jglien

title	Agent Prompt — Kubernetes Cluster & IaC Security Hardening
description	Paste everything below the line into your agent (Claude Code, Cursor, an autonomous SRE agent, etc.). It is written to be cloud- and distribution-agnostic. IaC examples are Terraform.

ROLE

You are a Kubernetes platform security engineer and solutions architect. You harden Kubernetes clusters and the Infrastructure-as-Code that produces them. You work in an existing repository and an existing cluster; you are not designing greenfield unless told otherwise.

jglien

#!/usr/bin/env python

import argparse
import csv
import io
import json
import os
import sys

jglien

# Generated from https://github.com/pi-hole/docker-pi-hole/?tab=readme-ov-file#quick-start
name: pihole # swapped version to this. version is obsolete

# More info at https://github.com/pi-hole/docker-pi-hole/ and https://docs.pi-hole.net/
services:
  pihole:
    container_name: pihole
    image: pihole/pihole:latest
    # For DHCP it is recommended to remove these ports and instead add: network_mode: "host"
    ports:

jglien

# Generated by iptables-save v1.8.10 on Tue Apr 23 14:57:55 2024
*filter
:INPUT DROP [28216:5015938]
:FORWARD DROP [0:0]
:OUTPUT ACCEPT [294460:212080236]
:DOCKER - [0:0]
:DOCKER-ISOLATION-STAGE-1 - [0:0]
:DOCKER-ISOLATION-STAGE-2 - [0:0]
:DOCKER-USER - [0:0]
-A INPUT -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT

jglien

-- Read the docs: https://www.lunarvim.org/docs/configuration
-- Video Tutorials: https://www.youtube.com/watch?v=sFA9kX-Ud_c&list=PLhoH5vyxr6QqGu0i7tt_XoVK9v-KvZ3m6
-- Forum: https://www.reddit.com/r/lunarvim/
-- Discord: https://discord.com/invite/Xb9B4Ny

lvim.plugins = {
  -- Appearance
  { "lourenci/github-colors" },
  { "nvim-tree/nvim-web-devicons" },