become something that is relied upon. One of the simplest ways to setup some monitoring is using netdata. It can be installed on individual containers, VMs, and also a hypervisor (such as Proxmox). All of the monitoring works out of the box by detecting disks, memory, network interfaces, etc.\nAdditionally, agents installed on different machines can all be centrally viewed in netdata, and it can alert you when some of your infrastructure is down or in a degraded state. Adding additional nodes to netdata is as simple as a 1-line shell command.\nGrafana is another open source analytics and monitoring solution. If you are looking for ideas, check out Wikimedia\u0026rsquo;s public Grafana.\nIn Summary Building out a homelab can be a rewarding experience and it doesn\u0026rsquo;t require buying a rack full of expensive servers to get a significant amount of utility. There are many services you can run that require very minimal setup, making it possible to get a server up and running in a short period of time, with monitoring, and that can be securely connected to from anywhere.\n","href":"/blog/2021/09/06/what-to-do-with-a-homelab/","title":"What To Do With A Homelab"},{"content":"AppGate SDP provides a Zero Trust network. This post describes how to get AppGate SDP 4.3.2 working on Arch Linux.\nDepending on the AppGate SDP Server that is running, you may require a client that is more recent than the latest package on AUR. As of right now, the latest AUR is 4.2.2-1.\nThese steps highlight how to get it working with Python3.8 by making a 1 line modification to AppGate source code.\nPackaging We already know the community package is currently out of date, so let\u0026rsquo;s clone it:\ngit clone https://aur.archlinux.org/appgate-sdp.git cd appgate-sdp You\u0026rsquo;ll likely notice that the version is not what we want, so let\u0026rsquo;s modify the PKGBUILD to the following:\n# Maintainer: Pawel Mosakowski \u0026lt;pawel at mosakowski dot net\u0026gt; pkgname=appgate-sdp conflicts=(\u0026#39;appgate-sdp-headless\u0026#39;) pkgver=4.3.2 _download_pkgver=4.3 pkgrel=1 epoch= pkgdesc=\u0026#34;Software Defined Perimeter - GUI client\u0026#34; arch=(\u0026#39;x86_64\u0026#39;) url=\u0026#34;https://www.cyxtera.com/essential-defense/appgate-sdp/support\u0026#34; license=(\u0026#39;custom\u0026#39;) # dependecies calculated by namcap depends=(\u0026#39;gconf\u0026#39; \u0026#39;libsecret\u0026#39; \u0026#39;gtk3\u0026#39; \u0026#39;python\u0026#39; \u0026#39;nss\u0026#39; \u0026#39;libxss\u0026#39; \u0026#39;nodejs\u0026#39; \u0026#39;dnsmasq\u0026#39;) source=(\u0026#34;https://sdpdownloads.cyxtera.com/AppGate-SDP-${_download_pkgver}/clients/${pkgname}_${pkgver}_amd64.deb\u0026#34; \u0026#34;appgatedriver.service\u0026#34;) options=(staticlibs) prepare() { tar -xf data.tar.xz } package() { cp -dpr \u0026#34;${srcdir}\u0026#34;/{etc,lib,opt,usr} \u0026#34;${pkgdir}\u0026#34; mv -v \u0026#34;$pkgdir/lib/systemd/system\u0026#34; \u0026#34;$pkgdir/usr/lib/systemd/\u0026#34; rm -vrf \u0026#34;$pkgdir/lib\u0026#34; cp -v \u0026#34;$srcdir/appgatedriver.service\u0026#34; \u0026#34;$pkgdir/usr/lib/systemd/system/appgatedriver.service\u0026#34; mkdir -vp \u0026#34;$pkgdir/usr/share/licenses/appgate-sdp\u0026#34; cp -v \u0026#34;$pkgdir/usr/share/doc/appgate/copyright\u0026#34; \u0026#34;$pkgdir/usr/share/licenses/appgate-sdp\u0026#34; cp -v \u0026#34;$pkgdir/usr/share/doc/appgate/LICENSE.github\u0026#34; \u0026#34;$pkgdir/usr/share/licenses/appgate-sdp\u0026#34; cp -v \u0026#34;$pkgdir/usr/share/doc/appgate/LICENSES.chromium.html.bz2\u0026#34; \u0026#34;$pkgdir/usr/share/licenses/appgate-sdp\u0026#34; } md5sums=(\u0026#39;17101aac7623c06d5fbb95f50cf3dbdc\u0026#39; \u0026#39;002644116e20b2d79fdb36b7677ab4cf\u0026#39;) Let\u0026rsquo;s first make sure we have some dependencies. If you do not have yay, check it out.\nyay -S dnsmasq gconf Now, let\u0026rsquo;s install it:\nmakepkg -si Running the client Ok, let\u0026rsquo;s run the client by executing appgate.\nIt complains about not being able to connect.\nEasy fix:\nsudo systemctl start appgatedriver.service Now we should be connected\u0026hellip; but DNS is not working?\nFixing the DNS Running resolvectl should display that something is not right.\nWhy is the DNS not being set by appgate?\n$ head -3 /opt/appgate/linux/set_dns #!/usr/bin/env python3 \u0026#39;\u0026#39;\u0026#39; This is used to set and unset the DNS. It seems like python3 is required for the DNS setting to happen. Let\u0026rsquo;s try to run it.\n$ sudo /opt/appgate/linux/set_dns /opt/appgate/linux/set_dns:88: SyntaxWarning: \u0026#34;is\u0026#34; with a literal. Did you mean \u0026#34;==\u0026#34;? servers = [( socket.AF_INET if x.version is 4 else socket.AF_INET6, map(int, x.packed)) for x in servers] Traceback (most recent call last): File \u0026#34;/opt/appgate/linux/set_dns\u0026#34;, line 30, in \u0026lt;module\u0026gt; import dbus ModuleNotFoundError: No module named \u0026#39;dbus\u0026#39; Ok, let\u0026rsquo;s install it:\n$ sudo python3.8 -m pip install dbus-python Will it work now? Not yet. There\u0026rsquo;s another issue:\n$ sudo /opt/appgate/linux/set_dns /opt/appgate/linux/set_dns:88: SyntaxWarning: \u0026#34;is\u0026#34; with a literal. Did you mean \u0026#34;==\u0026#34;? servers = [( socket.AF_INET if x.version is 4 else socket.AF_INET6, map(int, x.packed)) for x in servers] module \u0026#39;platform\u0026#39; has no attribute \u0026#39;linux_distribution\u0026#39; This is a breaking change in Python3.8.\nSo what is calling platform.linux_distribution?\nLet\u0026rsquo;s search for it:\n$ sudo grep -r \u0026#39;linux_distribution\u0026#39; /opt/appgate/linux/ /opt/appgate/linux/nm.py: if platform.linux_distribution()[0] != \u0026#39;Fedora\u0026#39;: Aha! So this is in the local AppGate source code. This should be an easy fix. Let\u0026rsquo;s just replace this line with:\nif True: # Since we are not using Fedora :) Wrapping up It turns out there are breaking changes in Python3.8.\nThe docs say Deprecated since version 3.5, will be removed in version 3.8: See alternative like the distro package.\nI suppose this highlights one of the caveats of relying upon the system\u0026rsquo;s python, rather than having an isolated, dedicated environment for all dependencies.\n","href":"/blog/2020/03/16/appgate-sdp-on-arch-linux/","title":"AppGate SDP on Arch Linux"},{"content":"","href":"/tags/linux/","title":"linux"},{"content":"","href":"/tags/vpn/","title":"vpn"},{"content":"test\n","href":"/page/search/","title":""},{"content":"","href":"/authors/","title":"Authors"},{"content":"","href":"/page/","title":"Pages"}]
\ No newline at end of file
diff --git a/post/index.html b/post/index.html
index dc2fb234..7599af95 100644
--- a/post/index.html
+++ b/post/index.html
@@ -7,7 +7,7 @@
 <meta property="og:description" content="personal blog">
 <meta property="og:url" content="/post/">
 <meta property="og:site_name" content="davegallant">
-<meta property="og:type" content="website"><meta property="og:updated_time" content="2021-09-08T00:42:33-04:00"><meta name=twitter:card content="summary">
+<meta property="og:type" content="website"><meta property="og:updated_time" content="2021-09-17T12:48:33-04:00"><meta name=twitter:card content="summary">
 <meta name=generator content="Hugo 0.88.0">
 <title>Posts • davegallant</title>
 <link rel=canonical href=/post/>
@@ -45,6 +45,10 @@ personal blog
 <ul class="list taxonomy-cloud"><li>
 <a href=/tags/adguard/ style=font-size:1em>adguard</a>
 </li><li>
+<a href=/tags/aws/ style=font-size:1em>aws</a>
+</li><li>
+<a href=/tags/aws-vault/ style=font-size:1em>aws-vault</a>
+</li><li>
 <a href=/tags/dotfiles/ style=font-size:1em>dotfiles</a>
 </li><li>
 <a href=/tags/grafana/ style=font-size:1em>grafana</a>
@@ -65,7 +69,9 @@ personal blog
 </li><li>
 <a href=/tags/plex/ style=font-size:1em>plex</a>
 </li><li>
-<a href=/tags/python/ style=font-size:1em>python</a>
+<a href=/tags/python/ style=font-size:2em>python</a>
+</li><li>
+<a href=/tags/security/ style=font-size:1em>security</a>
 </li><li>
 <a href=/tags/tailscale/ style=font-size:1em>tailscale</a>
 </li><li>
@@ -135,6 +141,19 @@ personal blog
 <div class=meta>
 <span>
 <span class=screen-reader-text>Posted on </span>
+<time datetime=2021-09-17T12:48:33-04:00>2021, Sep 17</time>
+</span>
+</div>
+<header class=item-header>
+<h3 class=item-title>
+<a href=/blog/2021/09/17/automatically-rotating-aws-access-keys/>Automatically Rotating AWS Access Keys</a>
+</h3>
+</header>
+</li>
+<li class=item>
+<div class=meta>
+<span>
+<span class=screen-reader-text>Posted on </span>
 <time datetime=2021-09-08T00:42:33-04:00>2021, Sep 08</time>
 </span>
 </div>
diff --git a/post/index.xml b/post/index.xml
index f433700f..be92fe53 100644
--- a/post/index.xml
+++ b/post/index.xml
@@ -1 +1 @@
-<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Posts on davegallant</title><link>/post/</link><description>Recent content in Posts on davegallant</description><generator>Hugo -- gohugo.io</generator><language>en-us</language><lastBuildDate>Wed, 08 Sep 2021 00:42:33 -0400</lastBuildDate><atom:link href="/post/index.xml" rel="self" type="application/rss+xml"/><item><title>Why I Threw Out My Dotfiles</title><link>/blog/2021/09/08/why-i-threw-out-my-dotfiles/</link><pubDate>Wed, 08 Sep 2021 00:42:33 -0400</pubDate><guid>/blog/2021/09/08/why-i-threw-out-my-dotfiles/</guid><description/></item><item><title>What To Do With A Homelab</title><link>/blog/2021/09/06/what-to-do-with-a-homelab/</link><pubDate>Mon, 06 Sep 2021 01:12:54 -0400</pubDate><guid>/blog/2021/09/06/what-to-do-with-a-homelab/</guid><description>&lt;p>A homelab can be an inexpensive way to host a multitude of internal/external services and learn &lt;em>a lot&lt;/em> in the process.&lt;/p></description></item><item><title>AppGate SDP on Arch Linux</title><link>/blog/2020/03/16/appgate-sdp-on-arch-linux/</link><pubDate>Mon, 16 Mar 2020 22:00:15 -0400</pubDate><guid>/blog/2020/03/16/appgate-sdp-on-arch-linux/</guid><description>&lt;p>AppGate SDP provides a Zero Trust network. This post describes how to get AppGate SDP &lt;code>4.3.2&lt;/code> working on Arch Linux.&lt;/p></description></item></channel></rss>
