Skip to content

Tech

Technical guides from real engineering practice: installation, integration, automation, troubleshooting and production operation of modern Linux and open-source platforms. The articles connect concrete configuration with architecture, security, lifecycle, monitoring and operations.

  • freeipa logo.
    Identity & Access

    Installing FreeIPA

    10 minutes read

    Step by step from an empty Linux server to a working FreeIPA lab with Kerberos, Web UI, first user, group and enrolled client.

    : Installing FreeIPA
  • Abstract Kubernetes cluster topology with security review and policy layers
    Security & Penetration Testing,  Kubernetes & Container Security

    Kubernetes Security Audit in Practice: Reviewing RBAC, Pod Security, NetworkPolicies and CIS

    27 minutes read

    Defensive Kubernetes security audit covering RBAC, ServiceAccounts, Pod Security, NetworkPolicies, Secrets, images, CIS, remediation and verification.

    : Kubernetes Security Audit in Practice: Reviewing RBAC, Pod Security, NetworkPolicies and CIS
  • Ansible logo.
    Ansible & Automation

    Install Ansible and create your first playbooks

    14 minutes read

    From installation through inventory and playbooks to a reusable Chrony role.

    : Install Ansible and create your first playbooks
  • Abstract decision matrix for security assessment, vulnerability scan and penetration testing
    Security & Penetration Testing

    Professional penetration testing for open-source and Kubernetes environments

    11 minutes read

    Differences between vulnerability scan, configuration review, security assessment and penetration test for modern open-source and Kubernetes platforms.

    : Professional penetration testing for open-source and Kubernetes environments
  • OpenProject dashboard as a project management and collaboration platform.
    OpenProject

    Installing OpenProject – Building a Production-Ready Project Management and Collaboration Platform

    11 minutes read

    Step-by-step OpenProject installation with Docker or Podman Compose, PostgreSQL, Memcached, Hocuspocus, Nginx reverse proxy and TLS.

    : Installing OpenProject – Building a Production-Ready Project Management and Collaboration Platform
  • XWiki - Installation Report
    XWiki & Knowledge Management

    Installation of XWiki – Building a Productive Knowledge Management and Collaboration Platform

    8 minutes read

    Practical guide to architecture, WAR deployment, PostgreSQL integration, Nginx reverse proxy, and TLS hardening

    : Installation of XWiki – Building a Productive Knowledge Management and Collaboration Platform
  • Rspamd status view as card image for grommunio-antispam.
    grommunio & Groupware

    grommunio-antispam – efficient spam filtering with centralized management and self-learning mechanisms

    7 minutes read

    Integration of Rspamd into production grommunio environments. With grommunio-antispam, the platform is enhanced with a powerful spam filtering component.

    : grommunio-antispam – efficient spam filtering with centralized management and self-learning mechanisms
  • grommunio web login as card image for central sign-in with Keycloak and MFA.
    grommunio & Groupware

    grommunio-auth – Centralized Authentication with Keycloak and Existing SSO

    8 minutes read

    Integration of grommunio into Existing SSO Environments. With grommunio-auth, the platform is extended by an authentication layer.

    : grommunio-auth – Centralized Authentication with Keycloak and Existing SSO
  • grommunio Admin overview after installation.
    grommunio & Groupware

    Installation of grommunio – Building Your Own Groupware Platform

    10 minutes read

    Installation of grommunio – Building Your Own Groupware Platform Practical guide including pre-configuration, installation, DNS setup, testing, and forecast…

    : Installation of grommunio – Building Your Own Groupware Platform
  • DNS Blog1.
    DNS, PKI & Infrastructure

    Secure DNS and ACME Setup with Knot

    3 minutes read

    DNS is one of the most critical components of modern IT infrastructures. Nevertheless, it is often only considered when problems arise.

    : Secure DNS and ACME Setup with Knot