Sebastien Wains

As some of you may know, I work for Red Hat as an automation advocate in Belgium and Luxembourg.

This post is an update on my 2023 post that was using Authentik.

I own a Shelly i4 (DC model) that keeps an eye on two doors contacts (also knowns as reed switches), which I augmented with a Shelly Plus Addon that keeps an eye on five DS18B20 temperature sensors.

I have a lab environment running Ansible Automation Platform 2.3 (AAP) that I use for my customer demos.

Update Dec 25, 2024: steps updated for Authentik release 2024.12.1 Assumptions: you are already exposing a simple website service.example.com through Cloudflare Zero Trust this service is currently publicly accessible with no authentication whatsoever Aut…

Official documentation of Shaarli only gives a PHP example, but I’m more of a Python kind of guy.

I recently moved from running a VPS in some cloud to running a VM on my home server and exposing it behind Cloudflare tunnels.

I work at Red Hat but I happen to run some Ubuntu systems.

If you need to generate configuration files quickly based on templates, you can use envsubst to help you.

Tested on k3s 1.22.5.

I have a Lenovo t14s and a Dell WD19TB Thunderbolt Dock.

Lenovo Thunderbolt docking stations are terrible Ever since getting my new Thinkpad t14s, my Lenovo ThinkPad Thunderbolt 3 gen 1 docking (Type 40AC) started acting up on the USB side.

There are many lightweight or light enough Kubernetes distributions out there: k0s, k3s, Microk8s, OpenShift CodeReady Containers, Microshift, etc.

Moving from i3wm to bspwm In December 2019, I wrote about my Linux desktop environment running i3wm.

TESTED ON FEDORA 34 AND 40.

If you want to expose a service from your LAN to the internet and you can’t open ports, you can use ngrok, or its open source alternative FRP.

So I run a Fedora virtual machine on a Libvirt host running in my garage.

So you want a smart doorbell?

By default on a Fedora system running SELinux in enforcing mode, custom scripts won’t be able to make any connection through curl, wget or else.

Motion without object detection is worthless I replaced my old Synology DS213j with a Fedora box.

Ever since purchasing a Synology NAS, the Linux admin in me have been frustrated with the limitations and sometimes weird implentations of Synology DSM.

Previous title was “libvirtd with trunk port and VM in VLAN aware bridges”.

If you have always passed the --listen option under /etc/sysconfig/libvirtd and you can’t get libvirt to listen on a recent Fedora install, read on.

In BIOS: choose M.I.T. menu (whatever that stands for) Advanced CPU Core Settings SVM (whatever that stands for) Mode to Enabled Save and exit

For the longest time I have been using this bit of (kinda incorrect) Ansible code to log into IdM: - name: Logging in to IPA and store session cookie uri: url: "{{ ipa_url }}/session/login_password" method: POST force_basic_auth: yes headers: Content-Type:

For readers interested in Ansible, I gave a talk about Ansible and Red Hat Consulting at the Ansible Automates 2020 Event, with my colleagues Anton and Marc.

I’ve been trying to add the new mode for my ultra wide monitor with resolution 3440x1440.

From Mkdocs to Hugo I moved this blog from Mkdocs to Hugo just yesterday.

For the demonstration purpose, let’s create a container, we can use whoami: docker run --name whoami --net userbridge containous/whoami Create the configuration file for Caddy, for example under /opt/docker/caddy/Caddyfile: { # email to use on Let's Encry…

/etc/traefik/traefik.yml: [...] providers: file: directory: "/etc/traefik/dynamic/" watch: true [...]

Context I’ve used a number of todo list applications over the years.

I sync my data from my Seafile instance back to my NAS.

As per their website: Node-RED is a programming tool for wiring together hardware devices, APIs and online services in new and interesting ways.

I write articles on my personal computer.

swatchdog was originally called swatch.

I have used Linux as a desktop environment since about 2006, mostly with Gnome or Cinnamon.

I have ordered a TPLink HS110 Smart Plug to test how it compares to my aging Wemo plugs.

Problem: Authentication fails for AD users on RHEL system in an Freeipa/AD trusted environment.

Problem So if you press F11 in Firefox, by default it goes 100% full screen.

Orphan volumes List mountpoints that are not in use: for j in $(for i in $(docker volume ls -qf dangling=true) do docker volume inspect $i | grep "Mountpoint" | awk -F':' '{print $2}' | awk -F'"' '{print $2}' done) do du -h --max-depth=1 $j done Now feel…

On Fedora you can install with: dnf install asciinema To start recording: asciinema rec /path/to/mysession.cast End recording: Ctrl-D or exit Play a session: asciinema play /path/to/mysession.cast Learn more at https://asciinema.org/

You can use the DOCKER-USER chain to pass any custom iptables rules you want.

Project page Source code Gotify is: a simple server for sending and receiving messages self-hosted free and open source under MIT license a simple API a simple GUI written in Go building docker images at every release It comes with a nice Android applicat…

I once wrote about how to simulate latency on Linux.

For a long time I was getting random 502 errors “Bad Gateway” on my Docker instance running on a small VPS.

Everything has already been said and documented about ZSH.

Let me introduce you to Hastebin.

IMPORTANT: This blog post covers Traefik version 1.

A long long time ago I wrote about screen.

Allow TFTP for the libvirt network: virsh net-destroy lab virsh net-edit lab <name>lab</name> <uuid>7c0e845a-a3fa-4403-8fb4-2373dfcb416c</uuid> <forward mode='nat'/> <bridge name='virbr1' stp='on' delay='0'/> <mac address='52:54:00:aa:5f:89'/> <domain nam…