WireGuard Site-to-Site VPN: MikroTik hEX ↔ OPNsense 25.7 on AWS
This post upgrades the previous single-PC WireGuard client setup into a site-to-site VPN: Follow-up to: Architecture What changes vs “single […]
AWS, OPNsense, WireGuard
Hands-On DevOps & Homelab Experiments
From Kubernetes and Ceph to Proxmox, Kafka, Jenkins, Vault, Android, and CI/CD, every guide here is a tested, step-by-step walkthrough from my lab.
AWS
Install and Setup AWS CLI v2 on Ubuntu 24.04
This post shows a complete, reproducible flow: Lab context Important: The following CloudShell script is for this post’s use case
FreeBSD
Install FreeBSD 14.3 on KVM using Cockpit (Ubuntu 24.04)
Prerequisites Before you start, your Ubuntu 24.04 host should already have: If you haven’t set these up yet, follow this
Argo CD, Backstage
Show Argo CD Deployments in Backstage
This post adds Argo CD deployment visibility to your Backstage entity pages without creating a new tab. Instead, Argo CD
Argo CD, Keycloak
Enable Keycloak SSO (OIDC + PKCE) for Argo CD
This post shows how to enable Keycloak authentication for an existing Argo CD deployment using OIDC + PKCE, so you
Backstage, Kubernetes
Show Kubernetes Objects for a Component in Backstage (Backstage Manages Itself, In-Cluster)
This is a follow-up to: This post enables the Backstage Kubernetes view without changing any Backstage source code and without
Alertmanager, Grafana, Kubernetes, Prometheus
Deploy kube-prometheus-stack on a Bare-Metal Kubernetes Cluster (Traefik + Wildcard HTTPS)
This post shows how to deploy kube-prometheus-stack (Prometheus Operator + Prometheus + Alertmanager + Grafana + exporters) on a 3-node
Kubernetes
Install Lens on Windows 11 and Connect to a Self-Managed kubeadm Kubernetes Cluster (HA API + Traefik)
Lens is a desktop Kubernetes IDE that connects directly to the Kubernetes API server. The key to a stable setup
Kubernetes
Install Metrics Server in HA Mode on a kubeadm Bare-Metal Kubernetes Cluster (Ubuntu 24.04)
Metrics Server collects CPU / memory usage from each node’s Kubelet and exposes it via the Kubernetes Metrics API. This
Kubernetes
Use the Kubernetes Cluster CA to Sign Each Node’s Kubelet Serving Certificate (kubeadm Bare-Metal Ubuntu 24.04)
If you run Metrics Server (or anything that connects to the Kubelet HTTPS endpoint on 10250), you may see TLS