After creating self-signed wildcard certificates for modern browsers a while back, self-signed certificates came back to haunt me once again. This post describes a solution for creating self-signed keystores (pkcs12 or jks) in OpenShift and Kubernetes to use in Spring Boot applications to re-encrypt traffic. Actually I present 2 solutions, but the second one only … [Read more…]
Unfortunately this does not apply to the IP logged within the comment section, however the log does contain the correct IP. I will revisit this issue and may update this post. Cloudflare offers great solutions for the protection of a webpage. Although most interesting applications require a paid premium account, the free tier also provides … [Read more…]
For my current personal project in developing a dashboard, which displays metrics of my servers and devices among other things, I was faced with the challenge to collect metrics from all devices. Usually solutions like Prometheus are quite famous for use cases like this, but I did not want to open any ports on any … [Read more…]
When setting up my local K3s on a Intel NUC I thought it would be nice to use Ingress resources to access the services instead of using a node-port. As those services will only be used inside my LAN (and I didn’t want to have an invalid certificate warning) I decided to use a self-signed … [Read more…]
Until now I have mostly dealt with certificates for a specific host – and there is usually nothing wrong with doing it this way. There are easy to use tools for Let’s Encrypt which automate the retrieval of a certificate for a (sub-) domain. On a docker-compose based, (mostly) manually managed stack you would usually … [Read more…]
When setting up my new K3s cluster I needed some sort of redirect from HTTP to HTTPS. One option that is often found when searching for this issue is to redirect all traffic with Traefik. This however is not suitable if you just want some services to redirect and not everything in the cluster. Especially … [Read more…]
The need for a query Some time ago I’ve decided to gather information from my FritzBox router to display in Grafana. I stumbled upon a TIG (Telegraf, InfluxDB, Grafana) stack on Github, which I forked and dockerized. I found a Grafana dashboard to import on another fork (included in my fork as well) which is … [Read more…]
For a small project (a microcontroller with a temperature sensor) I needed a mqtt broker to process the sensors data to display it in Grafana. There’s already a TIG stack running on my server, so it was obvious to me that I will go with Mosquitto. For some reason Mosquitto never returned any data scraped … [Read more…]
Recently I tried to make use of the renderer function in Grafana to retrieve a graph as an image for further usage. However since Grafana 7 (I guess) they decided to not include the external image renderer anymore in the Grafana Docker image. You may install the plugin yourself, however this does not work by … [Read more…]
Issue: Keyboard and mouse input is not registered, when using a Teamviewer session on a host running VMWare Horizon. A few days ago I was confronted with a simple yet annoying occurence. I was using a VMWare Horizon session and a colleague needed to input some credentials in my session. On the same host which … [Read more…]