\ No newline at end of file
+<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Posts on davegallant</title><link>/post/</link><description>Recent content in Posts on davegallant</description><generator>Hugo -- gohugo.io</generator><language>en-us</language><lastBuildDate>Fri, 17 Sep 2021 12:48:33 -0400</lastBuildDate><atom:link href="/post/index.xml" rel="self" type="application/rss+xml"/><item><title>Automatically Rotating AWS Access Keys</title><link>/blog/2021/09/17/automatically-rotating-aws-access-keys/</link><pubDate>Fri, 17 Sep 2021 12:48:33 -0400</pubDate><guid>/blog/2021/09/17/automatically-rotating-aws-access-keys/</guid><description/></item><item><title>Why I Threw Out My Dotfiles</title><link>/blog/2021/09/08/why-i-threw-out-my-dotfiles/</link><pubDate>Wed, 08 Sep 2021 00:42:33 -0400</pubDate><guid>/blog/2021/09/08/why-i-threw-out-my-dotfiles/</guid><description/></item><item><title>What To Do With A Homelab</title><link>/blog/2021/09/06/what-to-do-with-a-homelab/</link><pubDate>Mon, 06 Sep 2021 01:12:54 -0400</pubDate><guid>/blog/2021/09/06/what-to-do-with-a-homelab/</guid><description>&lt;p>A homelab can be an inexpensive way to host a multitude of internal/external services and learn &lt;em>a lot&lt;/em> in the process.&lt;/p></description></item><item><title>AppGate SDP on Arch Linux</title><link>/blog/2020/03/16/appgate-sdp-on-arch-linux/</link><pubDate>Mon, 16 Mar 2020 22:00:15 -0400</pubDate><guid>/blog/2020/03/16/appgate-sdp-on-arch-linux/</guid><description>&lt;p>AppGate SDP provides a Zero Trust network. This post describes how to get AppGate SDP &lt;code>4.3.2&lt;/code> working on Arch Linux.&lt;/p></description></item></channel></rss>
\ No newline at end of file
diff --git a/sitemap.xml b/sitemap.xml
index b2c80689..40ed06c8 100644
--- a/sitemap.xml
+++ b/sitemap.xml
@@ -1 +1 @@
-<?xml version="1.0" encoding="utf-8" standalone="yes"?><urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9" xmlns:xhtml="http://www.w3.org/1999/xhtml"><url><loc>/about/</loc></url><url><loc>/</loc><lastmod>2021-09-08T00:42:33-04:00</lastmod></url><url><loc>/tags/dotfiles/</loc><lastmod>2021-09-08T00:42:33-04:00</lastmod></url><url><loc>/tags/home-manager/</loc><lastmod>2021-09-08T00:42:33-04:00</lastmod></url><url><loc>/tags/nix/</loc><lastmod>2021-09-08T00:42:33-04:00</lastmod></url><url><loc>/post/</loc><lastmod>2021-09-08T00:42:33-04:00</lastmod></url><url><loc>/tags/</loc><lastmod>2021-09-08T00:42:33-04:00</lastmod></url><url><loc>/blog/2021/09/08/why-i-threw-out-my-dotfiles/</loc><lastmod>2021-09-08T00:42:33-04:00</lastmod></url><url><loc>/tags/adguard/</loc><lastmod>2021-09-06T01:12:54-04:00</lastmod></url><url><loc>/tags/grafana/</loc><lastmod>2021-09-06T01:12:54-04:00</lastmod></url><url><loc>/tags/homelab/</loc><lastmod>2021-09-06T01:12:54-04:00</lastmod></url><url><loc>/tags/jellyfin/</loc><lastmod>2021-09-06T01:12:54-04:00</lastmod></url><url><loc>/tags/netdata/</loc><lastmod>2021-09-06T01:12:54-04:00</lastmod></url><url><loc>/tags/pihole/</loc><lastmod>2021-09-06T01:12:54-04:00</lastmod></url><url><loc>/tags/plex/</loc><lastmod>2021-09-06T01:12:54-04:00</lastmod></url><url><loc>/tags/tailscale/</loc><lastmod>2021-09-06T01:12:54-04:00</lastmod></url><url><loc>/tags/virtualization/</loc><lastmod>2021-09-06T01:12:54-04:00</lastmod></url><url><loc>/blog/2021/09/06/what-to-do-with-a-homelab/</loc><lastmod>2021-09-06T01:12:54-04:00</lastmod></url><url><loc>/blog/2020/03/16/appgate-sdp-on-arch-linux/</loc><lastmod>2020-03-16T22:00:15-04:00</lastmod></url><url><loc>/tags/linux/</loc><lastmod>2020-03-16T22:00:15-04:00</lastmod></url><url><loc>/tags/python/</loc><lastmod>2020-03-16T22:00:15-04:00</lastmod></url><url><loc>/tags/vpn/</loc><lastmod>2020-03-16T22:00:15-04:00</lastmod></url><url><loc>/page/search/</loc></url><url><loc>/authors/</loc></url><url><loc>/page/</loc></url></urlset>
\ No newline at end of file
+<?xml version="1.0" encoding="utf-8" standalone="yes"?><urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9" xmlns:xhtml="http://www.w3.org/1999/xhtml"><url><loc>/about/</loc></url><url><loc>/blog/2021/09/17/automatically-rotating-aws-access-keys/</loc><lastmod>2021-09-17T12:48:33-04:00</lastmod></url><url><loc>/tags/aws/</loc><lastmod>2021-09-17T12:48:33-04:00</lastmod></url><url><loc>/tags/aws-vault/</loc><lastmod>2021-09-17T12:48:33-04:00</lastmod></url><url><loc>/</loc><lastmod>2021-09-17T12:48:33-04:00</lastmod></url><url><loc>/post/</loc><lastmod>2021-09-17T12:48:33-04:00</lastmod></url><url><loc>/tags/python/</loc><lastmod>2021-09-17T12:48:33-04:00</lastmod></url><url><loc>/tags/security/</loc><lastmod>2021-09-17T12:48:33-04:00</lastmod></url><url><loc>/tags/</loc><lastmod>2021-09-17T12:48:33-04:00</lastmod></url><url><loc>/tags/dotfiles/</loc><lastmod>2021-09-08T00:42:33-04:00</lastmod></url><url><loc>/tags/home-manager/</loc><lastmod>2021-09-08T00:42:33-04:00</lastmod></url><url><loc>/tags/nix/</loc><lastmod>2021-09-08T00:42:33-04:00</lastmod></url><url><loc>/blog/2021/09/08/why-i-threw-out-my-dotfiles/</loc><lastmod>2021-09-08T00:42:33-04:00</lastmod></url><url><loc>/tags/adguard/</loc><lastmod>2021-09-06T01:12:54-04:00</lastmod></url><url><loc>/tags/grafana/</loc><lastmod>2021-09-06T01:12:54-04:00</lastmod></url><url><loc>/tags/homelab/</loc><lastmod>2021-09-06T01:12:54-04:00</lastmod></url><url><loc>/tags/jellyfin/</loc><lastmod>2021-09-06T01:12:54-04:00</lastmod></url><url><loc>/tags/netdata/</loc><lastmod>2021-09-06T01:12:54-04:00</lastmod></url><url><loc>/tags/pihole/</loc><lastmod>2021-09-06T01:12:54-04:00</lastmod></url><url><loc>/tags/plex/</loc><lastmod>2021-09-06T01:12:54-04:00</lastmod></url><url><loc>/tags/tailscale/</loc><lastmod>2021-09-06T01:12:54-04:00</lastmod></url><url><loc>/tags/virtualization/</loc><lastmod>2021-09-06T01:12:54-04:00</lastmod></url><url><loc>/blog/2021/09/06/what-to-do-with-a-homelab/</loc><lastmod>2021-09-06T01:12:54-04:00</lastmod></url><url><loc>/blog/2020/03/16/appgate-sdp-on-arch-linux/</loc><lastmod>2020-03-16T22:00:15-04:00</lastmod></url><url><loc>/tags/linux/</loc><lastmod>2020-03-16T22:00:15-04:00</lastmod></url><url><loc>/tags/vpn/</loc><lastmod>2020-03-16T22:00:15-04:00</lastmod></url><url><loc>/page/search/</loc></url><url><loc>/authors/</loc></url><url><loc>/page/</loc></url></urlset>
\ No newline at end of file
diff --git a/tags/adguard/index.html b/tags/adguard/index.html
index 72e067d0..82c09e8e 100644
--- a/tags/adguard/index.html
+++ b/tags/adguard/index.html
@@ -7,7 +7,7 @@
 <meta property="og:description" content="personal blog">
 <meta property="og:url" content="/tags/adguard/">
 <meta property="og:site_name" content="davegallant">
-<meta property="og:type" content="website"><meta property="og:updated_time" content="2021-09-08T00:42:33-04:00"><meta name=twitter:card content="summary">
+<meta property="og:type" content="website"><meta property="og:updated_time" content="2021-09-17T12:48:33-04:00"><meta name=twitter:card content="summary">
 <meta name=generator content="Hugo 0.88.0">
 <title>Tag: adguard • davegallant</title>
 <link rel=canonical href=/tags/adguard/>
@@ -45,6 +45,10 @@ personal blog
 <ul class="list taxonomy-cloud"><li>
 <a href=/tags/adguard/ style=font-size:1em>adguard</a>
 </li><li>
+<a href=/tags/aws/ style=font-size:1em>aws</a>
+</li><li>
+<a href=/tags/aws-vault/ style=font-size:1em>aws-vault</a>
+</li><li>
 <a href=/tags/dotfiles/ style=font-size:1em>dotfiles</a>
 </li><li>
 <a href=/tags/grafana/ style=font-size:1em>grafana</a>
@@ -65,7 +69,9 @@ personal blog
 </li><li>
 <a href=/tags/plex/ style=font-size:1em>plex</a>
 </li><li>
-<a href=/tags/python/ style=font-size:1em>python</a>
+<a href=/tags/python/ style=font-size:2em>python</a>
+</li><li>
+<a href=/tags/security/ style=font-size:1em>security</a>
 </li><li>
 <a href=/tags/tailscale/ style=font-size:1em>tailscale</a>
 </li><li>
diff --git a/tags/aws-vault/index.html b/tags/aws-vault/index.html
new file mode 100644
index 00000000..4fcce6c1
--- /dev/null
+++ b/tags/aws-vault/index.html
@@ -0,0 +1,166 @@
+<!doctype html><html lang=en dir=auto><head>
+<meta charset=utf-8>
+<meta name=viewport content="width=device-width,initial-scale=1">
+<meta name=description content="personal blog">
+<meta name=theme-color content="#8979b3">
+<meta property="og:title" content="Tag: aws-vault • davegallant">
+<meta property="og:description" content="personal blog">
+<meta property="og:url" content="/tags/aws-vault/">
+<meta property="og:site_name" content="davegallant">
+<meta property="og:type" content="website"><meta property="og:updated_time" content="2021-09-17T12:48:33-04:00"><meta name=twitter:card content="summary">
+<meta name=generator content="Hugo 0.88.0">
+<title>Tag: aws-vault • davegallant</title>
+<link rel=canonical href=/tags/aws-vault/>
+<link href=/tags/aws-vault/index.xml rel=alternate type=application/rss+xml title=davegallant>
+<link rel=icon href=/favicon.ico>
+<link rel=stylesheet href=/assets/css/main.ab98e12b.css><link rel=stylesheet href=/css/custom.css><style>:root{--color-accent:#8979b3}</style>
