Fredric News

Tag: CKS

  • OpenStack Nova/Neutron API 1000-Limit

    💡 OpenStack Nova/Neutron API 1000-Limit — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for OpenStack Nova/Neutron API 1000-Limit. Basis References and Guidelines (NOTE) In order to apply the config file, each daemon must be restarted, so there are many limitations in operating it in an operating cluster. Nova 🔗 https://docs.openstack.org/ocata/config-reference/compute/config-options.html max_limit…

  • etcd vs HashiCorp Vault: Distributed

    💡 etcd vs HashiCorp Vault: Distributed — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for etcd vs HashiCorp Vault: Distributed. References and Guidelines (NOTE) Both etcd and vault use the term raft. Do they mean the same thing? 💡 Both etcd and Vault use the term “Raft”, but they refer to…

  • Jump Desktop RDP/VNC Setup with Fluid

    💡 Jump Desktop RDP/VNC Setup with Fluid — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for Jump Desktop RDP/VNC Setup with Fluid. Mac to Mac Korean-English conversion key setting References and Guidelines (NOTE) Even if the OS settings support caps-lock and ctrl + space for both the host and remote by…

  • HomeLab OPNsense Topology: WAN, LAN, DMZ

    💡 HomeLab OPNsense Topology: WAN, LAN, DMZ — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for HomeLab OPNsense Topology: WAN, LAN, DMZ. L2 – NIC Definition L3 – IP band definition Total Interface name type NAT main purpose Band Allocation Use and Description WAN WAN Destination DHCP External Internet use /…

  • OpenStack CLI Instance (VM) Creation & Flavor

    💡 OpenStack CLI Instance (VM) Creation & Flavor — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for OpenStack CLI Instance (VM) Creation & Flavor. The Notion API rate limit was reached. Wait at least 5 seconds before retrying this tool call. Do not retry immediately or in parallel. {“error”:{“code”:”rate_limited”,”classification”:”rate_limit”,”operation”:”fetch”,”message”:”The Notion API…

  • OPNsense Unbound DNS: Ad-blocking

    💡 OPNsense Unbound DNS: Ad-blocking — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for OPNsense Unbound DNS: Ad-blocking. References and Guidelines (NOTE) System Required: DNS Port forwarding Private domain registration References and Guidelines (NOTE) List instructing to allow the response even if the DNS query result includes a private IP address…

  • OPNsense Firewall XML Config Automated Git

    💡 OPNsense Firewall XML Config Automated Git — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for OPNsense Firewall XML Config Automated Git. 🔗 https://docs.opnsense.org/manual/git-backup.html Step0. Preparation (Github) Create SSH Keypair bash Copy mkdir opnsense ssh-keygen -f ~/opnsense/opnsense # 공개키 클립보드에 복사 cat ~/opnsense/opnsense.pub | pbcopy # 개인키 클립보드에 복사 cat ~/opnsense/opnsense…

  • Enterprise Cloud Mgmt Platform (CMP)

    💡 Enterprise Cloud Mgmt Platform (CMP) — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for Enterprise Cloud Mgmt Platform (CMP). TLS Sample Show Get certificate information from specific TLS port bash Copy ip= port= openssl s_client -connect ${ip}:${port} -showcerts Main References and Guidelines (NOTE) Even if the CA certificate expires, the…

  • HashiCorp Vault Security: Transit Engine

    💡 HashiCorp Vault Security: Transit Engine — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for HashiCorp Vault Security: Transit Engine. Installation Operation Authentication Management Policy registration bash Copy k exec -it -n portal-system sts/vault — sh ### START IN CONTAINER vault login policy_name=admin-policy cat > /tmp/${policy_name}.hcl <<EOF path “*” { capabilities…

  • OPNsense Internal CA & WebGUI SSL/TLS

    💡 OPNsense Internal CA & WebGUI SSL/TLS — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for OPNsense Internal CA & WebGUI SSL/TLS.