BagelHole

Secure secrets in Google Cloud Secret Manager. Configure IAM policies, integrate with GKE, and manage secret versions

skillapigcp+1

BagelHole / gdpr-compliance

Implement GDPR data protection requirements. Configure consent management, data subject rights, and privacy by design

skilldesign

BagelHole / hashicorp-vault

Manage secrets and PKI with HashiCorp Vault. Configure secret engines, authentication methods, and policies

📄 SKILL.mdzed

BagelHole / hipaa-compliance

Implement HIPAA security and privacy rules. Configure PHI protections and BAA requirements

BagelHole / identity-access-management

Set up and manage SSO, SCIM provisioning, and MFA for startup teams using Google Workspace, Okta, or Azure AD

📄 SKILL.mdzed

skillazure

BagelHole / iso27001-compliance

Implement ISO 27001 Information Security Management System. Configure ISMS controls and risk management

BagelHole / jenkins

Create and manage Jenkins CI/CD pipelines, configure agents, manage plugins, and automate builds

skillautomation

BagelHole / linux-administration

System administration for Linux servers. Manage packages, services, and system configuration

skilldevelopment

BagelHole / llm-app-security

Secure LLM-powered applications with input validation, output controls, tenant isolation, and abuse prevention.

BagelHole / load-balancing

Configure load balancers and traffic distribution. Implement health checks and SSL termination

BagelHole / mac-mini-llm-lab

Configure a Mac mini as a reliable local LLM server with remote access, observability, and power-safe operation

skilldevelopment

BagelHole / mongodb

Administer MongoDB databases. Configure replica sets, sharding, and backups

skilldevelopmentsql+2

BagelHole / mysql

Administer MySQL/MariaDB databases. Configure replication and optimize performance

skilldevelopmentsql+1

BagelHole / nfs-storage

Configure NFS servers and clients. Implement network file sharing for Linux systems

skillsecuritykubernetes

BagelHole / object-storage

Configure object storage with S3, GCS, and MinIO. Implement lifecycle policies and access controls

skillaws

BagelHole / ollama-stack

Run local LLM workloads with Ollama, Open WebUI, and GPU-aware tuning for private development environments

skilldevelopment

BagelHole / openclaw-local-mac-mini

Set up OpenClaw locally and run it reliably on a Mac mini for private, always-on local agent workflows.

skillgitdocker+1

BagelHole / opentelemetry

Instrument applications and infrastructure with OpenTelemetry for unified traces, metrics, and logs

BagelHole / opentofu-migration

Migrate from Terraform to OpenTofu with state compatibility, provider registry setup, and CI/CD pipeline updates

skillterraform

BagelHole / pci-dss-compliance

Implement PCI DSS requirements for payment card data. Configure cardholder data environment and security controls

skilltestingsecurity

BagelHole / performance-tuning

Optimize Linux system performance. Configure kernel parameters, analyze bottlenecks, and tune resources

BagelHole / planetscale

Operate MySQL-compatible databases on PlanetScale with branching workflows, safe migrations, and production rollouts.

skilldevelopmentgit+2

BagelHole / policy-as-code

Implement policy as code with OPA, Sentinel, and Kyverno. Automate policy enforcement in CI/CD and infrastructure

skillautomationsecurity+1

BagelHole / postgresql

Administer PostgreSQL databases. Configure replication, backups, and performance tuning

skilldevelopmentsql+1

BagelHole / redis

Configure Redis for caching and data storage. Set up clustering, persistence, and Sentinel

skilldatabaseredis

BagelHole / reverse-proxy

Configure nginx and Traefik as reverse proxies. Implement SSL termination and routing

BagelHole / runbook-creation

Create operational runbooks and standard operating procedures. Document troubleshooting guides and recovery procedures

skillreview

BagelHole / sbom-supply-chain

Generate, sign, and verify SBOMs and provenance attestations to secure the software supply chain

skillsecurityimage+1

BagelHole / service-mesh

Implement Istio and Linkerd service meshes. Configure mTLS, traffic management, and observability

skilltestingapi

BagelHole / soc2-compliance

Implement SOC 2 Trust Services Criteria. Configure security, availability, and processing integrity controls

skillsecurityrust

BagelHole / sops-encryption

Encrypt files and configs with Mozilla SOPS. Integrate with AWS KMS, GCP KMS, or PGP for key management

skillgitkubernetes+2

BagelHole / ssh-configuration

Configure SSH servers and clients securely. Manage keys, tunnels, and config files

BagelHole / startup-it-troubleshooting

Practical IT troubleshooting playbooks for small teams without dedicated IT staff.

BagelHole / systemd-services

Create and manage systemd services and timers. Configure service dependencies and resource limits

BagelHole / terraform-aws

Provision AWS infrastructure with Terraform. Create modules, manage state, and implement IaC best practices

skillterraformaws

BagelHole / terraform-azure

Provision Azure infrastructure with Terraform. Configure providers, manage state, and deploy resources

skillterraformazure

BagelHole / terraform-gcp

Provision GCP infrastructure with Terraform. Configure providers and deploy Google Cloud resources

skillterraformgcp

BagelHole / threat-modeling

Conduct threat modeling using STRIDE methodology. Identify threats, assess risks, and design security controls

skilldesignsecurity

BagelHole / user-management

Manage users, groups, and permissions on Linux systems. Configure sudo and access controls

BagelHole / vendor-management

Implement vendor risk management programs. Assess third-party security and maintain vendor inventory

BagelHole / vpn-setup

Configure WireGuard, OpenVPN, and cloud VPNs. Implement secure remote access and site-to-site connectivity

BagelHole / waf-setup

Deploy and tune Web Application Firewalls. Configure rules for OWASP Top 10 protection

skillsqlsecurity

BagelHole / windows-server

Administer Windows Server systems. Manage IIS, Active Directory, and PowerShell automation

skillautomation