+<script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga('create','UA-98710982-2','auto'),ga('send','pageview'))</script>
+<script async src=https://www.google-analytics.com/analytics.js></script>
+</head>
+<body class="term type-tags taxonomy-tag has-sidebar">
+<div class=site><div id=sidebar class=sidebar>
+<a class=screen-reader-text href=#main-menu>Skip to Main Menu</a>
+<div class=container><section class="widget widget-about sep-after">
+<header>
+<div class=logo>
+<a href=/>
+<img src=/images/logo.png>
+</a>
+</div>
+<h2 class="title site-title">
+<a href=/>
+davegallant
+</a>
+</h2>
+<div class=desc>
+personal blog
+</div>
+</header>
+</section>
+<section class="widget widget-taxonomy_cloud sep-after">
+<header>
+<h4 class="title widget-title">Tags</h4>
+</header>
+<div class="container list-container">
+<ul class="list taxonomy-cloud"><li>
+<a href=/tags/adguard/ style=font-size:1em>adguard</a>
+</li><li>
+<a href=/tags/aws/ style=font-size:1em>aws</a>
+</li><li>
+<a href=/tags/aws-vault/ style=font-size:1em>aws-vault</a>
+</li><li>
+<a href=/tags/dotfiles/ style=font-size:1em>dotfiles</a>
+</li><li>
+<a href=/tags/grafana/ style=font-size:1em>grafana</a>
+</li><li>
+<a href=/tags/home-manager/ style=font-size:1em>home-manager</a>
+</li><li>
+<a href=/tags/homelab/ style=font-size:1em>homelab</a>
+</li><li>
+<a href=/tags/jellyfin/ style=font-size:1em>jellyfin</a>
+</li><li>
+<a href=/tags/linux/ style=font-size:1em>linux</a>
+</li><li>
+<a href=/tags/netdata/ style=font-size:1em>netdata</a>
+</li><li>
+<a href=/tags/nix/ style=font-size:1em>nix</a>
+</li><li>
+<a href=/tags/pihole/ style=font-size:1em>pihole</a>
+</li><li>
+<a href=/tags/plex/ style=font-size:1em>plex</a>
+</li><li>
+<a href=/tags/python/ style=font-size:2em>python</a>
+</li><li>
+<a href=/tags/security/ style=font-size:1em>security</a>
+</li><li>
+<a href=/tags/tailscale/ style=font-size:1em>tailscale</a>
+</li><li>
+<a href=/tags/virtualization/ style=font-size:1em>virtualization</a>
+</li><li>
+<a href=/tags/vpn/ style=font-size:1em>vpn</a>
+</li></ul>
+</div>
+</section>
+<section class="widget widget-social_menu sep-after"><nav aria-label="Social Menu">
+<ul><li>
+<a href=https://github.com/davegallant target=_blank rel="noopener me">
+<span class=screen-reader-text>Open Github account in new tab</span><svg class="icon" xmlns="http://www.w3.org/2000/svg" viewbox="0 0 24 24" stroke-linecap="round" stroke-linejoin="round" stroke-width="2" aria-hidden="true"><path d="M9 19c-5 1.5-5-2.5-7-3m14 6v-3.87a3.37 3.37.0 00-.94-2.61c3.14-.35 6.44-1.54 6.44-7A5.44 5.44.0 0020 4.77 5.07 5.07.0 0019.91 1S18.73.65 16 2.48a13.38 13.38.0 00-7 0C6.27.65 5.09 1 5.09 1A5.07 5.07.0 005 4.77 5.44 5.44.0 003.5 8.55c0 5.42 3.3 6.61 6.44 7A3.37 3.37.0 009 18.13V22"/></svg>
+</a>
+</li><li>
+<a href=https://twitter.com/dave_gallant_ target=_blank rel="noopener me">
+<span class=screen-reader-text>Open Twitter account in new tab</span><svg class="icon" xmlns="http://www.w3.org/2000/svg" viewbox="0 0 24 24" stroke-linecap="round" stroke-linejoin="round" stroke-width="2" aria-hidden="true"><path d="M23 3a10.9 10.9.0 01-3.14 1.53 4.48 4.48.0 00-7.86 3v1A10.66 10.66.0 013 4s-4 9 5 13a11.64 11.64.0 01-7 2c9 5 20 0 20-11.5a4.5 4.5.0 00-.08-.83A7.72 7.72.0 0023 3z"/></svg>
+</a>
+</li><li>
+<a href=mailto:davegallant@gmail.com target=_blank rel="noopener me">
+<span class=screen-reader-text>Contact via Email</span><svg class="icon" xmlns="http://www.w3.org/2000/svg" viewbox="0 0 24 24" stroke-linecap="round" stroke-linejoin="round" stroke-width="2" aria-hidden="true"><path d="M4 4h16c1.1.0 2 .9 2 2v12c0 1.1-.9 2-2 2H4c-1.1.0-2-.9-2-2V6c0-1.1.9-2 2-2z"/><polyline points="22,6 12,13 2,6"/></svg>
+</a>
+</li><li>
+<a href=https://linkedin.com/in/dave-gallant target=_blank rel="noopener me">
+<span class=screen-reader-text>Open Linkedin account in new tab</span><svg class="icon" xmlns="http://www.w3.org/2000/svg" viewbox="0 0 24 24" stroke-linecap="round" stroke-linejoin="round" stroke-width="2" aria-hidden="true"><path d="M16 8a6 6 0 016 6v7h-4v-7a2 2 0 00-2-2 2 2 0 00-2 2v7h-4v-7a6 6 0 016-6z"/><rect x="2" y="9" width="4" height="12"/><circle cx="4" cy="4" r="2"/></svg>
+</a>
+</li></ul>
+</nav>
+</section></div>
+<div class=sidebar-overlay></div>
+</div><div class=main><nav id=main-menu class="menu main-menu" aria-label="Main Menu">
+<div class=container>
+<a class=screen-reader-text href=#content>Skip to Content</a>
+<button id=sidebar-toggler class=sidebar-toggler aria-controls=sidebar>
+<span class=screen-reader-text>Toggle Sidebar</span>
+<span class=open><svg class="icon" xmlns="http://www.w3.org/2000/svg" viewbox="0 0 24 24" stroke-linecap="round" stroke-linejoin="round" stroke-width="2" aria-hidden="true"><line x1="3" y1="12" x2="21" y2="12"/><line x1="3" y1="6" x2="21" y2="6"/><line x1="3" y1="18" x2="21" y2="18"/></svg>
+</span>
+<span class=close><svg class="icon" xmlns="http://www.w3.org/2000/svg" viewbox="0 0 24 24" stroke-linecap="round" stroke-linejoin="round" stroke-width="2" aria-hidden="true"><line x1="18" y1="6" x2="6" y2="18"/><line x1="6" y1="6" x2="18" y2="18"/></svg>
+</span>
+</button>
+<ul><li class=item>
+<a href=/>Home</a>
+</li><li class=item>
+<a href=/about/>About</a>
+</li><li class=item>
+<a href=/index.xml>RSS</a>
+</li></ul>
+</div>
+</nav><div class=header-widgets>
+<div class=container></div>
+</div>
+<header id=header class="header site-header">
+<div class="container sep-after">
+</div>
+</header>
+<main id=content>
+<header class=header>
+<div class="container sep-after">
+<div class=header-info>
+<h1 class=title><span class=taxonomy-name>Tag: </span>aws-vault</h1>
+</div>
+</div>
+</header>
+<div class="container list-container">
+<ul class=list>
+<li class=item>
+<div class=meta>
+<span>
+<span class=screen-reader-text>Posted on </span>
+<time datetime=2021-09-17T12:48:33-04:00>2021, Sep 17</time>
+</span>
+</div>
+<header class=item-header>
+<h3 class=item-title>
+<a href=/blog/2021/09/17/automatically-rotating-aws-access-keys/>Automatically Rotating AWS Access Keys</a>
+</h3>
+</header>
+</li>
+</ul>
+</div>
+</main>
+<footer id=footer class=footer>
+<div class="container sep-before"><div class=copyright>
+<p> &copy; 2020-2021 Dave Gallant </p>
+</div>
+</div>
+</footer>
+</div>
+</div><script>window.__assets_js_src="/assets/js/"</script>
+<script src=/assets/js/main.c3bcf2df.js></script>
+</body>
+</html>
\ No newline at end of file
diff --git a/tags/aws-vault/index.xml b/tags/aws-vault/index.xml
new file mode 100644
index 00000000..fb7a95bb
--- /dev/null
+++ b/tags/aws-vault/index.xml
@@ -0,0 +1 @@
+<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>aws-vault on davegallant</title><link>/tags/aws-vault/</link><description>Recent content in aws-vault on davegallant</description><generator>Hugo -- gohugo.io</generator><language>en-us</language><lastBuildDate>Fri, 17 Sep 2021 12:48:33 -0400</lastBuildDate><atom:link href="/tags/aws-vault/index.xml" rel="self" type="application/rss+xml"/><item><title>Automatically Rotating AWS Access Keys</title><link>/blog/2021/09/17/automatically-rotating-aws-access-keys/</link><pubDate>Fri, 17 Sep 2021 12:48:33 -0400</pubDate><guid>/blog/2021/09/17/automatically-rotating-aws-access-keys/</guid><description/></item></channel></rss>
\ No newline at end of file
diff --git a/tags/aws-vault/page/1/index.html b/tags/aws-vault/page/1/index.html
new file mode 100644
index 00000000..4d365e5a
--- /dev/null
+++ b/tags/aws-vault/page/1/index.html
@@ -0,0 +1 @@
+<!doctype html><html><head><title>/tags/aws-vault/</title><link rel=canonical href=/tags/aws-vault/><meta name=robots content="noindex"><meta charset=utf-8><meta http-equiv=refresh content="0; url=/tags/aws-vault/"></head></html>
\ No newline at end of file
diff --git a/tags/aws/index.html b/tags/aws/index.html
new file mode 100644
index 00000000..ebd46e8a
--- /dev/null
+++ b/tags/aws/index.html
@@ -0,0 +1,166 @@
+<!doctype html><html lang=en dir=auto><head>
+<meta charset=utf-8>
+<meta name=viewport content="width=device-width,initial-scale=1">
+<meta name=description content="personal blog">
+<meta name=theme-color content="#8979b3">
+<meta property="og:title" content="Tag: aws • davegallant">
+<meta property="og:description" content="personal blog">
+<meta property="og:url" content="/tags/aws/">
+<meta property="og:site_name" content="davegallant">
+<meta property="og:type" content="website"><meta property="og:updated_time" content="2021-09-17T12:48:33-04:00"><meta name=twitter:card content="summary">
+<meta name=generator content="Hugo 0.88.0">
+<title>Tag: aws • davegallant</title>
+<link rel=canonical href=/tags/aws/>
+<link href=/tags/aws/index.xml rel=alternate type=application/rss+xml title=davegallant>
+<link rel=icon href=/favicon.ico>
+<link rel=stylesheet href=/assets/css/main.ab98e12b.css><link rel=stylesheet href=/css/custom.css><style>:root{--color-accent:#8979b3}</style>
+<script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga('create','UA-98710982-2','auto'),ga('send','pageview'))</script>
+<script async src=https://www.google-analytics.com/analytics.js></script>
+</head>
+<body class="term type-tags taxonomy-tag has-sidebar">
+<div class=site><div id=sidebar class=sidebar>
+<a class=screen-reader-text href=#main-menu>Skip to Main Menu</a>
+<div class=container><section class="widget widget-about sep-after">
+<header>
+<div class=logo>
+<a href=/>
+<img src=/images/logo.png>
+</a>
+</div>
+<h2 class="title site-title">
+<a href=/>
+davegallant
+</a>
+</h2>
+<div class=desc>
+personal blog
+</div>
+</header>
+</section>
+<section class="widget widget-taxonomy_cloud sep-after">
+<header>
+<h4 class="title widget-title">Tags</h4>
