Setting Up SSO with Zitadel for Grafana

My multi-iteration experience of setting up SSO for my Grafana in homelab

Recently, I decided to enhance the security and user experience of my Grafana instance by implementing Single Sign-On (SSO) with Zitadel as the identity provider. I have written an article a year ago for something similar with Zitadel and Tailscale. In this blog post, I’ll share my experience following the process outlined in this helpful article, along with some additional insights and tips I discovered along the way.

What is Zitadel? (to those wonder)

Zitadel is an open-source identity management platform that provides authentication, authorization, and user management functionality. It supports various authentication protocols including OAuth 2.0 and OpenID Connect (OIDC), making it an excellent choice for implementing SSO across multiple applications.

[Read More]

Automate Bind9 zone management with GitHub Actions and Tailscale

Hybrid approach to handle your DNS queries

I recently implemented a solution to automate my Bind9 zone file updates in my private infrastructure using GitHub Actions with free runners, all secured through a Tailscale overlay network. This setup has significantly improved my workflow and provided me with both flexibility and security. In this post, I’ll share my approach and compare it with cloud DNS solutions like AWS Route53 and Google Cloud DNS.

The Setup: GitHub Actions + Tailscale + Bind9

What I’ve built

My solution uses GitHub Actions to automatically deploy DNS zone changes to my private Bind9 server whenever I push updates to my repository. Here’s how it works:

[Read More]

Automating SSL certificate issuance with Traefik, Let's Encrypt and Cloudflare

Where your laziness turns as positive and site reliability mindset

In today’s digital landscape, securing your web applications with HTTPS is not just a recommendation but a necessity. In this blog post, I’ll share how I setup automated SSL certificate issuance for my domains, including wildcard certificates, using Traefik, Let’s Encrypt, and Cloudflare.

The Setup

My goal was to automate the management of SSL certificates for various subdomains and wildcard domains like:

  • co.example.com
  • io.example.com
  • *.co.example.com
  • *.io.example.com

By combining Traefik (a modern HTTP reverse proxy), Let’s Encrypt (for free SSL certificates), and Cloudflare (for DNS management), I created a fully automated SSL certificate renewal system for my homelab setup.

[Read More]

Why real gearheads choose pre-owned?

The insider's guide to automotive passion

Listen up, fellow petrolheads and two-wheel warriors! Today, we’re diving deep into a topic that separates true automotive enthusiasts from casual buyers: why pre-owned vehicles aren’t just a compromise—they’re a lifestyle choice.

The Depreciation Myth Busted

Imagine walking into a dealership and watching $10,000 evaporate the moment you drive off the lot. New vehicles are financial black holes for enthusiasts. Pre-owned? That’s where the real magic happens. We’re talking about accessing dream machines at a fraction of the cost, with money left over for the upgrades that truly make a vehicle YOUR vehicle.

[Read More]
car  bike  vag  bmw  re  honda 

Getting Started with Puppet Automation - A Comprehensive Guide

The art of automating infrastructure configuration through puppet

Introduction

Puppet is a powerful configuration management tool that helps system administrators automate the provisioning and management of servers. This guide will walk you through setting up Puppet on Debian Bookworm (Debian 12) and explain how to use it effectively for infrastructure automation.

Prerequisites

  • Debian 12 (Bookworm) servers
  • Root or sudo access
  • Static IP addresses for all servers
  • Properly configured hostname and DNS settings
  • Minimum system requirements:
    • 2GB RAM
    • 2 CPU cores
    • 20GB disk space

Architecture Overview

Puppet follows a client-server architecture:

[Read More]

Zitadel as an OIDC provider for Tailscale

Identity Provider (IdP), Single-SignOn (SSO), Secure Network for Cloud

I think Tailscale is a great product. Despite this, I’ve been hesitant to use it for everything due to not being able to use it without using Big Tech as an identity provider. The options have historically been to use either Microsoft, GitHub (basically Microsoft), Google or Apple. None of these companies align with my personal values. One workaround is to use Headscale which is a self-hosted implementation of the Tailscale control server which removes the need to use an identity provider altogether.

[Read More]

Do it yourself Umrah in 2022

For those who plan to do Umrah by themselves

May the peace and blessings of Almighty Allah be upon you.

I did my second Umrah in 2022 alone (first one was in 2017 with my family), All praise goes to Allah! Here it is how I did it with help from lord of the Universe.

The Trigger

It was a fine Sunday (I believe, I forgot when I write this, but I am more or less sure because I meet my friends on weekends), I was in half sleep and laying on my bed and the Reddit notification (How I got my multi-entry Saudi eVisa as the UAE resident) was popped up on my phone. Yes! You heard it right. Reddit!

[Read More]

N Reasons your next job should be at a Technology Company

Growing, In demand and Innovative ideas

If your idea of the ideal workplace is one where people wear suits and speak in hushed voices, you should probably stop reading this right now. Unfortunately, you should probably also stop reading if you want a job that you can leave at 5 pm on the dot every evening. If your job is not affected during this covid-19 pandemic, thank to Technology.

The mecca of research, development and innovation

Perhaps the biggest reason to work in the technology is the work itself. If you’re interested in being on the principle of research, discovery, development and innovation, there is likely no better industry to be in.

[Read More]

Why targeted job search help better always?

Point blank on job hunting

Due to current pandemic all around the world, many people are losing their job. Do not panic, take deep breath and read further.

Do targeted clear shoot rather throwing spaghetti on wall and see what is sticking. Current situation may not assure everyone who lost job get one, but your improved job search will help you land on one.

Why skilled candidates often give importance to read full Job Descriptions? Often, poorly written job descriptions with similar qualities – team-player, problem-solver, strong communication skills, Bachelor’s Degree in many descriptions. Yet if you ask why a 4-year degree is a necessary qualification, you probably won’t get a performance-related response.

[Read More]

How do I work remotely?

Why does remote work is important for future

Covid-19 crisis put everyone in the world to move slow. This is realy important milestone in everyone’s journey to step back and realize what we did to the world. The ecosystem is changing, humans are inside the house and animals and birds are adapting to their environment. Amidst this crisis when all routines are changing and people are struggling to accommodate the changes in their work routine, it is important to keep empathy as the source of our actions and interactions.

[Read More]