Loading...
Loading...
Found 20 Skills
Hardening-audit module for reverse-proxy edges and TLS termination (nginx primary; Caddy, HAProxy, Apache secondary) covering inventory, protocol/cipher posture, HSTS and edge headers, request limits, admin-path shielding, proxy-to-app hop trust, and ACME renewal hygiene.
Use when setting up, hardening, or reviewing a Linux VPS or cloud server for self-hosting, including DNS, SSH, firewalls, Nginx, static-site hosting, reverse-proxying an app, HTTPS with Let's Encrypt or ACME clients, safe HTTP-to-HTTPS redirects, or optional post-launch network tuning such as BBR.
Use when self-hosting OpenClaw on a Linux VPS or cloud server, hardening a remote OpenClaw gateway, choosing between SSH tunneling, Tailscale, or reverse-proxy exposure, or reviewing Podman, pairing, sandboxing, token auth, and tool-permission defaults for a secure personal deployment.
Sa-Token advanced security features skill. Covers secondary authentication (`safe-auth` re-verification), account banning (full bans/category-specific bans/tiered bans), impersonation and identity switching, multi-account authentication (`StpUserUtil`/`StpKit`), global listeners (login/logout/kick/ban/token renewal events), global filters (`SaServletFilter`/`SaReactorFilter`), password encryption (MD5/SHA1/SHA256/AES/RSA/BCrypt/TOTP), session queries (terminal lists/global Token searches), HTTP Basic/Digest authentication, firewalls (IP allowlists and blocklists/rate limiting), custom authorization annotations, dynamic route authorization, reverse-proxy URI repair, asynchronous Mock contexts, and Redis key-value data architecture design. Use when the user needs to implement secondary verification for sensitive operations, tiered account bans, user impersonation, multi-account systems (User/Admin separation), global event monitoring, or password encryption utilities. For basic login authentication, use the sa-token skill.
Caddyfile configuration, auto-HTTPS, and FastCGI.
Interactively adds a new subdomain to the network infrastructure by gathering service details, configuring domains.toml, and applying changes. Use when you need to add a new service, create a subdomain, expose a new application, or set up reverse proxy for a service. Triggers on "add subdomain", "new subdomain", "add service to network", "expose service", "create domain for", "set up reverse proxy", or "add [name] to infrastructure". Works with domains.toml, manage-domains.sh, and Cloudflare Tunnel.
Nginx configuration and optimization
Browser preview panel knowledge — the iframe-based Browser tab in the right panel. Use when the user mentions browser, preview, tab disappeared, page broken, blank screen, white screen, 白屏, 页面挂了, tab 不见了, preview not loading, or asks about running services.
Nginx web server, reverse proxy, and load balancer. Use for web serving.
HAProxy integration. Manage data, records, and automate workflows. Use when the user wants to interact with HAProxy data.
Configure Nginx web server for high-performance reverse proxy, load balancing, SSL/TLS, caching, and API gateway functionality.
Optimizes Nginx configurations for performance, security, caching, and load balancing with modern best practices. Use when users request "Nginx setup", "reverse proxy", "load balancer", "web server config", or "Nginx optimization".