Traefik middleware plugin: rewrite HTTP response bodies by regex, including gzip and deflate encoded responses. Maintained fork of packruler/rewrite-body.
Browser-only privileged access management (PAM) for Linux fleets — SSH through a jump host with ephemeral SSH certificates, session recording, and tamper-evident audit.
Code-first Go error library for web services — gRPC-aligned codes, HTTP/gRPC status mapping, lightweight call-site trails (no stack traces), RFC 9457 responses
Encrypt secrets inline in your config and .env files with ENC[…] markers — local keypair or GCP/AWS/Azure KMS. Safe to commit. Ships a setup skill for AI coding agents.