Turn Off and Turn On an Application in Kubernetes
Sometimes, you may want to temporarily shut down an application in Kubernetes to save resources, perform maintenance, or simply pause […]
Kubernetes
Hands-On DevOps & Homelab Experiments
From Kubernetes and Ceph to Proxmox, Kafka, Jenkins, Vault, Android, and CI/CD, every guide here is a tested, step-by-step walkthrough from my lab.
Gerrit, Keycloak
Gerrit Authentication with Keycloak via OAuth
This step-by-step guide helps you securely integrate Gerrit Code Review (http://gerrit:8080) with Keycloak (https://keycloak.maksonlee.com) using OAuth 2.0 / OpenID Connect.
Keycloak
Install Keycloak with MariaDB and NGINX Reverse Proxy (SSL Termination)
This guide shows how to install Keycloak behind NGINX with SSL termination using Let’s Encrypt, and an existing MariaDB server.
Gerrit
Install Gerrit 3.11.2 on Ubuntu 24.04
Introduction This guide walks you through installing Gerrit 3.11.2 on Ubuntu 24.04, using Java 21 and a dedicated system user.
Jenkins, Kubernetes
Install Jenkins on Kubernetes with Helm
This guide walks you through installing Jenkins in a Kubernetes cluster using Helm, with: Prerequisites Save this as jenkins-pvc.yaml: Apply
HAProxy, OPNsense
Set Up HAProxy for TLS Passthrough with SNI Routing on OPNsense
In this guide, we’ll configure HAProxy on OPNsense to support TLS passthrough with SNI-based routing. This allows secure HTTPS traffic
AWS, OPNsense, WireGuard
WireGuard VPN on OPNsense 25.1
Architecture Overview: This setup runs WireGuard on an AWS EC2-based OPNsense firewall (WireGuard server) in the public subnet (10.0.0.0/20). The
AWS EC2, BIND, OPNsense
Configure BIND on OPNsense 25.1 as Internal DNS Server for AWS VPC
Overview Component Value Internal domain maksonlee.com DNS server IP 10.0.128.4 (OPNsense LAN IP) System DNS 127.0.0.1 (loopback) Forwarder AWS DNS
Let's Encrypt, OPNsense
Let’s Encrypt on OPNsense 25.1 Using DNS-01 with Cloudflare
You’ll need this to allow OPNsense to modify DNS records for validation. You may need to re-login to the WebGUI
AWS EC2, OPNsense
Deploy OPNsense 25.1 Nano on AWS
Architecture Overview: Interface Subnet Private IP Public IP WAN (ena0) test-subnet-public1-ap-south-1a 10.0.0.4 Yes LAN (ena1) test-subnet-private1-ap-south-1a 10.0.128.4 No ⚠️ Do