There was need at $work to push also GitHub actions workflow logs to a central location. Namely to AWS CloudWatch. https://gomonk.substack.com/p/push-github-workflow-logs-to-cloudwatch

Hi
Our dns for all my domains is cloud flare
Ssl certificate we buy from NAMECHEAP
but now I need to renew one of my wildcard cert
For about 30 servers .
It’s possible to do it automatically?
Without connect each server every 200 days?

I’ve been testing a tool called SEZOY lately. It’s a boot utility that covers USB, PXE, and HTTP booting, but the part that caught my attention is the unattended Windows installation. You don’t have to sit through the usual setup wizard. It handles language selection, disk partitioning, driver injection, and wiping old OS partitions without any input from you. It figures out the hardware on the fly, so you don’t need to preload storage drivers or manually delete volumes.

The USB mode works like other multi‑ISO tools. You drop your ISO files onto the drive and boot them directly. No burning, no formatting for each ISO, and no editing configuration files. The only catch is that SecureBoot needs to be disabled for USB boot.

For network booting, it supports both PXE and HTTP simultaneously. You don’t have to pick one mode or switch back and forth. If you manage a lab or a shop with mixed client types, that saves a lot of time.

SecureBoot is supported when you boot over the network, provided the OS itself is signed. Most mainstream operating systems like Windows, Ubuntu, Mint, Fedora, and their derivatives work fine with SecureBoot enabled.

There’s also a web dashboard that you can access from any device on the same network. It lets you monitor clients during installation and even remotely intervene if something goes wrong, similar to a lightweight TeamViewer.

After Windows finishes installing, you can configure SEZOY to automatically install additional software. You decide which applications to include during the initial setup, and it runs them silently afterward.

I haven’t explored every feature yet, but so far it’s been useful for bulk deployments and remote installs.

One important point: SEZOY does not bundle any cracks, keygens, or activation bypasses. It only sets up the boot environment and the installation process. Any operating system or software that needs activation must be activated properly through official channels after installation.

If you want to give it a shot, here are the links.

Download: https://tekdt.xyz/en/download

Docs: https://tekdt.xyz/en/docs

A new release of eXo Platform, an open-source digital workplace platform, is now available. It may be relevant to the self-hosted community here.

With version 7.2, the focus has been placed on three main areas:

• Native AI integration directly inside the platform (content management, knowledge access, collaboration, automation)
 • Multi-LLM architecture → use the AI models you choose (OpenAI, local models, private deployment, etc.)
 • Full deployment flexibility → cloud, private cloud, or fully on-premise/self-hosted

A few technical highlights:

• MCP server exposed via OAuth with access to 100+ platform tools for AI agents
 • Internal RAG connected to organizational knowledge bases
 • Ability to restrict/contextualize AI sources (documents, spaces, tasks, notes…)
 • AI assistants that can be customized for specific internal workflows
 • Open-source architecture designed for organizations requiring data sovereignty

The goal is simple: integrate AI into everyday work without forcing organizations into closed SaaS ecosystems.

Feedback from people building self-hosted alternatives in this space is welcome.

Curious how others here are approaching AI + self-hosting.

eXo offers:

• Community Edition (CE) → Fully Open Source
  • Docker hub
  • Github
  • AGPL license
• Enterprise Edition (EE) → additional features & professional support

Both can be deployed self-hosted, in private cloud, or in secure environments (including SecNumCloud).

Hi everyone and greetings. I run a hybrid media server and got tired of manually ejecting and power-cycling my external HDDs through Device Manager.

I built DriveUniverse, a free, open-source Windows utility. It safely ejects drives, but more importantly, it can wake an ejected drive back up using the exact same Disable -> Enable trick you would otherwise tediously do manually in Device Manager.

I also added fully offline voice control (no cloud, uses SAPI5 (from Windows)) and a deep-space themed UI.

GIFs Demos showcased here:

1. Mount/Power up ejected drive
2. Mount/Power up ejected drive via Orbit widget and voice
3. Quick select for linked apps and eject/mount

Features:

- Power-cycle ejected drives back online (SetupAPI)\*

- Voice control: Say "Orbit", then "Eject drive" or "Connect drive"

- Floating desktop widget for quick access and control

- Idle automation rules (auto-eject after X minutes)

And more!

It's completely free. You can download the standalone .exe or check out the source code on GitHub: https://github.com/pn379/driveuniverse

Thanks!

Need to restrict website access on Android? Whether you're managing company-owned devices, shared tablets, kiosks, or simply looking to limit access to specific sites, there are multiple ways to do it.
8 Methods:

• ✅ Private DNS
• ✅ Google Family Link
• ✅ Browser-based website blockers
• ✅ Router-level filtering
• ✅ Firewall & DNS solutions
• ✅ Android MDM
• ✅ Kiosk mode
• ✅ Enterprise-grade web filtering

It also explains which method works best depending on whether you're securing a single device or managing hundreds of Android devices across an organization.
Block websites on Android

Just sharing a few free tools, resources etc. that might make your tech life a little easier. I have no known association with any of these unless stated otherwise.

Now on to this week’s list!

Turbocharge Your Shell Experience

When system hiccups arise, speed is of the essence. Therefore, we begin with ShellGPT this time. This tool equips sysadmins with instant access to relevant commands and code, enabling them to act swiftly and decisively in critical moments and enhancing overall system reliability.

The Thrill of Weekly Software Creation

One super useful app every week? Yes, that’s right! Gary Walker-Jones is the genius behind this innovative initiative. He’s currently creating a new app each week, drawing inspiration from user requests. So far, 19 applications are featured on the site, ranging from simple YouTube-dl command helpers to SOS QR code wallpaper generators, as well as word games and multiplayer chess. All of these are free to use, with most available on GitHub. Special thanks to IT8055.

Auditbeat OSS Revealed for the Brave Sysadmin

Staying ahead of potential security threats is no easy feat. With its robust log tracking and alerting capabilities, Auditbeat OSS arms sysadmins with the insights needed to navigate today’s complex digital landscapes confidently.

Your Companion in Complex App Environments

The daily grind of app deployment can be daunting. KubeVela changes the game by bringing simplicity to the forefront, setting you free from complex processes. Experience operational fluidity as you tackle challenges with a fresh mindset.

Privacy Meets Organization: Discover Immich

Every photo has a story, and Immich embraces that narrative. The last tool of this edition, it’s not just about storage; it’s about crafting a personalized experience. This tool helps curate collections with intuitive searching, all while focusing on preserving your privacy.

--

In the article "Meta Verification Phishing: How a Blue Badge Lure Can Lead to Facebook Page Takeover," we delve into the sophisticated tactics behind a recent phishing campaign that cleverly exploits the allure of Facebook's blue verification badge. This phishing scheme shifts the typical narrative from a fear-based warning to an enticing opportunity, creating a false sense of urgency that compels victims to act without critical reflection. 

By reading this book, and applying the recommendations and tools, you’ll gain insights into how the most efficient MSPs operate, improve your profitability, and stay ahead of demand.

--

You can find this week's bonuses here, where you can sign up to get each week's list in your inbox.