Linux
Multipathing (MPIO - Multipath I/O) is crucial for high availability and performance in iSCSI storage environments. It allows multiple network paths between a server (initiator) and a storage target, ensuring failover and load balancing. In this guide, we will configure iSCSI multipathing manually on Linux without Ansible. 1. Why
Linux
Setting up iSCSI storage manually across multiple servers can be time-consuming and error-prone. By leveraging Ansible, we can automate the installation, configuration, and persistent login of iSCSI initiators, ensuring consistency and reliability across all nodes. 1. Introduction to iSCSI Initiators iSCSI (Internet Small Computer System Interface) allows servers (initiators) to
Docker
Traefik isn't just a reverse proxy; it's a powerful, dynamic edge router that makes managing your container-based infrastructure easier and more efficient. In this guide, we're going to install Traefik as a reverse proxy on a host running Docker, configure Let's Encrypt
kubernetes
Introduction In a Kubernetes environment, having a robust and secure ingress controller is critical to properly route traffic to your applications. Traefik is a popular choice for its simplicity and feature set. However, when you need to automate certificate management across many services, cert-manager shines. Finally, if you lack full
Docker
Imagine having a reliable email relay system under your control - no more dependence on external SMTP servers, no more unnecessary costs, and complete autonomy over your email flow. Whether you are managing a small development environment or want a robust solution for forwarding emails, setting up your own SMTP
openbsd
Introduction OpenBSD is known for its security and clean design, making it an ideal choice for a VPN server. In this guide, we will set up a VPN server on OpenBSD 7.3 using iked, the native IKEv2 daemon, which is perfect for road warrior (mobile clients) access. By the
automation
MySQL Backup with Ansible As someone with a lot of technical knowledge, I sometimes forget the finer details, like specific command-line options. Instead of wasting time looking them up every time, I like to create small Ansible playbooks to handle these tasks. This not only saves me time but also
Linux
Running out of space on your Linux VM? No problem—LVM (Logical Volume Manager) and VMware vSphere make disk resizing straightforward. In this post, I'll walk you through the process of resizing LVM-managed disks, focusing on adding capacity to an existing disk in a vSphere environment. Why Use
openbsd
TACACS+ (Terminal Access Controller Access-Control System Plus) is a protocol that provides authentication, authorization, and accounting (AAA) services. It is commonly used to control access to network devices, providing a centralized authentication mechanism. OpenBSD, known for its security-oriented approach, offers a stable and reliable environment for running TACACS+. Critical Security
Linux
Sometimes the required disk space for an application or service is greater than initially anticipated. To prevent having to reinstall and reconfigure the server to suit your disk space needs, we can expand the filesystems with extra space that was added by adding an extra physical disk and use it
haproxy
Introduction HAProxy is one of the most powerful open-source load balancers, widely used for its reliability, security, and performance. The HAProxy Data Plane API enhances HAProxy by providing an API-driven way to manage configurations dynamically, making it an excellent choice for automated deployments. In this blog post, we will walk
haproxy
Coraza-SPOA offers a powerful way to add Web Application Firewall (WAF) capabilities to HAProxy, enhancing security for your web applications. In this guide, I'll take you through the complete process of installing, configuring, and integrating Coraza-SPOA with HAProxy. We'll cover compiling Coraza-SPOA, setting up log rotation,