+</header>
+<div class="container list-container">
+<ul class="list taxonomy-cloud"><li>
+<a href=/tags/adguard/ style=font-size:1em>adguard</a>
+</li><li>
+<a href=/tags/aws/ style=font-size:1em>aws</a>
+</li><li>
+<a href=/tags/aws-vault/ style=font-size:1em>aws-vault</a>
+</li><li>
+<a href=/tags/dotfiles/ style=font-size:1em>dotfiles</a>
+</li><li>
+<a href=/tags/grafana/ style=font-size:1em>grafana</a>
+</li><li>
+<a href=/tags/home-manager/ style=font-size:1em>home-manager</a>
+</li><li>
+<a href=/tags/homelab/ style=font-size:1em>homelab</a>
+</li><li>
+<a href=/tags/jellyfin/ style=font-size:1em>jellyfin</a>
+</li><li>
+<a href=/tags/linux/ style=font-size:1em>linux</a>
+</li><li>
+<a href=/tags/netdata/ style=font-size:1em>netdata</a>
+</li><li>
+<a href=/tags/nix/ style=font-size:1em>nix</a>
+</li><li>
+<a href=/tags/pihole/ style=font-size:1em>pihole</a>
+</li><li>
+<a href=/tags/plex/ style=font-size:1em>plex</a>
+</li><li>
+<a href=/tags/python/ style=font-size:2em>python</a>
+</li><li>
+<a href=/tags/security/ style=font-size:1em>security</a>
+</li><li>
+<a href=/tags/tailscale/ style=font-size:1em>tailscale</a>
+</li><li>
+<a href=/tags/virtualization/ style=font-size:1em>virtualization</a>
+</li><li>
+<a href=/tags/vpn/ style=font-size:1em>vpn</a>
+</li></ul>
+</div>
+</section>
+<section class="widget widget-social_menu sep-after"><nav aria-label="Social Menu">
+<ul><li>
+<a href=https://github.com/davegallant target=_blank rel="noopener me">
+<span class=screen-reader-text>Open Github account in new tab</span><svg class="icon" xmlns="http://www.w3.org/2000/svg" viewbox="0 0 24 24" stroke-linecap="round" stroke-linejoin="round" stroke-width="2" aria-hidden="true"><path d="M9 19c-5 1.5-5-2.5-7-3m14 6v-3.87a3.37 3.37.0 00-.94-2.61c3.14-.35 6.44-1.54 6.44-7A5.44 5.44.0 0020 4.77 5.07 5.07.0 0019.91 1S18.73.65 16 2.48a13.38 13.38.0 00-7 0C6.27.65 5.09 1 5.09 1A5.07 5.07.0 005 4.77 5.44 5.44.0 003.5 8.55c0 5.42 3.3 6.61 6.44 7A3.37 3.37.0 009 18.13V22"/></svg>
+</a>
+</li><li>
+<a href=https://twitter.com/dave_gallant_ target=_blank rel="noopener me">
+<span class=screen-reader-text>Open Twitter account in new tab</span><svg class="icon" xmlns="http://www.w3.org/2000/svg" viewbox="0 0 24 24" stroke-linecap="round" stroke-linejoin="round" stroke-width="2" aria-hidden="true"><path d="M23 3a10.9 10.9.0 01-3.14 1.53 4.48 4.48.0 00-7.86 3v1A10.66 10.66.0 013 4s-4 9 5 13a11.64 11.64.0 01-7 2c9 5 20 0 20-11.5a4.5 4.5.0 00-.08-.83A7.72 7.72.0 0023 3z"/></svg>
+</a>
+</li><li>
+<a href=mailto:davegallant@gmail.com target=_blank rel="noopener me">
+<span class=screen-reader-text>Contact via Email</span><svg class="icon" xmlns="http://www.w3.org/2000/svg" viewbox="0 0 24 24" stroke-linecap="round" stroke-linejoin="round" stroke-width="2" aria-hidden="true"><path d="M4 4h16c1.1.0 2 .9 2 2v12c0 1.1-.9 2-2 2H4c-1.1.0-2-.9-2-2V6c0-1.1.9-2 2-2z"/><polyline points="22,6 12,13 2,6"/></svg>
+</a>
+</li><li>
+<a href=https://linkedin.com/in/dave-gallant target=_blank rel="noopener me">
+<span class=screen-reader-text>Open Linkedin account in new tab</span><svg class="icon" xmlns="http://www.w3.org/2000/svg" viewbox="0 0 24 24" stroke-linecap="round" stroke-linejoin="round" stroke-width="2" aria-hidden="true"><path d="M16 8a6 6 0 016 6v7h-4v-7a2 2 0 00-2-2 2 2 0 00-2 2v7h-4v-7a6 6 0 016-6z"/><rect x="2" y="9" width="4" height="12"/><circle cx="4" cy="4" r="2"/></svg>
+</a>
+</li></ul>
+</nav>
+</section></div>
+<div class=sidebar-overlay></div>
+</div><div class=main><nav id=main-menu class="menu main-menu" aria-label="Main Menu">
+<div class=container>
+<a class=screen-reader-text href=#content>Skip to Content</a>
+<button id=sidebar-toggler class=sidebar-toggler aria-controls=sidebar>
+<span class=screen-reader-text>Toggle Sidebar</span>
+<span class=open><svg class="icon" xmlns="http://www.w3.org/2000/svg" viewbox="0 0 24 24" stroke-linecap="round" stroke-linejoin="round" stroke-width="2" aria-hidden="true"><line x1="3" y1="12" x2="21" y2="12"/><line x1="3" y1="6" x2="21" y2="6"/><line x1="3" y1="18" x2="21" y2="18"/></svg>
+</span>
+<span class=close><svg class="icon" xmlns="http://www.w3.org/2000/svg" viewbox="0 0 24 24" stroke-linecap="round" stroke-linejoin="round" stroke-width="2" aria-hidden="true"><line x1="18" y1="6" x2="6" y2="18"/><line x1="6" y1="6" x2="18" y2="18"/></svg>
+</span>
+</button>
+<ul><li class=item>
+<a href=/>Home</a>
+</li><li class=item>
+<a href=/about/>About</a>
+</li><li class=item>
+<a href=/index.xml>RSS</a>
+</li></ul>
+</div>
+</nav><div class=header-widgets>
+<div class=container></div>
+</div>
+<header id=header class="header site-header">
+<div class="container sep-after">
+</div>
+</header>
+<main id=content>
+<header class=header>
+<div class="container sep-after">
+<div class=header-info>
+<h1 class=title><span class=taxonomy-name>Tag: </span>aws</h1>
+</div>
+</div>
+</header>
+<div class="container list-container">
+<ul class=list>
+<li class=item>
+<div class=meta>
+<span>
+<span class=screen-reader-text>Posted on </span>
+<time datetime=2021-09-17T12:48:33-04:00>2021, Sep 17</time>
+</span>
+</div>
+<header class=item-header>
+<h3 class=item-title>
+<a href=/blog/2021/09/17/automatically-rotating-aws-access-keys/>Automatically Rotating AWS Access Keys</a>
+</h3>
+</header>
+</li>
+</ul>
+</div>
+</main>
+<footer id=footer class=footer>
+<div class="container sep-before"><div class=copyright>
+<p> &copy; 2020-2021 Dave Gallant </p>
+</div>
+</div>
+</footer>
+</div>
+</div><script>window.__assets_js_src="/assets/js/"</script>
+<script src=/assets/js/main.c3bcf2df.js></script>
+</body>
+</html>
\ No newline at end of file
diff --git a/tags/aws/index.xml b/tags/aws/index.xml
new file mode 100644
index 00000000..b61b123c
--- /dev/null
+++ b/tags/aws/index.xml
@@ -0,0 +1 @@
+<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>aws on davegallant</title><link>/tags/aws/</link><description>Recent content in aws on davegallant</description><generator>Hugo -- gohugo.io</generator><language>en-us</language><lastBuildDate>Fri, 17 Sep 2021 12:48:33 -0400</lastBuildDate><atom:link href="/tags/aws/index.xml" rel="self" type="application/rss+xml"/><item><title>Automatically Rotating AWS Access Keys</title><link>/blog/2021/09/17/automatically-rotating-aws-access-keys/</link><pubDate>Fri, 17 Sep 2021 12:48:33 -0400</pubDate><guid>/blog/2021/09/17/automatically-rotating-aws-access-keys/</guid><description/></item></channel></rss>
\ No newline at end of file
diff --git a/tags/aws/page/1/index.html b/tags/aws/page/1/index.html
new file mode 100644
index 00000000..788587c1
--- /dev/null
+++ b/tags/aws/page/1/index.html
@@ -0,0 +1 @@
+<!doctype html><html><head><title>/tags/aws/</title><link rel=canonical href=/tags/aws/><meta name=robots content="noindex"><meta charset=utf-8><meta http-equiv=refresh content="0; url=/tags/aws/"></head></html>
\ No newline at end of file
diff --git a/tags/dotfiles/index.html b/tags/dotfiles/index.html
index 0857fcb0..f8137962 100644
--- a/tags/dotfiles/index.html
+++ b/tags/dotfiles/index.html
@@ -7,7 +7,7 @@
 <meta property="og:description" content="personal blog">
 <meta property="og:url" content="/tags/dotfiles/">
 <meta property="og:site_name" content="davegallant">
-<meta property="og:type" content="website"><meta property="og:updated_time" content="2021-09-08T00:42:33-04:00"><meta name=twitter:card content="summary">
+<meta property="og:type" content="website"><meta property="og:updated_time" content="2021-09-17T12:48:33-04:00"><meta name=twitter:card content="summary">
 <meta name=generator content="Hugo 0.88.0">
 <title>Tag: dotfiles • davegallant</title>
 <link rel=canonical href=/tags/dotfiles/>
@@ -45,6 +45,10 @@ personal blog
 <ul class="list taxonomy-cloud"><li>
 <a href=/tags/adguard/ style=font-size:1em>adguard</a>
 </li><li>
+<a href=/tags/aws/ style=font-size:1em>aws</a>
+</li><li>
+<a href=/tags/aws-vault/ style=font-size:1em>aws-vault</a>
+</li><li>
 <a href=/tags/dotfiles/ style=font-size:1em>dotfiles</a>
 </li><li>
 <a href=/tags/grafana/ style=font-size:1em>grafana</a>
@@ -65,7 +69,9 @@ personal blog
 </li><li>
 <a href=/tags/plex/ style=font-size:1em>plex</a>
 </li><li>
-<a href=/tags/python/ style=font-size:1em>python</a>
+<a href=/tags/python/ style=font-size:2em>python</a>
+</li><li>
+<a href=/tags/security/ style=font-size:1em>security</a>
 </li><li>
 <a href=/tags/tailscale/ style=font-size:1em>tailscale</a>
 </li><li>
diff --git a/tags/grafana/index.html b/tags/grafana/index.html
index 29d68e21..63edca56 100644
--- a/tags/grafana/index.html
+++ b/tags/grafana/index.html
@@ -7,7 +7,7 @@
 <meta property="og:description" content="personal blog">
 <meta property="og:url" content="/tags/grafana/">
 <meta property="og:site_name" content="davegallant">
-<meta property="og:type" content="website"><meta property="og:updated_time" content="2021-09-08T00:42:33-04:00"><meta name=twitter:card content="summary">
+<meta property="og:type" content="website"><meta property="og:updated_time" content="2021-09-17T12:48:33-04:00"><meta name=twitter:card content="summary">
 <meta name=generator content="Hugo 0.88.0">
 <title>Tag: grafana • davegallant</title>
 <link rel=canonical href=/tags/grafana/>
@@ -45,6 +45,10 @@ personal blog
 <ul class="list taxonomy-cloud"><li>
 <a href=/tags/adguard/ style=font-size:1em>adguard</a>
 </li><li>
+<a href=/tags/aws/ style=font-size:1em>aws</a>
+</li><li>
+<a href=/tags/aws-vault/ style=font-size:1em>aws-vault</a>
+</li><li>
 <a href=/tags/dotfiles/ style=font-size:1em>dotfiles</a>
 </li><li>
 <a href=/tags/grafana/ style=font-size:1em>grafana</a>
