## code-scripts
Code & Scripts
40 published kits in code & scripts.
Agentic AI Security Policy Template Pack
Downloadable Markdown + YAML policy templates giving IT teams the acceptable-use, blast-radius, approval-gate, and logging scaffolding to safely deploy agentic AI coding tools like Claude Code, Codex, and Grok Build.
Agentic Migration Playbook: API Endpoint Modernization
For DevOps and platform engineers with a real migration deadline — the complete Claude Code workflow you'd otherwise spend months reverse-engineering.
Ansible Automation Starter Kit for Linux Sysadmins
12 production Ansible playbooks for Linux sysadmins — annotated, tested, ready to run.
ASTGL PowerCLI Automation Cookbook v1.0
14 production-ready PowerShell 7 scripts for vSphere admins — built for Broadcom VCF.PowerCLI, ships-to-vCenter ready.
Bash Scripting for Sysadmins Reference Guide
The Linux sysadmin's go-to bash reference — patterns, variables, loops, and practical automation scripts in one printable guide.
CI/CD Governance Bottleneck Playbook for AI-Augmented Teams
A practical guide and checklist bundle for engineering teams whose human release-approval processes have become the rate-limiting step after AI floods their repos with code.
Claude Code Security Scan CI/CD Integration Template
Both Anthropic and OpenAI shipped AI vulnerability scanners this month — here's the copy-paste GitHub Actions workflow, per-PR cost math, and false-positive triage playbook that turns them into something you'd actually merge against.
Claude Mythos Vulnerability Scanner — Educational Demo
A teachable ASTGL guide + lightweight demo showing how to use Claude Code and the Claude API for AI-assisted vulnerability scanning on your own projects — bringing Mythos-level thinking to solo developers.
Compound Engineering Workflow Guide for Solo Builders
For solo Mac Studio developers who want a structured, repeatable Claude Code workflow — not another tutorial that resets every session.
Crontab Survival Kit
A read-only Bash toolkit + concise PDF runbook that produces a single Markdown report mapping every cron job on a Linux host — what runs, when, where it logs, and which schedules overlap. Translates cryptic cron expressions into plain English. No installs touched.
DeepSeek V4 vs Claude vs Local LLM Benchmark Kit
A standardized Python benchmark suite with a simple results dashboard that lets Mac Studio and local LLM users compare DeepSeek V4, Ollama models, and Claude API on real-world coding, reasoning, and agentic tasks.
Defensive Cybersecurity Agent: The Codex Security Pattern for Claude
OpenAI's GPT-5.5-Cyber (85.6% CyberGym) and their Codex Security plugin model a complete vulnerability-to-patch workflow: deep codebase scan → attack path analysis → auto-generated patch → SARIF/CodeQL export.
DNS Drift Detector
For sysadmins and SREs managing 1–10 domains who need a nightly heads-up when a record quietly changes under them.
Docker Compose Production Hardening Kit
Transform your dev-grade Docker Compose stacks into production-ready deployments with security configs, resource limits, health checks, and secrets management — all annotated and ready to drop in.
GitHub Actions Starter Kit for Sysadmins
10 annotated GitHub Actions workflow YAML files purpose-built for IT ops tasks — automated patch checks, server health pings, backup validation notifications, SSL cert expiry alerts, and dependency audits — with a setup guide for sysadmins who've never touched CI/CD.
GitOps Workflow Starter Kit
For DevOps engineers and sysadmins who need to stand up a declarative GitOps pipeline without spending a week in documentation rabbit holes.
Grafana Loki Centralized Logging Starter Kit
Ship centralized log aggregation in an afternoon — a Docker Compose Loki + Promtail + Grafana stack, annotated configs, a LogQL cheat sheet, and a 15-page setup guide.
Hermes Blank Slate Starter Kit for Minimal Secure Agents
Build a starter template that uses Nous Research Hermes Agent's new Blank Slate mode to create minimal, security-hardened agents.
Homelab DR Kit v2 — Advanced Edition
Expand beyond the published v1 with automated backup validation scripts, tested restoration runbooks, and a DR drill scoring rubric for homelabs running Proxmox, TrueNAS, and containerized services.
Build 5 Real Infrastructure Projects from Zero
Escape tutorial hell for sysadmins — five hands-on homelab projects (monitoring, automation, DR, networking, security) with guided specs, code stubs, and a 30-day progress tracker.
k3s Homelab Kubernetes Starter Kit
Stand up a 3-node k3s cluster on your homelab hardware in an afternoon — annotated manifests, Helm quickstart, persistent storage config, and a troubleshooting cheat sheet for the ops engineer graduating from Docker Compose.
