rey
GET / · principal: anonymous · 200 partial

rey

cs student at sac state, focused on security and infrastructure. i build security tools and run my own lab. this page checks what you're allowed to see, and some of it is withheld on purpose.

your token · exp 15:00HS256
eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiJhbm9ueW1vdXMiLCJzY29wZSI6InB1YmxpYzpyZWFkIiwiaWF0IjoxNzkwNzkwMTMzLCJleHAiOjE3OTA3OTEwMzN9.f4Qk9Vd2sXmR7bLw1ZcNp8aTe3HuYo0G5jKq6WvBnMs
{
  "sub": "anonymous",
  "scope": "public:read",
  "iat": 1790790133,
  "exp": 1790791033
}
signatureverified
01projects:readpending
example output
error   route-unprotected   DELETE /orders/{id} declares no scope
error   route-unknown-scope POST /orders declares "orders:write"
warning scope-unused        orders:create is declared by no route
exit 1
runtime   python, sqlite, linux container on proxmox
features  ticketing · moderation · automod · music · stream alerts · game server control
security  individual staff accounts with 2fa · scoped api keys · confirmation on destructive actions
exposure  admin panel reachable only through an authenticated tunnel
hypervisor proxmox ve, single node
dns        pi-hole
remote     tailscale, no inbound ports open
backups    nightly snapshots of every guest
next       network storage
path     player → cloud proxy → wireguard tunnel → home vm
web app  separate service with a single scoped api key back to the bot
access   whitelisted
02writing:readpending
writeups of real incidents from running a self-hosted service, and the controls added after each one.
03profile:readpending
languages
pythonpowershellsqljavascripthtml/css
systems
linuxproxmoxdockernetworkingvpn
tooling
gitgithub actionspython packaging
in progress
scope-parity 1.1: report a renamed permission and the route it broke as one finding
in progress
network storage for the lab
contact
reydotexe.meno cookies · no analytics · nothing leaves your tab