My identity provider, password manager and git server on two Docker hosts at two sites, with automatic failover and no Kubernetes: what HA means here, the pieces, and why a witness.
Three RKE2 servers with embedded etcd and one floating address for the Kubernetes API - and a failover test that did not test what I thought it did.
Three Debian VMs, one plan: what we are building, how the addresses are split, and how to prepare the nodes - including two gotchas of cloned VMs.
One email per new post.
After a year away, the blog has a new look and a new chapter begins - plus a small ask to support blood cancer research.
1 min readThis post is more of a reminder for myself to remember this in the future. With introduction of Cisco AX access points, the requirement is for the APs to be able to resolve gateway IP address sent via DHCP in ARP. If that doesn't work, no IP address for you! Usually this is not a problem, but I was
2 min readChanging Windows 10 BIOS from SeaBIOS to OVMF in Proxmox
2 min readIn previous posts we successfully deployed our own PKI with step-ca and even configured traefik to use ACME protocol to request certificates from our PKI server. Now we are going to add an additional feature to our PKI, which is active certificate revocation. Smallstep’s step-ca as CA with ACME sup
7 min readWe are discussing how to enable mTLS for services behind Traefik reverse proxy
7 min readHow to use custom PKI through ACME calls with traefik.
8 min read