k3s

Defense in Depth: Nine Layers Between the Internet and My Servers

Illustration for the article on defense in depth

Defense in Depth: Nine Layers Between the Internet and My Servers

raphael 13. October 2026

Nine layers between the internet and my servers, an attacker's view of them, and what I changed...

Ten Points, One Branch: Taking My Ansible Code From “It Works” to “It Is Clean”

Illustration for the article on cleaning up the Ansible code

Ten Points, One Branch: Taking My Ansible Code From “It Works” to “It Is Clean”

raphael 12. October 2026

Ten improvements to my Ansible code, tested without touching production: kubernetes.core, a real dry run, lint and...

A+ on SSL Labs: What My Blog’s TLS Actually Speaks (and Where the Ansible Code Lives)

Illustration for the article on the blog’s TLS configuration (SSL Labs A+)

A+ on SSL Labs: What My Blog’s TLS Actually Speaks (and Where the Ansible Code Lives)

raphael 6. October 2026

☝️ A quick word for everyone who just wanted to read a blog post: TLS is the...

Germany Only: Geo-Fencing SSH with nftables and Ansible (and What My Logs Said About Bots and Readers)

Illustration of SSH access limited to Germany by a geo-fencing firewall

Germany Only: Geo-Fencing SSH with nftables and Ansible (and What My Logs Said About Bots and Readers)

raphael 1. October 2026

SSH on a non-standard port, key-only, fail2ban - and still 16 login attempts per hour from all...

Two Minutes Forty-Five: My First Nextcloud App Update via Ansible (and the Guard Rail I Added Just Before)

Illustration for the article on updating Nextcloud on K3s

Two Minutes Forty-Five: My First Nextcloud App Update via Ansible (and the Guard Rail I Added Just Before)

raphael 30. September 2026

Confession time: the production Nextcloud from the migration battle log has been running on K3s for a...

Some text and images on this site are AI-assisted or AI-generated. Details