Skip to content

My LEF Kanban Vault GitHub Editors

GitHub LinkedIn

LEF Knowledge Hub
Start here
- Overview
- How to use the docs
- Onboarding
  - Overview
  - Trainee onboarding
- Deep dives
How we work
- Overview
- LEF
  - collaborators
    
    Overview
    Solution Engineer
    Trainees
  - How we work
- Policies
  - Overview
  - access
    
    Overview
    Access Control Policy
  - continuity
    
    Overview
    Business Continuity and Disaster Recovery Plan
    Backup and Recovery Policy
  - data
    
    Overview
    Information Classification Policy
    Data Retention and Deletion Policy
  - governance
    
    Overview
    ISMS scope (draft)
    Information security policy (draft)
    Information security objectives (draft)
    Document control (draft)
    ISMS internal audit (draft)
    ISMS management review (draft)
    Nonconformity and corrective action (draft)
  - people
    
    Overview
    NDA Defaults
  - risk
    
    Overview
    Risk management methodology (draft)
    Risk register (template)
    Statement of Applicability (SoA) (template)
  - suppliers
    
    Overview
    Supplier security policy (draft)
  - iso-27001
    
    ISO 27001 readiness
  - compliance
    
    Compliance & alignment
  - operations
    
    Overview
- Engineering
  - Overview
  - Manifesto
  - guidelines
    
    Guidelines
    Coding guidelines
    Reusable functions and views
    Secure development (draft)
  - reference
    
    Reference
    Change management (draft)
    Table history (auditing)
Architecture
- Overview
- Principles & Guidelines
- System archetypes
- Container archetypes
- Infra enablers
- Aspects
Platforms & services
- Overview
- Services
  - Overview
  - engineering
    
    Uptime Monitoring
    Overview
    GitHub (repos)
    Reporting
    Workflow Automation
  - office
    
    Overview
    Vault
    Analytics
    ChatGPT
    Kanban
    Microsoft 365
    Wiki
- Platforms
  - Overview
  - thinkwise
    
    Overview
  - klippa
    
    Overview
  - report-app
    
    Overview
- Infrastructure
Help & support
- Overview
- Infrastructure
  - Overview
  - access
    
    Overview
    
    vpn-access
    
    VPN access (support)
  - proxy
    
    tcp-proxy
    
    TCP proxy connectivity (support)
    
    Overview
  - sql
    
    restore-from-s3
    
    Restore SQL Server from S3 (support)
    
    Overview
  - troubleshooting
    
    Troubleshooting
- Security
  - Overview
  - Information Security Incident Response Procedure
Run & maintenance
- Overview
- Infrastructure
  - Overview
  - access
    
    Overview
    Firewall & public ingress
    Identity & server access
    VPN access (platform)
  - app-tiers
    
    Overview
    
    platform
    
    Overview
    Runtime: Wiki
    Runtime: Kanban
    Runtime: Workflow Automation
    Runtime: Vault
    Runtime: Uptime Monitoring
    Runtime: Analytics
    Runtime: CORS proxy
    Runtime: Reporting
    S3
    Runtime: Container Registry
    
    thinkwise
    
    Overview
    Runtime: Trainee platform
    Runtime: Concepts
    Runtime: Pivoted
    Runtime: Pivot
    Runtime: Solutions (dev)
    Runtime: Tokio (dev)
    Runtime: Credit Hub
    Runtime: TokioCred
    Runtime: Unimed
    Runtime: Sapore
  - operations
    
    Maintenance
    
    certificates
    
    Overview
    LEF Root CA (internal)
    Remote Desktop SSL
    SSL certificates for web servers
    
    containers
    
    Overview
    Containers as a Service
    
    dns
    
    Overview
    DNS split horizon
    
    monitoring
    
    Overview
    Uptime Kuma push monitoring (VM stats)
    
    sql
    
    Overview
    SQL Monitoring
    SQL Server → S3 backup
    SQL Server on Linux performance
    
    storage
    
    Overview
    MinIO S3 (bucket creation and access)
  - proxy
    
    Overview
    CORS proxy operations
    NGINX ingress (public vs internal)
    NGINX vhost templates
    Provision a web ingress proxy (NGINX)
    TCP proxy (HAProxy) operations
    Virtual IPs (VIPs)
  - networks
    
    Overview
- Domains
  - Domains (run & support)
  - Change workflow (domains and hostnames)
- Platforms
  - Overview
  - thinkwise
    
    Overview
    
    installation
    
    Installation (FAQ)
    
    upgrades
    
    Upgrades
- Security
  - Vulnerability Management Procedure
  - Overview
Reference
- Overview
- Glossary
- Domains
- Environments
  - Overview
  - clients
    
    Overview
    Solutions DEV
    Unimed TEST
    Sapore TEST
  - internal
    
    Overview
    Pivot DEV
    Trainee environment
    Pivoted PROD
  - pre-sales
    
    Overview
    Concepts DEV
    Experience TEST
  - tokio-marine
    
    Overview
    Tokio DEV
    Credit Hub ACC
    TokioCred PROD
- Infrastructure
  - Overview
  - access
    
    Overview
    Firewall & public ingress (reference)
  - databases
    
    Overview
    concepts.db.lef LAB
    EVEO DBaaS (SQL Server) PROD
    pivot.db.lef DEV
    pivoted.db.lef PROD
    sapore.db.lef TEST
    sicoob.db.lef LAB
    solutions.db.lef DEV
    tokio.db.lef DEV
    tokio-prod.db.lef PROD
    tools.db.lef PROD
    trainee.db.lef DEV
    unimed.db.lef TEST
  - networks
    
    Overview
    Core LAN (192.168.20.0/24)
    VLAN 2061 (192.168.50.0/24)
    VPN client addressing (reference)
  - proxy
    
    Overview
    TCP proxy
  - servers
    
    Overview
    
    bare-metal
    
    Overview
    Lab RH
    
    external
    
    Overview
    ext.sapore.lef
    Hostinger
    
    private-cloud
    
    Overview
    Private cloud hypervisor
    Alma AL
    Coragem AL
    web.core.lef (reverse proxy) DEB
    DNS DEB
    Domain Controller WIN
    Remote Desktop WIN
    Proxy (TCP) DEB
    Storage AL
    Tooling AL
    Ritmo DEB
    Tokio Marine AL
- Templates

GitHub LinkedIn

On this page

Overview

On this page

Overview

Operations

How we work › Policies › Operations

Incident response

What to do when you suspect a security incident.

Vulnerability management

How we track, prioritize, and remediate vulnerabilities.

Compliance & alignment