@@ -65,7 +69,9 @@ personal blog
 </li><li>
 <a href=/tags/plex/ style=font-size:1em>plex</a>
 </li><li>
-<a href=/tags/python/ style=font-size:1em>python</a>
+<a href=/tags/python/ style=font-size:2em>python</a>
+</li><li>
+<a href=/tags/security/ style=font-size:1em>security</a>
 </li><li>
 <a href=/tags/tailscale/ style=font-size:1em>tailscale</a>
 </li><li>
diff --git a/tags/home-manager/index.html b/tags/home-manager/index.html
index dfc11f0d..0961a996 100644
--- a/tags/home-manager/index.html
+++ b/tags/home-manager/index.html
@@ -7,7 +7,7 @@
 <meta property="og:description" content="personal blog">
 <meta property="og:url" content="/tags/home-manager/">
 <meta property="og:site_name" content="davegallant">
-<meta property="og:type" content="website"><meta property="og:updated_time" content="2021-09-08T00:42:33-04:00"><meta name=twitter:card content="summary">
+<meta property="og:type" content="website"><meta property="og:updated_time" content="2021-09-17T12:48:33-04:00"><meta name=twitter:card content="summary">
 <meta name=generator content="Hugo 0.88.0">
 <title>Tag: home-manager • davegallant</title>
 <link rel=canonical href=/tags/home-manager/>
@@ -45,6 +45,10 @@ personal blog
 <ul class="list taxonomy-cloud"><li>
 <a href=/tags/adguard/ style=font-size:1em>adguard</a>
 </li><li>
+<a href=/tags/aws/ style=font-size:1em>aws</a>
+</li><li>
+<a href=/tags/aws-vault/ style=font-size:1em>aws-vault</a>
+</li><li>
 <a href=/tags/dotfiles/ style=font-size:1em>dotfiles</a>
 </li><li>
 <a href=/tags/grafana/ style=font-size:1em>grafana</a>
@@ -65,7 +69,9 @@ personal blog
 </li><li>
 <a href=/tags/plex/ style=font-size:1em>plex</a>
 </li><li>
-<a href=/tags/python/ style=font-size:1em>python</a>
+<a href=/tags/python/ style=font-size:2em>python</a>
+</li><li>
+<a href=/tags/security/ style=font-size:1em>security</a>
 </li><li>
 <a href=/tags/tailscale/ style=font-size:1em>tailscale</a>
 </li><li>
diff --git a/tags/homelab/index.html b/tags/homelab/index.html
index 32939901..9f4af907 100644
--- a/tags/homelab/index.html
+++ b/tags/homelab/index.html
@@ -7,7 +7,7 @@
 <meta property="og:description" content="personal blog">
 <meta property="og:url" content="/tags/homelab/">
 <meta property="og:site_name" content="davegallant">
-<meta property="og:type" content="website"><meta property="og:updated_time" content="2021-09-08T00:42:33-04:00"><meta name=twitter:card content="summary">
+<meta property="og:type" content="website"><meta property="og:updated_time" content="2021-09-17T12:48:33-04:00"><meta name=twitter:card content="summary">
 <meta name=generator content="Hugo 0.88.0">
 <title>Tag: homelab • davegallant</title>
 <link rel=canonical href=/tags/homelab/>
@@ -45,6 +45,10 @@ personal blog
 <ul class="list taxonomy-cloud"><li>
 <a href=/tags/adguard/ style=font-size:1em>adguard</a>
 </li><li>
+<a href=/tags/aws/ style=font-size:1em>aws</a>
+</li><li>
+<a href=/tags/aws-vault/ style=font-size:1em>aws-vault</a>
+</li><li>
 <a href=/tags/dotfiles/ style=font-size:1em>dotfiles</a>
 </li><li>
 <a href=/tags/grafana/ style=font-size:1em>grafana</a>
@@ -65,7 +69,9 @@ personal blog
 </li><li>
 <a href=/tags/plex/ style=font-size:1em>plex</a>
 </li><li>
-<a href=/tags/python/ style=font-size:1em>python</a>
+<a href=/tags/python/ style=font-size:2em>python</a>
+</li><li>
+<a href=/tags/security/ style=font-size:1em>security</a>
 </li><li>
 <a href=/tags/tailscale/ style=font-size:1em>tailscale</a>
 </li><li>
diff --git a/tags/index.html b/tags/index.html
index 877bcd55..8dc525fb 100644
--- a/tags/index.html
+++ b/tags/index.html
@@ -7,7 +7,7 @@
 <meta property="og:description" content="personal blog">
 <meta property="og:url" content="/tags/">
 <meta property="og:site_name" content="davegallant">
-<meta property="og:type" content="website"><meta property="og:updated_time" content="2021-09-08T00:42:33-04:00"><meta name=twitter:card content="summary">
+<meta property="og:type" content="website"><meta property="og:updated_time" content="2021-09-17T12:48:33-04:00"><meta name=twitter:card content="summary">
 <meta name=generator content="Hugo 0.88.0">
 <title>Tags • davegallant</title>
 <link rel=canonical href=/tags/>
@@ -45,6 +45,10 @@ personal blog
 <ul class="list taxonomy-cloud"><li>
 <a href=/tags/adguard/ style=font-size:1em>adguard</a>
 </li><li>
+<a href=/tags/aws/ style=font-size:1em>aws</a>
+</li><li>
+<a href=/tags/aws-vault/ style=font-size:1em>aws-vault</a>
+</li><li>
 <a href=/tags/dotfiles/ style=font-size:1em>dotfiles</a>
 </li><li>
 <a href=/tags/grafana/ style=font-size:1em>grafana</a>
@@ -65,7 +69,9 @@ personal blog
 </li><li>
 <a href=/tags/plex/ style=font-size:1em>plex</a>
 </li><li>
-<a href=/tags/python/ style=font-size:1em>python</a>
+<a href=/tags/python/ style=font-size:2em>python</a>
+</li><li>
+<a href=/tags/security/ style=font-size:1em>security</a>
 </li><li>
 <a href=/tags/tailscale/ style=font-size:1em>tailscale</a>
 </li><li>
@@ -133,6 +139,10 @@ personal blog
 <ul class="list taxonomy-cloud"><li>
 <a href=/tags/adguard/ style=font-size:1em>adguard</a>
 </li><li>
+<a href=/tags/aws/ style=font-size:1em>aws</a>
+</li><li>
+<a href=/tags/aws-vault/ style=font-size:1em>aws-vault</a>
+</li><li>
 <a href=/tags/dotfiles/ style=font-size:1em>dotfiles</a>
 </li><li>
 <a href=/tags/grafana/ style=font-size:1em>grafana</a>
@@ -153,7 +163,9 @@ personal blog
 </li><li>
 <a href=/tags/plex/ style=font-size:1em>plex</a>
 </li><li>
-<a href=/tags/python/ style=font-size:1em>python</a>
+<a href=/tags/python/ style=font-size:2em>python</a>
+</li><li>
+<a href=/tags/security/ style=font-size:1em>security</a>
 </li><li>
 <a href=/tags/tailscale/ style=font-size:1em>tailscale</a>
 </li><li>
diff --git a/tags/index.xml b/tags/index.xml
index 1a215ed8..783566c6 100644
--- a/tags/index.xml
+++ b/tags/index.xml
@@ -1 +1 @@
-<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Tags on davegallant</title><link>/tags/</link><description>Recent content in Tags on davegallant</description><generator>Hugo -- gohugo.io</generator><language>en-us</language><lastBuildDate>Wed, 08 Sep 2021 00:42:33 -0400</lastBuildDate><atom:link href="/tags/index.xml" rel="self" type="application/rss+xml"/><item><title>dotfiles</title><link>/tags/dotfiles/</link><pubDate>Wed, 08 Sep 2021 00:42:33 -0400</pubDate><guid>/tags/dotfiles/</guid><description/></item><item><title>home-manager</title><link>/tags/home-manager/</link><pubDate>Wed, 08 Sep 2021 00:42:33 -0400</pubDate><guid>/tags/home-manager/</guid><description/></item><item><title>nix</title><link>/tags/nix/</link><pubDate>Wed, 08 Sep 2021 00:42:33 -0400</pubDate><guid>/tags/nix/</guid><description/></item><item><title>adguard</title><link>/tags/adguard/</link><pubDate>Mon, 06 Sep 2021 01:12:54 -0400</pubDate><guid>/tags/adguard/</guid><description/></item><item><title>grafana</title><link>/tags/grafana/</link><pubDate>Mon, 06 Sep 2021 01:12:54 -0400</pubDate><guid>/tags/grafana/</guid><description/></item><item><title>homelab</title><link>/tags/homelab/</link><pubDate>Mon, 06 Sep 2021 01:12:54 -0400</pubDate><guid>/tags/homelab/</guid><description/></item><item><title>jellyfin</title><link>/tags/jellyfin/</link><pubDate>Mon, 06 Sep 2021 01:12:54 -0400</pubDate><guid>/tags/jellyfin/</guid><description/></item><item><title>netdata</title><link>/tags/netdata/</link><pubDate>Mon, 06 Sep 2021 01:12:54 -0400</pubDate><guid>/tags/netdata/</guid><description/></item><item><title>pihole</title><link>/tags/pihole/</link><pubDate>Mon, 06 Sep 2021 01:12:54 -0400</pubDate><guid>/tags/pihole/</guid><description/></item><item><title>plex</title><link>/tags/plex/</link><pubDate>Mon, 06 Sep 2021 01:12:54 -0400</pubDate><guid>/tags/plex/</guid><description/></item><item><title>tailscale</title><link>/tags/tailscale/</link><pubDate>Mon, 06 Sep 2021 01:12:54 -0400</pubDate><guid>/tags/tailscale/</guid><description/></item><item><title>virtualization</title><link>/tags/virtualization/</link><pubDate>Mon, 06 Sep 2021 01:12:54 -0400</pubDate><guid>/tags/virtualization/</guid><description/></item><item><title>linux</title><link>/tags/linux/</link><pubDate>Mon, 16 Mar 2020 22:00:15 -0400</pubDate><guid>/tags/linux/</guid><description/></item><item><title>python</title><link>/tags/python/</link><pubDate>Mon, 16 Mar 2020 22:00:15 -0400</pubDate><guid>/tags/python/</guid><description/></item><item><title>vpn</title><link>/tags/vpn/</link><pubDate>Mon, 16 Mar 2020 22:00:15 -0400</pubDate><guid>/tags/vpn/</guid><description/></item></channel></rss>
\ No newline at end of file
