Point cert-manager at FreeIPA 4.12 ACMEv2 to auto-issue TLS for every Kubernetes Ingress. 3-node k3s lab, end-to-end tested,…
You have just finished a fresh CachyOS install (or you are still on the way and following the…
Step-by-step Fedora 44 Workstation install with real screenshots: download ISO, boot the Anaconda Web UI, partition Btrfs, and…
CachyOS ships its own kernel, its own optimized package repos, and a small GUI called cachyos-kernel-manager for swapping…
CachyOS turns Arch Linux into something you can actually install on a laptop, desktop, or VM in fifteen…
Enable FreeIPA 4.12 ACMEv2, issue 90-day RSA certs with certbot and acme.sh, auto-renew via systemd timer and cron.…
Verify, decode, and ship the 128-bit random serial that became default in FreeIPA 4.12. Five proof methods, the…
10 production-tested FreeIPA sudo rules: Defaults, NOPASSWD, RunAs, deny patterns, break-glass, auth-indicator gated, time-bound, AD-trusted, GSSAPI passwordless. Built…
Build a least-privilege FreeIPA HBAC policy on Rocky Linux 10: replace allow_all, validate every rule with hbactest, and…
Two laptops, three home-lab servers, and a VPS in Frankfurt. Old me wired that together with WireGuard, an…
Stand up a forward proxy on your LAN and you get a single chokepoint for outbound HTTP and…
A static IP on a Linux server should take five minutes to set. On Ubuntu 26.04 LTS, Netplan…
