Install Kiwi TCMS OSS and Apply a Trusted SSL Certificate (Two Options)
Kiwi TCMS is a powerful open-source test management system built on Django and MariaDB. In this guide, we’ll install Kiwi […]
Identity, Security & PKI
TLS & Certificates
IoT & Embedded Systems
ESP32 Firmware for BLE Wi-Fi Provisioning and Secure MQTT with X.509 Authentication to ThingsBoard
In a previous post, I explained how to secure ThingsBoard using X.509 client certificate authentication and enable auto-provisioning.This post focuses
Identity, Security & PKI
Deploying Step CA: Your Own Certificate Authority for Internal Services
Smallstep step-ca is a CA server for automated certificate issuance in internal environments (homelabs, labs, DevOps workflows). The common model
Identity, Security & PKI
Secure ThingsBoard MQTTS with X.509 Certificate Chain and Auto-Provisioning
This guide builds on: to enable: Why We Removed MQTTS from HAProxy In the earlier setup, HAProxy terminated TLS for
Networking & Connectivity
Install and Configure HAProxy on Bare Metal Ubuntu 24.04
Set up HAProxy 3.2 on Ubuntu 24.04 and forward HTTP/HTTPS to a backend Jenkins host using SNI-based TLS passthrough. HAProxy
Identity, Security & PKI
Install Keycloak with MariaDB and NGINX Reverse Proxy (SSL Termination)
This guide shows how to install Keycloak behind NGINX with SSL termination using Let’s Encrypt, and an existing MariaDB server.
Networking & Connectivity
Set Up HAProxy for TLS Passthrough with SNI Routing on OPNsense
In this guide, we’ll configure HAProxy on OPNsense to support TLS passthrough with SNI-based routing. This allows secure HTTPS traffic
Identity, Security & PKI
Automatically Renew Let’s Encrypt Certificates Using Certbot on Ubuntu 24.04
Certbot is designed to automatically renew certificates before they expire. The process works as follows: To verify the timer is