+<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Tags on davegallant</title><link>/tags/</link><description>Recent content in Tags on davegallant</description><generator>Hugo -- gohugo.io</generator><language>en-us</language><lastBuildDate>Fri, 17 Sep 2021 12:48:33 -0400</lastBuildDate><atom:link href="/tags/index.xml" rel="self" type="application/rss+xml"/><item><title>aws</title><link>/tags/aws/</link><pubDate>Fri, 17 Sep 2021 12:48:33 -0400</pubDate><guid>/tags/aws/</guid><description/></item><item><title>aws-vault</title><link>/tags/aws-vault/</link><pubDate>Fri, 17 Sep 2021 12:48:33 -0400</pubDate><guid>/tags/aws-vault/</guid><description/></item><item><title>python</title><link>/tags/python/</link><pubDate>Fri, 17 Sep 2021 12:48:33 -0400</pubDate><guid>/tags/python/</guid><description/></item><item><title>security</title><link>/tags/security/</link><pubDate>Fri, 17 Sep 2021 12:48:33 -0400</pubDate><guid>/tags/security/</guid><description/></item><item><title>dotfiles</title><link>/tags/dotfiles/</link><pubDate>Wed, 08 Sep 2021 00:42:33 -0400</pubDate><guid>/tags/dotfiles/</guid><description/></item><item><title>home-manager</title><link>/tags/home-manager/</link><pubDate>Wed, 08 Sep 2021 00:42:33 -0400</pubDate><guid>/tags/home-manager/</guid><description/></item><item><title>nix</title><link>/tags/nix/</link><pubDate>Wed, 08 Sep 2021 00:42:33 -0400</pubDate><guid>/tags/nix/</guid><description/></item><item><title>adguard</title><link>/tags/adguard/</link><pubDate>Mon, 06 Sep 2021 01:12:54 -0400</pubDate><guid>/tags/adguard/</guid><description/></item><item><title>grafana</title><link>/tags/grafana/</link><pubDate>Mon, 06 Sep 2021 01:12:54 -0400</pubDate><guid>/tags/grafana/</guid><description/></item><item><title>homelab</title><link>/tags/homelab/</link><pubDate>Mon, 06 Sep 2021 01:12:54 -0400</pubDate><guid>/tags/homelab/</guid><description/></item><item><title>jellyfin</title><link>/tags/jellyfin/</link><pubDate>Mon, 06 Sep 2021 01:12:54 -0400</pubDate><guid>/tags/jellyfin/</guid><description/></item><item><title>netdata</title><link>/tags/netdata/</link><pubDate>Mon, 06 Sep 2021 01:12:54 -0400</pubDate><guid>/tags/netdata/</guid><description/></item><item><title>pihole</title><link>/tags/pihole/</link><pubDate>Mon, 06 Sep 2021 01:12:54 -0400</pubDate><guid>/tags/pihole/</guid><description/></item><item><title>plex</title><link>/tags/plex/</link><pubDate>Mon, 06 Sep 2021 01:12:54 -0400</pubDate><guid>/tags/plex/</guid><description/></item><item><title>tailscale</title><link>/tags/tailscale/</link><pubDate>Mon, 06 Sep 2021 01:12:54 -0400</pubDate><guid>/tags/tailscale/</guid><description/></item><item><title>virtualization</title><link>/tags/virtualization/</link><pubDate>Mon, 06 Sep 2021 01:12:54 -0400</pubDate><guid>/tags/virtualization/</guid><description/></item><item><title>linux</title><link>/tags/linux/</link><pubDate>Mon, 16 Mar 2020 22:00:15 -0400</pubDate><guid>/tags/linux/</guid><description/></item><item><title>vpn</title><link>/tags/vpn/</link><pubDate>Mon, 16 Mar 2020 22:00:15 -0400</pubDate><guid>/tags/vpn/</guid><description/></item></channel></rss>
\ No newline at end of file
diff --git a/tags/jellyfin/index.html b/tags/jellyfin/index.html
index e2792047..279abc1b 100644
--- a/tags/jellyfin/index.html
+++ b/tags/jellyfin/index.html
@@ -7,7 +7,7 @@
 <meta property="og:description" content="personal blog">
 <meta property="og:url" content="/tags/jellyfin/">
 <meta property="og:site_name" content="davegallant">
-<meta property="og:type" content="website"><meta property="og:updated_time" content="2021-09-08T00:42:33-04:00"><meta name=twitter:card content="summary">
+<meta property="og:type" content="website"><meta property="og:updated_time" content="2021-09-17T12:48:33-04:00"><meta name=twitter:card content="summary">
 <meta name=generator content="Hugo 0.88.0">
 <title>Tag: jellyfin • davegallant</title>
 <link rel=canonical href=/tags/jellyfin/>
@@ -45,6 +45,10 @@ personal blog
 <ul class="list taxonomy-cloud"><li>
 <a href=/tags/adguard/ style=font-size:1em>adguard</a>
 </li><li>
+<a href=/tags/aws/ style=font-size:1em>aws</a>
+</li><li>
+<a href=/tags/aws-vault/ style=font-size:1em>aws-vault</a>
+</li><li>
 <a href=/tags/dotfiles/ style=font-size:1em>dotfiles</a>
 </li><li>
 <a href=/tags/grafana/ style=font-size:1em>grafana</a>
@@ -65,7 +69,9 @@ personal blog
 </li><li>
 <a href=/tags/plex/ style=font-size:1em>plex</a>
 </li><li>
-<a href=/tags/python/ style=font-size:1em>python</a>
+<a href=/tags/python/ style=font-size:2em>python</a>
+</li><li>
+<a href=/tags/security/ style=font-size:1em>security</a>
 </li><li>
 <a href=/tags/tailscale/ style=font-size:1em>tailscale</a>
 </li><li>
diff --git a/tags/linux/index.html b/tags/linux/index.html
index 36922376..ae0338e5 100644
--- a/tags/linux/index.html
+++ b/tags/linux/index.html
@@ -7,7 +7,7 @@
 <meta property="og:description" content="personal blog">
 <meta property="og:url" content="/tags/linux/">
 <meta property="og:site_name" content="davegallant">
-<meta property="og:type" content="website"><meta property="og:updated_time" content="2021-09-08T00:42:33-04:00"><meta name=twitter:card content="summary">
+<meta property="og:type" content="website"><meta property="og:updated_time" content="2021-09-17T12:48:33-04:00"><meta name=twitter:card content="summary">
 <meta name=generator content="Hugo 0.88.0">
 <title>Tag: linux • davegallant</title>
 <link rel=canonical href=/tags/linux/>
@@ -45,6 +45,10 @@ personal blog
 <ul class="list taxonomy-cloud"><li>
 <a href=/tags/adguard/ style=font-size:1em>adguard</a>
 </li><li>
+<a href=/tags/aws/ style=font-size:1em>aws</a>
+</li><li>
+<a href=/tags/aws-vault/ style=font-size:1em>aws-vault</a>
+</li><li>
 <a href=/tags/dotfiles/ style=font-size:1em>dotfiles</a>
 </li><li>
 <a href=/tags/grafana/ style=font-size:1em>grafana</a>
@@ -65,7 +69,9 @@ personal blog
 </li><li>
 <a href=/tags/plex/ style=font-size:1em>plex</a>
 </li><li>
-<a href=/tags/python/ style=font-size:1em>python</a>
+<a href=/tags/python/ style=font-size:2em>python</a>
+</li><li>
+<a href=/tags/security/ style=font-size:1em>security</a>
 </li><li>
 <a href=/tags/tailscale/ style=font-size:1em>tailscale</a>
 </li><li>
diff --git a/tags/netdata/index.html b/tags/netdata/index.html
index 9e5d0199..a1726dad 100644
--- a/tags/netdata/index.html
+++ b/tags/netdata/index.html
@@ -7,7 +7,7 @@
 <meta property="og:description" content="personal blog">
 <meta property="og:url" content="/tags/netdata/">
 <meta property="og:site_name" content="davegallant">
-<meta property="og:type" content="website"><meta property="og:updated_time" content="2021-09-08T00:42:33-04:00"><meta name=twitter:card content="summary">
+<meta property="og:type" content="website"><meta property="og:updated_time" content="2021-09-17T12:48:33-04:00"><meta name=twitter:card content="summary">
 <meta name=generator content="Hugo 0.88.0">
 <title>Tag: netdata • davegallant</title>
 <link rel=canonical href=/tags/netdata/>
@@ -45,6 +45,10 @@ personal blog
 <ul class="list taxonomy-cloud"><li>
 <a href=/tags/adguard/ style=font-size:1em>adguard</a>
 </li><li>
+<a href=/tags/aws/ style=font-size:1em>aws</a>
+</li><li>
+<a href=/tags/aws-vault/ style=font-size:1em>aws-vault</a>
+</li><li>
 <a href=/tags/dotfiles/ style=font-size:1em>dotfiles</a>
 </li><li>
 <a href=/tags/grafana/ style=font-size:1em>grafana</a>
@@ -65,7 +69,9 @@ personal blog
 </li><li>
 <a href=/tags/plex/ style=font-size:1em>plex</a>
 </li><li>
-<a href=/tags/python/ style=font-size:1em>python</a>
+<a href=/tags/python/ style=font-size:2em>python</a>
+</li><li>
+<a href=/tags/security/ style=font-size:1em>security</a>
 </li><li>
 <a href=/tags/tailscale/ style=font-size:1em>tailscale</a>
 </li><li>
diff --git a/tags/nix/index.html b/tags/nix/index.html
index 66382d31..478577e2 100644
--- a/tags/nix/index.html
+++ b/tags/nix/index.html
@@ -7,7 +7,7 @@
 <meta property="og:description" content="personal blog">
 <meta property="og:url" content="/tags/nix/">
 <meta property="og:site_name" content="davegallant">
-<meta property="og:type" content="website"><meta property="og:updated_time" content="2021-09-08T00:42:33-04:00"><meta name=twitter:card content="summary">
+<meta property="og:type" content="website"><meta property="og:updated_time" content="2021-09-17T12:48:33-04:00"><meta name=twitter:card content="summary">
 <meta name=generator content="Hugo 0.88.0">
 <title>Tag: nix • davegallant</title>
 <link rel=canonical href=/tags/nix/>
@@ -45,6 +45,10 @@ personal blog
 <ul class="list taxonomy-cloud"><li>
 <a href=/tags/adguard/ style=font-size:1em>adguard</a>
 </li><li>
+<a href=/tags/aws/ style=font-size:1em>aws</a>
+</li><li>
+<a href=/tags/aws-vault/ style=font-size:1em>aws-vault</a>
+</li><li>
 <a href=/tags/dotfiles/ style=font-size:1em>dotfiles</a>
 </li><li>
 <a href=/tags/grafana/ style=font-size:1em>grafana</a>
@@ -65,7 +69,9 @@ personal blog
 </li><li>
 <a href=/tags/plex/ style=font-size:1em>plex</a>
 </li><li>
-<a href=/tags/python/ style=font-size:1em>python</a>
+<a href=/tags/python/ style=font-size:2em>python</a>
+</li><li>
+<a href=/tags/security/ style=font-size:1em>security</a>
 </li><li>
 <a href=/tags/tailscale/ style=font-size:1em>tailscale</a>
 </li><li>
diff --git a/tags/pihole/index.html b/tags/pihole/index.html
index aa52ad11..a43aee98 100644
--- a/tags/pihole/index.html
+++ b/tags/pihole/index.html
@@ -7,7 +7,7 @@
 <meta property="og:description" content="personal blog">
 <meta property="og:url" content="/tags/pihole/">
 <meta property="og:site_name" content="davegallant">
-<meta property="og:type" content="website"><meta property="og:updated_time" content="2021-09-08T00:42:33-04:00"><meta name=twitter:card content="summary">
+<meta property="og:type" content="website"><meta property="og:updated_time" content="2021-09-17T12:48:33-04:00"><meta name=twitter:card content="summary">
 <meta name=generator content="Hugo 0.88.0">
 <title>Tag: pihole • davegallant</title>
 <link rel=canonical href=/tags/pihole/>
@@ -45,6 +45,10 @@ personal blog
 <ul class="list taxonomy-cloud"><li>
 <a href=/tags/adguard/ style=font-size:1em>adguard</a>
 </li><li>
+<a href=/tags/aws/ style=font-size:1em>aws</a>
+</li><li>
+<a href=/tags/aws-vault/ style=font-size:1em>aws-vault</a>
+</li><li>
 <a href=/tags/dotfiles/ style=font-size:1em>dotfiles</a>
 </li><li>
 <a href=/tags/grafana/ style=font-size:1em>grafana</a>
@@ -65,7 +69,9 @@ personal blog
 </li><li>
 <a href=/tags/plex/ style=font-size:1em>plex</a>
 </li><li>
-<a href=/tags/python/ style=font-size:1em>python</a>
+<a href=/tags/python/ style=font-size:2em>python</a>
+</li><li>
+<a href=/tags/security/ style=font-size:1em>security</a>
 </li><li>
 <a href=/tags/tailscale/ style=font-size:1em>tailscale</a>
 </li><li>
