almalinux

The Ansible Tour, Part 2: The Platform – From a Bare AlmaLinux to a Kubernetes Cluster

Illustration for the Ansible Tour series

The Ansible Tour, Part 2: The Platform – From a Bare AlmaLinux to a Kubernetes Cluster

raphael 15. October 2026

Part 2 of the Ansible Tour: packages, kernel settings, mail, nightly updates, K3s, Helm, cert-manager, ingress and...

The Ansible Tour, Part 1: One Repository, Three Servers – How the Code Is Organised and What Happens During a Run

Illustration for the Ansible Tour series

The Ansible Tour, Part 1: One Repository, Three Servers – How the Code Is Organised and What Happens During a Run

raphael 14. October 2026

Part 1 of a tour through my Ansible code: how one repository and 34 roles run a...

A Mail for Every SSH Login: A Two-Minute Tripwire with wtmp and systemd

Illustration for the article on a mail for every SSH login

A Mail for Every SSH Login: A Two-Minute Tripwire with wtmp and systemd

raphael 14. October 2026

A mail for every interactive SSH login within two minutes: a systemd timer reading wtmp, quiet for...

Germany Only: Geo-Fencing SSH with nftables and Ansible (and What My Logs Said About Bots and Readers)

Illustration of SSH access limited to Germany by a geo-fencing firewall

Germany Only: Geo-Fencing SSH with nftables and Ansible (and What My Logs Said About Bots and Readers)

raphael 1. October 2026

SSH on a non-standard port, key-only, fail2ban - and still 16 login attempts per hour from all...

Moving a Nextcloud From Bare Metal to K3s: A Full Dress Rehearsal, and What It Cost Me in Commits

Illustration of a Nextcloud dress-rehearsal migration from bare metal

Moving a Nextcloud From Bare Metal to K3s: A Full Dress Rehearsal, and What It Cost Me in Commits

raphael 11. September 2026

There’s a migration coming up that I’ve been circling for a while. A Nextcloud instance I administer...

Some text and images on this site are AI-assisted or AI-generated. Details