Enable Key Recovery in EJBCA for Device Certificates
In my previous post, I used EJBCA RA Web to issue ThingsBoard device certificates from an externally signed IoT device […]
Identity, Security & PKI
TLS & Certificates
Identity, Security & PKI
Manage ThingsBoard Device Certificates with EJBCA After Creating an External IoT Device CA
In my environment, I already had Step CA running as my private PKI bootstrap CA, EJBCA CE running on Ubuntu
Observability & Operations
Run Zabbix 7.4 on Docker Compose with HTTPS (No Reverse Proxy, DNS-01 Certbot, Bind Mounts Only)
This post shows a clean way to run Zabbix Server + Zabbix Web (NGINX) + MariaDB using Docker Compose, and
Identity, Security & PKI
Install Teleport Community Edition on Ubuntu 24.04 (Internal DNS + Let’s Encrypt DNS-01 via Cloudflare, TLS on :443)
This guide installs a single-node Teleport cluster (Auth + Proxy + SSH service on one host) on Ubuntu 24.04, secured
Identity, Security & PKI
Use Step CA as an ACME Server (ACME v2) and Issue/Renew TLS Certificates with Certbot + NGINX
This guide enables ACME v2 on an existing Smallstep Step CA deployment, then shows how a host like test.maksonlee.com can
Identity, Security & PKI
Enable Step CA SSH Certificates with Keycloak OIDC (Groups → Principals) + Configure Ubuntu Servers to Trust the CA (Ubuntu 24.04 + Windows 11)
This post extends my previous Step CA deployment: Here we add SSH short-lived certificate login using: What you’ll build Users
Identity, Security & PKI
Use the Kubernetes Cluster CA to Sign Each Node’s Kubelet Serving Certificate (kubeadm Bare-Metal Ubuntu 24.04)
If you run Metrics Server (or anything that connects to the Kubelet HTTPS endpoint on 10250), you may see TLS
Identity, Security & PKI
Enable HTTPS for Traefik on Bare-Metal Kubernetes with a Wildcard Let’s Encrypt Certificate (cert-manager + Cloudflare DNS-01)
In a previous post, We have a Kubernetes cluster that exposes HTTP for through Traefik and MetalLB. In this follow-up,
Data Platforms & Analytics
How to Install a 3-Node Kafka 4.1 Cluster on Ubuntu 24.04 with Per-Node HAProxy SSL Termination
Introduction In my previous post I showed how to run Kafka 4.0 + HAProxy on a single Ubuntu 24.04 node
Android & Mobile Development
Google Play: Reuse Another App’s App-Signing Key
Goal: Make App A use the same Google Play app-signing certificate as App B.Not a merge: Packages, installs, reviews, purchases