Fortigate on heezy.blog

Networking the Heezy: VLANs, Firewall Zones, and How Traffic Moves

Thu, 12 Mar 2026 00:00:00 +0000

The network is the foundation of everything in the lab. Four VLANs, a FortiGate doing all the routing, a Cisco 3560 doing the switching, and a set of rules about what can talk to what. This post covers how it’s all wired together, how DNS works across zones, and how remote access gets in without exposing anything to the internet.

Tailscale, FortiGate CVEs, and Remote Access That Doesn't Suck

Tue, 10 Feb 2026 00:00:00 +0000

🚧 UNDER CONSTRUCTION 🚧 This post is a work in progress.

The Problem

I need to reach into my home network from anywhere. SSH into nodes, check Grafana dashboards, access services that aren’t exposed through Cloudflare. The traditional answer is a VPN, and I have a FortiGate sitting right there with IPSec and SSL VPN capabilities built in.

Terraform, Ansible, and the Automation That Runs Everything

Sat, 20 Dec 2025 00:00:00 +0000

This is the story of taking a homelab that was 100% manually configured and turning it into something where every change is a git commit, every deployment is a GitHub Actions run, and I never SSH into a box to make a “quick fix” again. It took a lot of hours, a lot of broken credential chains, and one memorable incident where I leaked secrets because of echo output. But it works now, and it works well.