Deploying Crowdsec on k3s
I’ve deployed Crowdsec, a collaborative Intrusion Prevention system, into my Kubernetes cluster using Ansible.
Deep Dive Into Helm
Continuing to deep dive into the world of automating a static website using Drone and Kubernetes
Ntfy Self-Hosted Push Notifications
Ntfy is a platform for sending push notifications to your desktop or phone by simply using a PUT/POST HTTP request. In other words, it’s pub-sub. Clients publish to a topic and subscribers to the topic will be notified when something new is published. Simple and effective way to get your own push notifications. I’ve previously written how I use Ntfy with Tasker.
Vaultwarden for ALL the Passwords
Vaultwarden is an implementation of the Bitwarden API in Rust. It’s fast, lightweight, secure, and compatible with the official Bitwarden clients. It’s perfect for self-hosting a password manager for your family and a few friends. I’ve run it for over two years and it is rock solid. I support Bitwarden as well by buying a personal subscription and recommend it to my clients for their enterprise password management needs.
Readying the Cluster For Work
The k3s cluster has now been initialized, but it’s not quite ready to deploy any applications. I need to deploy an ingress, storage, and a load balancer.
Initializing a k3s cluster with Ansible
Using Ansible to install and initialize a highly available multi-master k3s cluster.
The Great Migration
Back in April, I wrote a summary post about the project I had been working on to migrate to a new k3s cluster from the original Rancher Kubernetes cluster that I created in 2020. My intention was to continue that series and detail each part of that project. Unfortunately, I ran into some technical problems which meant that not only did the cluster get shutdown, but I didn’t have time to even look at it.
April 2022 Update
It’s been six months since my last update. Wow, I knew it had been some time, but that’s obviously way longer than I expected. I’ve had plenty to say and plenty of updates, but I was waiting for a specific event. Let’s take a step back so I can explain:
Six months ago I ran into an issue where LDAP broke after a TLS certificate expired. It expired because it was not set up to renew automatically.