Add ThingsBoard LwM2M OTA Updates to ESP32
Prepare a tagged ESP32 firmware release and use ThingsBoard LwM2M Object 5 to update from v01 to v02 over the existing X.509 DTLS connection.
IoT & Embedded Systems
Configuration
IoT & Embedded Systems
Migrate ESP32 Telemetry from MQTT to LwM2M with X.509 Authentication to ThingsBoard
Migrate an existing ESP32 from MQTT to LwM2M with Anjay and X.509 DTLS. Configure ThingsBoard, reuse the device identity, flash over USB, and verify temperature and humidity telemetry.
Cloud, Linux & Virtualization
Configure Android Phone USB Passthrough for a KVM VM on Ubuntu Server
Pass an Android phone from an Ubuntu KVM host into a virtual machine for adb and Flutter development. Configure USB attachment, guest permissions, and automatic reconnection with udev and systemd.
Cloud, Linux & Virtualization
Add a New KVM Storage Pool and Move Existing VMs to It on Ubuntu 24.04
In a previous post, I showed how to set up KVM and Cockpit on Ubuntu 24.04. That setup works well
Networking & Connectivity
WireGuard Single-Instance VPN: AWS EC2 Instance to MikroTik hEX at Home
In a previous post, I configured a WireGuard site-to-site VPN between my MikroTik hEX router at home and OPNsense 25.7
Identity, Security & PKI
Enable Key Recovery in EJBCA for Device Certificates
In my previous post, I used EJBCA RA Web to issue ThingsBoard device certificates from an externally signed IoT device
Identity, Security & PKI
Enable GitHub SSO for Teleport Community Edition
This guide enables GitHub login for a self-hosted Teleport Community Edition cluster using a GitHub OAuth App and maps GitHub
Web Platforms & Applications
Configure WordPress SMTP with Zoho Mail Using Post SMTP
WordPress email delivery can be unreliable when it uses PHP mail (password resets, contact form notifications, admin alerts). The fix
Identity, Security & PKI
Use Step CA as an ACME Server (ACME v2) and Issue/Renew TLS Certificates with Certbot + NGINX
This guide enables ACME v2 on an existing Smallstep Step CA deployment, then shows how a host like test.maksonlee.com can
Identity, Security & PKI
Enable Step CA SSH Certificates with Keycloak OIDC (Groups → Principals) + Configure Ubuntu Servers to Trust the CA (Ubuntu 24.04 + Windows 11)
This post extends my previous Step CA deployment: Here we add SSH short-lived certificate login using: What you’ll build Users