In the realm of digital note-taking, Obsidian stands out as a powerful tool for documentation and crafting your personal second brain. There are a lot of other tools, like Notion, but Obsidian takes the crown for me as it safes all files locally in Markdown. However, for a meticulous user like myself, ensuring that every … [Read more…]
In this blog post, I’ll walk you through how I streamlined my Docker-based workflows by linting Dockerfiles with Hadolint in Jenkins pipelines. By integrating this powerful tool, I’ve managed to elevate my pipeline’s efficiency and ensure code quality at every step. The Quest for the Perfect Linter As a firm believer in building Docker images … [Read more…]
After creating self-signed wildcard certificates for modern browsers a while back, self-signed certificates came back to haunt me once again. This post describes a solution for creating self-signed keystores (pkcs12 or jks) in OpenShift and Kubernetes to use in Spring Boot applications to re-encrypt traffic. Actually I present 2 solutions, but the second one only … [Read more…]
Unfortunately this does not apply to the IP logged within the comment section, however the log does contain the correct IP. I will revisit this issue and may update this post. Cloudflare offers great solutions for the protection of a webpage. Although most interesting applications require a paid premium account, the free tier also provides … [Read more…]
For my current personal project in developing a dashboard, which displays metrics of my servers and devices among other things, I was faced with the challenge to collect metrics from all devices. Usually solutions like Prometheus are quite famous for use cases like this, but I did not want to open any ports on any … [Read more…]
When setting up my local K3s on a Intel NUC I thought it would be nice to use Ingress resources to access the services instead of using a node-port. As those services will only be used inside my LAN (and I didn’t want to have an invalid certificate warning) I decided to use a self-signed … [Read more…]
Until now I have mostly dealt with certificates for a specific host – and there is usually nothing wrong with doing it this way. There are easy to use tools for Let’s Encrypt which automate the retrieval of a certificate for a (sub-) domain. On a docker-compose based, (mostly) manually managed stack you would usually … [Read more…]
When setting up my new K3s cluster I needed some sort of redirect from HTTP to HTTPS. One option that is often found when searching for this issue is to redirect all traffic with Traefik. This however is not suitable if you just want some services to redirect and not everything in the cluster. Especially … [Read more…]
The need for a query Some time ago I’ve decided to gather information from my FritzBox router to display in Grafana. I stumbled upon a TIG (Telegraf, InfluxDB, Grafana) stack on Github, which I forked and dockerized. I found a Grafana dashboard to import on another fork (included in my fork as well) which is … [Read more…]
For a small project (a microcontroller with a temperature sensor) I needed a mqtt broker to process the sensors data to display it in Grafana. There’s already a TIG stack running on my server, so it was obvious to me that I will go with Mosquitto. For some reason Mosquitto never returned any data scraped … [Read more…]