Posts
Secure Kubernetes on Hetzner Cloud with a node driver for Rancher
In this post, we’ll see how to deploy Kubernetes to Hetzner Cloud using a node driver for Rancher. By default, when using this node driver Rancher doesn’t set up any firewall, leaving etcd exposed. Here’s how to fix that while still taking advantage of the convenience of the node driver.
Linstor storage for Kubernetes, the Kubernetes way
An update on how to set up Linstor storage for Kubernetes, this time in a more cloud native way.
Getting the user’s real IP with haproxy ingress behind Cloudflare
When using haproxy ingress behind Cloudflare, the IPs in the access logs are Cloudflare’s instead of the actual IPs of the users. In this post, I’ll show how easily fix that.
Rails and Active Storage: permanent URLs with no redirects, using Digital Ocean behind Cloudflare
In this post I’ll show how to easily use Digital Ocean S3 compatible storage for Active Storage while taking advantage of Cloudflare’s free bandwidth; I’ll also show how to ensure that links to attachments are non-expiring and are direct links to the CDN without the default redirect mechanism.
Provisioning, backing up and restoring a highly available Rancher cluster with Terraform
In the previous post, we’ve seen how to automate the complete deployment of a Kubernetes cluster with Rancher using Terraform and Ansible. In this post, we’ll see how to automate the creation of a HA cluster for Rancher itself.
From zero to Kubernetes in Hetzner Cloud with Terraform, Ansible and Rancher
In this post, I am sharing how I set up cheap Kubernetes clusters in Hetzner Cloud using an amazing combinations of powerful tools.
Using Drone CI/CD to build, test your images and deploy to Kubernetes with Helm
Drone is a very lightweight and simple, but powerful CI/CD solution that is designed for containers. In this post, we’ll see how to implement a pipeline from build to deployment to Kubernetes.
Protecting a Rails app from small scripted attacks
If you are tired of seeing your Rails app’s logs polluted with login attempts for Wordpress etc., it’s actually easy to stop most small scripted attacks.
Rails/webpacker: share dynamically compiled assets between the dev and test environments
By default, Rails system and integration tests cannot benefit from webpack dev server’s dynamic asset compilation. Here’s a trick that works very well to solve this problem.
Rails 6: parallel system tests with external Selenium Docker containers
How to run system tests with Capybara using Selenium containers instead of local Chrome/chromedriver setup.