diff --git a/tags/plex/index.html b/tags/plex/index.html
index cb0e865e..0c2cf080 100644
--- a/tags/plex/index.html
+++ b/tags/plex/index.html
@@ -7,7 +7,7 @@
 <meta property="og:description" content="personal blog">
 <meta property="og:url" content="/tags/plex/">
 <meta property="og:site_name" content="davegallant">
-<meta property="og:type" content="website"><meta property="og:updated_time" content="2021-09-08T00:42:33-04:00"><meta name=twitter:card content="summary">
+<meta property="og:type" content="website"><meta property="og:updated_time" content="2021-09-17T12:48:33-04:00"><meta name=twitter:card content="summary">
 <meta name=generator content="Hugo 0.88.0">
 <title>Tag: plex • davegallant</title>
 <link rel=canonical href=/tags/plex/>
@@ -45,6 +45,10 @@ personal blog
 <ul class="list taxonomy-cloud"><li>
 <a href=/tags/adguard/ style=font-size:1em>adguard</a>
 </li><li>
+<a href=/tags/aws/ style=font-size:1em>aws</a>
+</li><li>
+<a href=/tags/aws-vault/ style=font-size:1em>aws-vault</a>
+</li><li>
 <a href=/tags/dotfiles/ style=font-size:1em>dotfiles</a>
 </li><li>
 <a href=/tags/grafana/ style=font-size:1em>grafana</a>
@@ -65,7 +69,9 @@ personal blog
 </li><li>
 <a href=/tags/plex/ style=font-size:1em>plex</a>
 </li><li>
-<a href=/tags/python/ style=font-size:1em>python</a>
+<a href=/tags/python/ style=font-size:2em>python</a>
+</li><li>
+<a href=/tags/security/ style=font-size:1em>security</a>
 </li><li>
 <a href=/tags/tailscale/ style=font-size:1em>tailscale</a>
 </li><li>
diff --git a/tags/python/index.html b/tags/python/index.html
index a8d1dadf..5f220e0e 100644
--- a/tags/python/index.html
+++ b/tags/python/index.html
@@ -7,7 +7,7 @@
 <meta property="og:description" content="personal blog">
 <meta property="og:url" content="/tags/python/">
 <meta property="og:site_name" content="davegallant">
-<meta property="og:type" content="website"><meta property="og:updated_time" content="2021-09-08T00:42:33-04:00"><meta name=twitter:card content="summary">
+<meta property="og:type" content="website"><meta property="og:updated_time" content="2021-09-17T12:48:33-04:00"><meta name=twitter:card content="summary">
 <meta name=generator content="Hugo 0.88.0">
 <title>Tag: python • davegallant</title>
 <link rel=canonical href=/tags/python/>
@@ -45,6 +45,10 @@ personal blog
 <ul class="list taxonomy-cloud"><li>
 <a href=/tags/adguard/ style=font-size:1em>adguard</a>
 </li><li>
+<a href=/tags/aws/ style=font-size:1em>aws</a>
+</li><li>
+<a href=/tags/aws-vault/ style=font-size:1em>aws-vault</a>
+</li><li>
 <a href=/tags/dotfiles/ style=font-size:1em>dotfiles</a>
 </li><li>
 <a href=/tags/grafana/ style=font-size:1em>grafana</a>
@@ -65,7 +69,9 @@ personal blog
 </li><li>
 <a href=/tags/plex/ style=font-size:1em>plex</a>
 </li><li>
-<a href=/tags/python/ style=font-size:1em>python</a>
+<a href=/tags/python/ style=font-size:2em>python</a>
+</li><li>
+<a href=/tags/security/ style=font-size:1em>security</a>
 </li><li>
 <a href=/tags/tailscale/ style=font-size:1em>tailscale</a>
 </li><li>
@@ -135,6 +141,19 @@ personal blog
 <div class=meta>
 <span>
 <span class=screen-reader-text>Posted on </span>
+<time datetime=2021-09-17T12:48:33-04:00>2021, Sep 17</time>
+</span>
+</div>
+<header class=item-header>
+<h3 class=item-title>
+<a href=/blog/2021/09/17/automatically-rotating-aws-access-keys/>Automatically Rotating AWS Access Keys</a>
+</h3>
+</header>
+</li>
+<li class=item>
+<div class=meta>
+<span>
+<span class=screen-reader-text>Posted on </span>
 <time datetime=2020-03-16T22:00:15-04:00>2020, Mar 16</time>
 </span>
 </div>
diff --git a/tags/python/index.xml b/tags/python/index.xml
index 3bedc3d1..ae97628b 100644
--- a/tags/python/index.xml
+++ b/tags/python/index.xml
@@ -1 +1 @@
-<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>python on davegallant</title><link>/tags/python/</link><description>Recent content in python on davegallant</description><generator>Hugo -- gohugo.io</generator><language>en-us</language><lastBuildDate>Mon, 16 Mar 2020 22:00:15 -0400</lastBuildDate><atom:link href="/tags/python/index.xml" rel="self" type="application/rss+xml"/><item><title>AppGate SDP on Arch Linux</title><link>/blog/2020/03/16/appgate-sdp-on-arch-linux/</link><pubDate>Mon, 16 Mar 2020 22:00:15 -0400</pubDate><guid>/blog/2020/03/16/appgate-sdp-on-arch-linux/</guid><description>&lt;p>AppGate SDP provides a Zero Trust network. This post describes how to get AppGate SDP &lt;code>4.3.2&lt;/code> working on Arch Linux.&lt;/p></description></item></channel></rss>
\ No newline at end of file
+<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>python on davegallant</title><link>/tags/python/</link><description>Recent content in python on davegallant</description><generator>Hugo -- gohugo.io</generator><language>en-us</language><lastBuildDate>Fri, 17 Sep 2021 12:48:33 -0400</lastBuildDate><atom:link href="/tags/python/index.xml" rel="self" type="application/rss+xml"/><item><title>Automatically Rotating AWS Access Keys</title><link>/blog/2021/09/17/automatically-rotating-aws-access-keys/</link><pubDate>Fri, 17 Sep 2021 12:48:33 -0400</pubDate><guid>/blog/2021/09/17/automatically-rotating-aws-access-keys/</guid><description/></item><item><title>AppGate SDP on Arch Linux</title><link>/blog/2020/03/16/appgate-sdp-on-arch-linux/</link><pubDate>Mon, 16 Mar 2020 22:00:15 -0400</pubDate><guid>/blog/2020/03/16/appgate-sdp-on-arch-linux/</guid><description>&lt;p>AppGate SDP provides a Zero Trust network. This post describes how to get AppGate SDP &lt;code>4.3.2&lt;/code> working on Arch Linux.&lt;/p></description></item></channel></rss>
\ No newline at end of file
diff --git a/tags/security/index.html b/tags/security/index.html
new file mode 100644
index 00000000..1bd08643
--- /dev/null
+++ b/tags/security/index.html
@@ -0,0 +1,166 @@
+<!doctype html><html lang=en dir=auto><head>
+<meta charset=utf-8>
+<meta name=viewport content="width=device-width,initial-scale=1">
+<meta name=description content="personal blog">
+<meta name=theme-color content="#8979b3">
+<meta property="og:title" content="Tag: security • davegallant">
+<meta property="og:description" content="personal blog">
+<meta property="og:url" content="/tags/security/">
+<meta property="og:site_name" content="davegallant">
+<meta property="og:type" content="website"><meta property="og:updated_time" content="2021-09-17T12:48:33-04:00"><meta name=twitter:card content="summary">
+<meta name=generator content="Hugo 0.88.0">
+<title>Tag: security • davegallant</title>
+<link rel=canonical href=/tags/security/>
+<link href=/tags/security/index.xml rel=alternate type=application/rss+xml title=davegallant>
+<link rel=icon href=/favicon.ico>
+<link rel=stylesheet href=/assets/css/main.ab98e12b.css><link rel=stylesheet href=/css/custom.css><style>:root{--color-accent:#8979b3}</style>
+<script type=application/javascript>var doNotTrack=!1;doNotTrack||(window.ga=window.ga||function(){(ga.q=ga.q||[]).push(arguments)},ga.l=+new Date,ga('create','UA-98710982-2','auto'),ga('send','pageview'))</script>
+<script async src=https://www.google-analytics.com/analytics.js></script>
+</head>
+<body class="term type-tags taxonomy-tag has-sidebar">
+<div class=site><div id=sidebar class=sidebar>
+<a class=screen-reader-text href=#main-menu>Skip to Main Menu</a>
+<div class=container><section class="widget widget-about sep-after">
+<header>
+<div class=logo>
+<a href=/>
+<img src=/images/logo.png>
+</a>
+</div>
+<h2 class="title site-title">
+<a href=/>
+davegallant
+</a>
+</h2>
+<div class=desc>
+personal blog
+</div>
+</header>
+</section>
+<section class="widget widget-taxonomy_cloud sep-after">
+<header>
+<h4 class="title widget-title">Tags</h4>
+</header>
+<div class="container list-container">
+<ul class="list taxonomy-cloud"><li>
+<a href=/tags/adguard/ style=font-size:1em>adguard</a>
+</li><li>
+<a href=/tags/aws/ style=font-size:1em>aws</a>
+</li><li>
+<a href=/tags/aws-vault/ style=font-size:1em>aws-vault</a>
+</li><li>
+<a href=/tags/dotfiles/ style=font-size:1em>dotfiles</a>
+</li><li>
+<a href=/tags/grafana/ style=font-size:1em>grafana</a>
+</li><li>
+<a href=/tags/home-manager/ style=font-size:1em>home-manager</a>
+</li><li>
+<a href=/tags/homelab/ style=font-size:1em>homelab</a>
+</li><li>
+<a href=/tags/jellyfin/ style=font-size:1em>jellyfin</a>
+</li><li>
+<a href=/tags/linux/ style=font-size:1em>linux</a>
+</li><li>
+<a href=/tags/netdata/ style=font-size:1em>netdata</a>
+</li><li>
+<a href=/tags/nix/ style=font-size:1em>nix</a>
+</li><li>
+<a href=/tags/pihole/ style=font-size:1em>pihole</a>
+</li><li>
+<a href=/tags/plex/ style=font-size:1em>plex</a>
+</li><li>
+<a href=/tags/python/ style=font-size:2em>python</a>
+</li><li>
+<a href=/tags/security/ style=font-size:1em>security</a>
+</li><li>
+<a href=/tags/tailscale/ style=font-size:1em>tailscale</a>
+</li><li>
+<a href=/tags/virtualization/ style=font-size:1em>virtualization</a>
+</li><li>
+<a href=/tags/vpn/ style=font-size:1em>vpn</a>
+</li></ul>
+</div>
+</section>
+<section class="widget widget-social_menu sep-after"><nav aria-label="Social Menu">
+<ul><li>
+<a href=https://github.com/davegallant target=_blank rel="noopener me">
+<span class=screen-reader-text>Open Github account in new tab</span><svg class="icon" xmlns="http://www.w3.org/2000/svg" viewbox="0 0 24 24" stroke-linecap="round" stroke-linejoin="round" stroke-width="2" aria-hidden="true"><path d="M9 19c-5 1.5-5-2.5-7-3m14 6v-3.87a3.37 3.37.0 00-.94-2.61c3.14-.35 6.44-1.54 6.44-7A5.44 5.44.0 0020 4.77 5.07 5.07.0 0019.91 1S18.73.65 16 2.48a13.38 13.38.0 00-7 0C6.27.65 5.09 1 5.09 1A5.07 5.07.0 005 4.77 5.44 5.44.0 003.5 8.55c0 5.42 3.3 6.61 6.44 7A3.37 3.37.0 009 18.13V22"/></svg>
