Why Jenkins Keeps Logging You Out (OIDC + Keycloak): Finding and Fixing the Timeout Layer
When Jenkins is authenticated by Keycloak (OIDC) and sits behind NGINX, “session timeout” is not a single knob. You can […]
Jenkins, Keycloak
Hands-On DevOps & Homelab Experiments
From Kubernetes and Ceph to Proxmox, Kafka, Jenkins, Vault, Android, and CI/CD, every guide here is a tested, step-by-step walkthrough from my lab.
GitHub, Teleport
Enable GitHub SSO for Teleport Community Edition
This guide enables GitHub login for a self-hosted Teleport Community Edition cluster using a GitHub OAuth App and maps GitHub
Keycloak, WordPress
Authenticate WordPress to Keycloak with OpenID Connect (OIDC) using a plugin
This post shows how to authenticate WordPress (https://www.maksonlee.com) against Keycloak (https://keycloak.maksonlee.com) using OpenID Connect (OIDC) with a WordPress plugin (no
WordPress
Configure WordPress SMTP with Zoho Mail Using Post SMTP
WordPress email delivery can be unreliable when it uses PHP mail (password resets, contact form notifications, admin alerts). The fix
Keycloak
Upgrade Keycloak (Tarball + systemd + MariaDB) on Ubuntu 24.04
Short outage method: Stop → Backup → Upgrade → Start Example upgrade: 26.4.6 → 26.5.2 This post upgrades a Keycloak
PostgreSQL, Teleport
Enroll a Self-Hosted PostgreSQL into Teleport CE
This post shows how to enroll a self-hosted PostgreSQL (Ubuntu 24.04, PostgreSQL 16) into an existing Teleport Community Edition cluster
Kubernetes, Teleport
Enroll a Kubernetes Cluster into Teleport CE (Helm)
This post follows Teleport’s official Kubernetes Access “Getting Started” flow, using the Web UI guided enrollment (Helm) and validating access
Teleport
Enroll an Ubuntu 24.04 Server as a Teleport SSH Resource (Community Edition, Web UI)
This is a follow-up to my Teleport installation guide: That post builds a single-node Teleport cluster (Auth + Proxy +
Teleport
Install Teleport Community Edition on Ubuntu 24.04 (Internal DNS + Let’s Encrypt DNS-01 via Cloudflare, TLS on :443)
This guide installs a single-node Teleport cluster (Auth + Proxy + SSH service on one host) on Ubuntu 24.04, secured
Smallstep
Use Step CA as an ACME Server (ACME v2) and Issue/Renew TLS Certificates with Certbot + NGINX
This guide enables ACME v2 on an existing Smallstep Step CA deployment, then shows how a host like test.maksonlee.com can