Infrastructure as Code

Germany Only: Geo-Fencing SSH with nftables and Ansible (and What My Logs Said About Bots and Readers)

Illustration of SSH access limited to Germany by a geo-fencing firewall

Germany Only: Geo-Fencing SSH with nftables and Ansible (and What My Logs Said About Bots and Readers)

raphael 1. October 2026

SSH on a non-standard port, key-only, fail2ban - and still 16 login attempts per hour from all...

Two Minutes Forty-Five: My First Nextcloud App Update via Ansible (and the Guard Rail I Added Just Before)

Illustration for the article on updating Nextcloud on K3s

Two Minutes Forty-Five: My First Nextcloud App Update via Ansible (and the Guard Rail I Added Just Before)

raphael 30. September 2026

Confession time: the production Nextcloud from the migration battle log has been running on K3s for a...

Moving a Nextcloud From Bare Metal to K3s: A Full Dress Rehearsal, and What It Cost Me in Commits

Illustration of a Nextcloud dress-rehearsal migration from bare metal

Moving a Nextcloud From Bare Metal to K3s: A Full Dress Rehearsal, and What It Cost Me in Commits

raphael 11. September 2026

There’s a migration coming up that I’ve been circling for a while. A Nextcloud instance I administer...

My 5-Year IT Learning Roadmap — From Sysadmin to Infrastructure Engineer

Illustration of a five-year IT learning roadmap

My 5-Year IT Learning Roadmap — From Sysadmin to Infrastructure Engineer

raphael 27. August 2026

Linux. Windows. Networking. Security. Observability. Automation. Cloud. Kubernetes. AI. But above all: 🧠 Learn to understand systems...

151 Pass, 113 Fail: My Linux Box Gets a Reality Check

Illustration of CIS Benchmark results, part two

151 Pass, 113 Fail: My Linux Box Gets a Reality Check

raphael 20. August 2026

Same evening, different layer of the stack. 🥱➡️🤓 After the kube-bench post I got a very reasonable...

Some text and images on this site are AI-assisted or AI-generated. Details