The Default Configuration Bottleneck Out of the box, most Linux distributions are tuned for general-purpose workloads-a balance between a desktop and a light server. However, when you deploy a hig...
The Transition from Static Bridges to Dynamic Fabrics In the early days of Proxmox virtualisation, the standard approach to networking was the Linux Bridge (vmbr0). While robust, it tied the virtu...
The Debugging Dilemma in Distroless Images In a mature DevOps environment, we strive for minimal container images. “Distroless” images, which contain only your application and its immediate depend...
The Security Administrator’s Enigma: SELinux For many Linux administrators, Security-Enhanced Linux (SELinux) is the first thing disabled after a fresh installation. This is a significant mistake....
The Threat: Automated Opportunistic Attacks If you check your firewall logs, you’ll see thousands of attempts to hit SSH, RDP, or common web vulnerabilities (like /wp-admin) every hour. These aren...
Intro Install docker We will be running the Nginx Proxy Manager in docker stack. Hence, we will be needing a working docker installation. You can follow another one of my posts on Docker - Instal...
The Problem: The 2000-Line docker-compose.yml As your infrastructure grows, your docker-compose.yml becomes a nightmare to maintain. You have 20 services, and they all share the same logging confi...
The Problem: The 100MB/s Ceiling You have a high-speed 10Gbps network and a fast SSD-backed storage server. Yet, when mounting via NFS, your rsync or database backups are capped at around 110-120M...
Intro Obtain keystore file In order to host a Demo CAS server, first of all we will need to generate a trusted authority signed certificate which can be obtained by following my pervious post on ...
Intro Install certbot as mentioned in my previous post on Linux - Install Certbot. By default, certbot retrieves a certificate and installs it immediately on the web server by adding an extra par...