Install Keycloak with MariaDB and NGINX Reverse Proxy (SSL Termination)
This guide shows how to install Keycloak behind NGINX with SSL termination using Let’s Encrypt, and an existing MariaDB server.
Identity, Security & PKI
Engineering field notes
Practical DevOps & Infrastructure Notes
Tested guides for Linux, cloud, containers, and self-hosted services.
Latest articles
DevOps & Software Delivery
Install Gerrit 3.11.2 on Ubuntu 24.04
Introduction This guide walks you through installing Gerrit 3.11.2 on Ubuntu 24.04, using Java 21 and a dedicated system user.
DevOps & Software Delivery
Install Jenkins on Kubernetes with Helm
This guide walks you through installing Jenkins in a Kubernetes cluster using Helm, with: Prerequisites 1. Create a PersistentVolumeClaim Save
Networking & Connectivity
Set Up HAProxy for TLS Passthrough with SNI Routing on OPNsense
In this guide, we’ll configure HAProxy on OPNsense to support TLS passthrough with SNI-based routing. This allows secure HTTPS traffic
Networking & Connectivity
WireGuard VPN on OPNsense 25.1
Architecture Overview: This setup runs WireGuard on an AWS EC2-based OPNsense firewall (WireGuard server) in the public subnet (10.0.0.0/20). The
Networking & Connectivity
Configure BIND on OPNsense 25.1 as Internal DNS Server for AWS VPC
Overview Component Value Internal domain maksonlee.com DNS server IP 10.0.128.4 (OPNsense LAN IP) System DNS 127.0.0.1 (loopback) Forwarder AWS DNS
Networking & Connectivity
Let’s Encrypt on OPNsense 25.1 Using DNS-01 with Cloudflare
1. Install the ACME Client Plugin 2. Create Your Let’s Encrypt Account 3. Create Cloudflare API Token You’ll need this
Networking & Connectivity
Deploy OPNsense 25.1 Nano on AWS
Architecture Overview: Interface Subnet Private IP Public IP WAN (ena0) test-subnet-public1-ap-south-1a 10.0.0.4 Yes LAN (ena1) test-subnet-private1-ap-south-1a 10.0.128.4 No 1. Launch
Networking & Connectivity
Create an EC2 AMI from Official OPNsense 25.1 Nano (raw) Image
This post shows how to convert the official OPNsense 25.1 Nano disk image (.img.bz2) into an EC2 AMI using VM