Kubernetes + Helm Starter Kit for Sysadmins
Annotated Helm chart templates and a kubectl cheat sheet that let a sysadmin deploy their first K8s workload without reading three docs sites.
Kubernetes & kubectl Command Toolkit
The kubectl + Helm reference kit every DevOps engineer bookmarks — annotated YAML starters, command cheat sheets, and troubleshooting flowcharts in one printable bundle.
Local Agent Memory Manager Using Claude Dreaming Pattern
A local-first CLI tool that consolidates and compresses agent memories between sessions using Ollama and SQLite — persistent cross-session memory with zero cloud dependencies.
macOS Sysadmin Field Manual
A concise PDF + Bash-toolkit field manual for sysadmins managing 5–50 Mac endpoints WITHOUT a full MDM (Jamf/Kandji/Mosyle). Read-only inventory scripts (hardware, OS, FileVault, Gatekeeper, XProtect, login items, software updates) plus a triage workflow that produces a single Markdown fleet-health report per host.
MCP Security Audit Tool for Local Agent Stacks
A CLI scanner that reads local MCP server configs and emits a Markdown + JSON audit report covering tool surface area, auth methods, and blast radius.
MCP Tunnel Explainer: Private Network MCP Without Public Endpoints
A hands-on tutorial and code walkthrough showing how to wire a local Ollama MCP server behind an outbound-only encrypted tunnel — no public IP, no inbound firewall rules, yet agents still reach private enterprise tools.
Multi-LLM Orchestration Router for Mac Studio
Inspired by Sakana AI's Fugu (which matches Fable 5 benchmarks by dynamically routing tasks to the best model in a pool), build a local orchestration layer for the Mac Studio that routes agent tasks across Ollama models, Claude API, and local alternatives.
Port Drift Detector
A read-only Bash toolkit that inventories every listening TCP/UDP port on a Linux host, maps it to the owning process and unit, diffs against an expected baseline you declare once, and flags silent drift — new listeners, moved ports, processes that used to bind 127.0.0.1 but now bind 0.0.0.0, unit files whose ExecStart changed. Runs nightly, diffs visibly. Catches the 'who opened 8080?' question before the pen-tester does.
PowerShell Automation Starter Kit for Windows Sysadmins
20 production-ready PowerShell scripts for the Windows sysadmin who automates everything.
Prometheus + Grafana Monitoring Starter Kit
Deploy Prometheus + Grafana in 30 minutes — 5 import-ready dashboards, annotated configs, and a PromQL cheat sheet bundled together.
Secure Docker CI/CD Pipeline Checklist & Toolkit
Ship Docker containers with confidence — a checklist bundle covering image hardening, secrets management, registry scanning, and production rollback, all in PDF + Markdown + GitHub-ready templates.
SSH Key Hygiene Kit
Find every stale SSH key across your server fleet in under 10 minutes — read-only, agentless, Bash 3.2+ compatible.
Sudoers Audit Kit
A read-only Bash toolkit that maps every sudo privilege on a Linux host — who can run what, which NOPASSWD rules exist, which aliases resolve to root, and which include-files shadow the main sudoers. One Markdown report, zero writes. Finds the "we'll clean that up later" grants buried in /etc/sudoers.d/.
Terraform IaC Starter Kit for Sysadmins
10 annotated Terraform/OpenTofu configs for AWS and Azure — get from zero to running infrastructure in one afternoon.
Terraform + Kubernetes Homelab Career Kit
The homelab kit that gets you the job — working Terraform modules, a K8s cluster setup guide, and the interview narrative to prove you built it.
Terraform + GitHub Actions Homelab Career Kit
For mid-career sysadmins rebuilding cloud-relevant skills — a complete, working IaC project you can run today and talk about in interviews tomorrow.
TLS Cert Expiry Scanner
A read-only script that scans your fleet's listening TLS ports, extracts every cert in use, and produces a dated report ranking each by days-to-expiry, SANs, issuer, and chain health. Catches the self-signed cert your predecessor installed on the internal API three years ago before it breaks prod on a Sunday.
User Audit Kit
For Linux sysadmins and SREs who need a defensible account inventory before an audit, an offboarding sweep, or a compliance review — without touching a single file on the server.
Windows Event Log Analysis Field Guide for Sysadmins
A practical reference guide covering the 20 most critical Windows Event IDs every sysadmin must monitor — with detection logic, triage steps, and copy-paste PowerShell queries for each.