Enable GitHub SSO for Teleport Community Edition
This guide enables GitHub login for a self-hosted Teleport Community Edition cluster using a GitHub OAuth App and maps GitHub […]
GitHub, Teleport
Hands-On DevOps & Homelab Experiments
From Kubernetes and Ceph to Proxmox, Kafka, Jenkins, Vault, Android, and CI/CD, every guide here is a tested, step-by-step walkthrough from my lab.
Keycloak, WordPress
Authenticate WordPress to Keycloak with OpenID Connect (OIDC) using a plugin
This post shows how to authenticate WordPress (https://www.maksonlee.com) against Keycloak (https://keycloak.maksonlee.com) using OpenID Connect (OIDC) with a WordPress plugin (no
WordPress
Configure WordPress SMTP with Zoho Mail Using Post SMTP
WordPress email delivery can be unreliable when it uses PHP mail (password resets, contact form notifications, admin alerts). The fix
Keycloak
Upgrade Keycloak (Tarball + systemd + MariaDB) on Ubuntu 24.04
Short outage method: Stop → Backup → Upgrade → Start Example upgrade: 26.4.6 → 26.5.2 This post upgrades a Keycloak
PostgreSQL, Teleport
Enroll a Self-Hosted PostgreSQL into Teleport CE
This post shows how to enroll a self-hosted PostgreSQL (Ubuntu 24.04, PostgreSQL 16) into an existing Teleport Community Edition cluster
Kubernetes, Teleport
Enroll a Kubernetes Cluster into Teleport CE (Helm)
This post follows Teleport’s official Kubernetes Access “Getting Started” flow, using the Web UI guided enrollment (Helm) and validating access
Teleport
Enroll an Ubuntu 24.04 Server as a Teleport SSH Resource (Community Edition, Web UI)
This is a follow-up to my Teleport installation guide: That post builds a single-node Teleport cluster (Auth + Proxy +
Teleport
Install Teleport Community Edition on Ubuntu 24.04 (Internal DNS + Let’s Encrypt DNS-01 via Cloudflare, TLS on :443)
This guide installs a single-node Teleport cluster (Auth + Proxy + SSH service on one host) on Ubuntu 24.04, secured
Smallstep
Use Step CA as an ACME Server (ACME v2) and Issue/Renew TLS Certificates with Certbot + NGINX
This guide enables ACME v2 on an existing Smallstep Step CA deployment, then shows how a host like test.maksonlee.com can
Keycloak, Smallstep
Enable Step CA SSH Certificates with Keycloak OIDC (Groups → Principals) + Configure Ubuntu Servers to Trust the CA (Ubuntu 24.04 + Windows 11)
This post extends my previous Step CA deployment: Here we add SSH short-lived certificate login using: What you’ll build Users