+</a>
+</li><li>
+<a href=https://twitter.com/dave_gallant_ target=_blank rel="noopener me">
+<span class=screen-reader-text>Open Twitter account in new tab</span><svg class="icon" xmlns="http://www.w3.org/2000/svg" viewbox="0 0 24 24" stroke-linecap="round" stroke-linejoin="round" stroke-width="2" aria-hidden="true"><path d="M23 3a10.9 10.9.0 01-3.14 1.53 4.48 4.48.0 00-7.86 3v1A10.66 10.66.0 013 4s-4 9 5 13a11.64 11.64.0 01-7 2c9 5 20 0 20-11.5a4.5 4.5.0 00-.08-.83A7.72 7.72.0 0023 3z"/></svg>
+</a>
+</li><li>
+<a href=mailto:davegallant@gmail.com target=_blank rel="noopener me">
+<span class=screen-reader-text>Contact via Email</span><svg class="icon" xmlns="http://www.w3.org/2000/svg" viewbox="0 0 24 24" stroke-linecap="round" stroke-linejoin="round" stroke-width="2" aria-hidden="true"><path d="M4 4h16c1.1.0 2 .9 2 2v12c0 1.1-.9 2-2 2H4c-1.1.0-2-.9-2-2V6c0-1.1.9-2 2-2z"/><polyline points="22,6 12,13 2,6"/></svg>
+</a>
+</li><li>
+<a href=https://linkedin.com/in/dave-gallant target=_blank rel="noopener me">
+<span class=screen-reader-text>Open Linkedin account in new tab</span><svg class="icon" xmlns="http://www.w3.org/2000/svg" viewbox="0 0 24 24" stroke-linecap="round" stroke-linejoin="round" stroke-width="2" aria-hidden="true"><path d="M16 8a6 6 0 016 6v7h-4v-7a2 2 0 00-2-2 2 2 0 00-2 2v7h-4v-7a6 6 0 016-6z"/><rect x="2" y="9" width="4" height="12"/><circle cx="4" cy="4" r="2"/></svg>
+</a>
+</li></ul>
+</nav>
+</section></div>
+<div class=sidebar-overlay></div>
+</div><div class=main><nav id=main-menu class="menu main-menu" aria-label="Main Menu">
+<div class=container>
+<a class=screen-reader-text href=#content>Skip to Content</a>
+<button id=sidebar-toggler class=sidebar-toggler aria-controls=sidebar>
+<span class=screen-reader-text>Toggle Sidebar</span>
+<span class=open><svg class="icon" xmlns="http://www.w3.org/2000/svg" viewbox="0 0 24 24" stroke-linecap="round" stroke-linejoin="round" stroke-width="2" aria-hidden="true"><line x1="3" y1="12" x2="21" y2="12"/><line x1="3" y1="6" x2="21" y2="6"/><line x1="3" y1="18" x2="21" y2="18"/></svg>
+</span>
+<span class=close><svg class="icon" xmlns="http://www.w3.org/2000/svg" viewbox="0 0 24 24" stroke-linecap="round" stroke-linejoin="round" stroke-width="2" aria-hidden="true"><line x1="18" y1="6" x2="6" y2="18"/><line x1="6" y1="6" x2="18" y2="18"/></svg>
+</span>
+</button>
+<ul><li class=item>
+<a href=/>Home</a>
+</li><li class=item>
+<a href=/about/>About</a>
+</li><li class=item>
+<a href=/index.xml>RSS</a>
+</li></ul>
+</div>
+</nav><div class=header-widgets>
+<div class=container></div>
+</div>
+<header id=header class="header site-header">
+<div class="container sep-after">
+</div>
+</header>
+<main id=content>
+<header class=header>
+<div class="container sep-after">
+<div class=header-info>
+<h1 class=title><span class=taxonomy-name>Tag: </span>security</h1>
+</div>
+</div>
+</header>
+<div class="container list-container">
+<ul class=list>
+<li class=item>
+<div class=meta>
+<span>
+<span class=screen-reader-text>Posted on </span>
+<time datetime=2021-09-17T12:48:33-04:00>2021, Sep 17</time>
+</span>
+</div>
+<header class=item-header>
+<h3 class=item-title>
+<a href=/blog/2021/09/17/automatically-rotating-aws-access-keys/>Automatically Rotating AWS Access Keys</a>
+</h3>
+</header>
+</li>
+</ul>
+</div>
+</main>
+<footer id=footer class=footer>
+<div class="container sep-before"><div class=copyright>
+<p> &copy; 2020-2021 Dave Gallant </p>
+</div>
+</div>
+</footer>
+</div>
+</div><script>window.__assets_js_src="/assets/js/"</script>
+<script src=/assets/js/main.c3bcf2df.js></script>
+</body>
+</html>
\ No newline at end of file
diff --git a/tags/security/index.xml b/tags/security/index.xml
new file mode 100644
index 00000000..7a229a4a
--- /dev/null
+++ b/tags/security/index.xml
@@ -0,0 +1 @@
+<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>security on davegallant</title><link>/tags/security/</link><description>Recent content in security on davegallant</description><generator>Hugo -- gohugo.io</generator><language>en-us</language><lastBuildDate>Fri, 17 Sep 2021 12:48:33 -0400</lastBuildDate><atom:link href="/tags/security/index.xml" rel="self" type="application/rss+xml"/><item><title>Automatically Rotating AWS Access Keys</title><link>/blog/2021/09/17/automatically-rotating-aws-access-keys/</link><pubDate>Fri, 17 Sep 2021 12:48:33 -0400</pubDate><guid>/blog/2021/09/17/automatically-rotating-aws-access-keys/</guid><description/></item></channel></rss>
\ No newline at end of file
diff --git a/tags/security/page/1/index.html b/tags/security/page/1/index.html
new file mode 100644
index 00000000..cebfd942
--- /dev/null
+++ b/tags/security/page/1/index.html
@@ -0,0 +1 @@
+<!doctype html><html><head><title>/tags/security/</title><link rel=canonical href=/tags/security/><meta name=robots content="noindex"><meta charset=utf-8><meta http-equiv=refresh content="0; url=/tags/security/"></head></html>
\ No newline at end of file
diff --git a/tags/tailscale/index.html b/tags/tailscale/index.html
index 373e2cb4..608c2f04 100644
--- a/tags/tailscale/index.html
+++ b/tags/tailscale/index.html
@@ -7,7 +7,7 @@
 <meta property="og:description" content="personal blog">
 <meta property="og:url" content="/tags/tailscale/">
 <meta property="og:site_name" content="davegallant">
-<meta property="og:type" content="website"><meta property="og:updated_time" content="2021-09-08T00:42:33-04:00"><meta name=twitter:card content="summary">
+<meta property="og:type" content="website"><meta property="og:updated_time" content="2021-09-17T12:48:33-04:00"><meta name=twitter:card content="summary">
 <meta name=generator content="Hugo 0.88.0">
 <title>Tag: tailscale • davegallant</title>
 <link rel=canonical href=/tags/tailscale/>
@@ -45,6 +45,10 @@ personal blog
 <ul class="list taxonomy-cloud"><li>
 <a href=/tags/adguard/ style=font-size:1em>adguard</a>
 </li><li>
+<a href=/tags/aws/ style=font-size:1em>aws</a>
+</li><li>
+<a href=/tags/aws-vault/ style=font-size:1em>aws-vault</a>
+</li><li>
 <a href=/tags/dotfiles/ style=font-size:1em>dotfiles</a>
 </li><li>
 <a href=/tags/grafana/ style=font-size:1em>grafana</a>
@@ -65,7 +69,9 @@ personal blog
 </li><li>
 <a href=/tags/plex/ style=font-size:1em>plex</a>
 </li><li>
-<a href=/tags/python/ style=font-size:1em>python</a>
+<a href=/tags/python/ style=font-size:2em>python</a>
+</li><li>
+<a href=/tags/security/ style=font-size:1em>security</a>
 </li><li>
 <a href=/tags/tailscale/ style=font-size:1em>tailscale</a>
 </li><li>
diff --git a/tags/virtualization/index.html b/tags/virtualization/index.html
index 5b95b1f7..7a7315f1 100644
--- a/tags/virtualization/index.html
+++ b/tags/virtualization/index.html
@@ -7,7 +7,7 @@
 <meta property="og:description" content="personal blog">
 <meta property="og:url" content="/tags/virtualization/">
 <meta property="og:site_name" content="davegallant">
-<meta property="og:type" content="website"><meta property="og:updated_time" content="2021-09-08T00:42:33-04:00"><meta name=twitter:card content="summary">
+<meta property="og:type" content="website"><meta property="og:updated_time" content="2021-09-17T12:48:33-04:00"><meta name=twitter:card content="summary">
 <meta name=generator content="Hugo 0.88.0">
 <title>Tag: virtualization • davegallant</title>
 <link rel=canonical href=/tags/virtualization/>
@@ -45,6 +45,10 @@ personal blog
 <ul class="list taxonomy-cloud"><li>
 <a href=/tags/adguard/ style=font-size:1em>adguard</a>
 </li><li>
+<a href=/tags/aws/ style=font-size:1em>aws</a>
+</li><li>
+<a href=/tags/aws-vault/ style=font-size:1em>aws-vault</a>
+</li><li>
 <a href=/tags/dotfiles/ style=font-size:1em>dotfiles</a>
 </li><li>
 <a href=/tags/grafana/ style=font-size:1em>grafana</a>
@@ -65,7 +69,9 @@ personal blog
 </li><li>
 <a href=/tags/plex/ style=font-size:1em>plex</a>
 </li><li>
-<a href=/tags/python/ style=font-size:1em>python</a>
+<a href=/tags/python/ style=font-size:2em>python</a>
+</li><li>
+<a href=/tags/security/ style=font-size:1em>security</a>
 </li><li>
 <a href=/tags/tailscale/ style=font-size:1em>tailscale</a>
 </li><li>
diff --git a/tags/vpn/index.html b/tags/vpn/index.html
index bcbb7d6b..ddb75005 100644
--- a/tags/vpn/index.html
+++ b/tags/vpn/index.html
@@ -7,7 +7,7 @@
 <meta property="og:description" content="personal blog">
 <meta property="og:url" content="/tags/vpn/">
 <meta property="og:site_name" content="davegallant">
-<meta property="og:type" content="website"><meta property="og:updated_time" content="2021-09-08T00:42:33-04:00"><meta name=twitter:card content="summary">
+<meta property="og:type" content="website"><meta property="og:updated_time" content="2021-09-17T12:48:33-04:00"><meta name=twitter:card content="summary">
 <meta name=generator content="Hugo 0.88.0">
 <title>Tag: vpn • davegallant</title>
 <link rel=canonical href=/tags/vpn/>
@@ -45,6 +45,10 @@ personal blog
 <ul class="list taxonomy-cloud"><li>
 <a href=/tags/adguard/ style=font-size:1em>adguard</a>
 </li><li>
+<a href=/tags/aws/ style=font-size:1em>aws</a>
+</li><li>
+<a href=/tags/aws-vault/ style=font-size:1em>aws-vault</a>
+</li><li>
 <a href=/tags/dotfiles/ style=font-size:1em>dotfiles</a>
 </li><li>
 <a href=/tags/grafana/ style=font-size:1em>grafana</a>
@@ -65,7 +69,9 @@ personal blog
 </li><li>
 <a href=/tags/plex/ style=font-size:1em>plex</a>
 </li><li>
-<a href=/tags/python/ style=font-size:1em>python</a>
+<a href=/tags/python/ style=font-size:2em>python</a>
+</li><li>
+<a href=/tags/security/ style=font-size:1em>security</a>
 </li><li>
 <a href=/tags/tailscale/ style=font-size:1em>tailscale</a>
 </li><li>