Posts

In today’s digital landscape, securing your web applications with HTTPS is not just a recommendation but a necessity. In this blog post, I’ll share how I setup automated SSL certificate issuance for my domains, including wildcard certificates, using Traefik, Let’s Encrypt, and Cloudflare.

The Setup

My goal was to automate the management of SSL certificates for various subdomains and wildcard domains like:

• co.example.com
• io.example.com
• *.co.example.com
• *.io.example.com

By combining Traefik (a modern HTTP reverse proxy), Let’s Encrypt (for free SSL certificates), and Cloudflare (for DNS management), I created a fully automated SSL certificate renewal system for my homelab setup.

Listen up, fellow petrolheads and two-wheel warriors! Today, we’re diving deep into a topic that separates true automotive enthusiasts from casual buyers: why pre-owned vehicles aren’t just a compromise—they’re a lifestyle choice.

The Depreciation Myth Busted

Imagine walking into a dealership and watching $10,000 evaporate the moment you drive off the lot. New vehicles are financial black holes for enthusiasts. Pre-owned? That’s where the real magic happens. We’re talking about accessing dream machines at a fraction of the cost, with money left over for the upgrades that truly make a vehicle YOUR vehicle.

Introduction

Puppet is a powerful configuration management tool that helps system administrators automate the provisioning and management of servers. This guide will walk you through setting up Puppet on Debian Bookworm (Debian 12) and explain how to use it effectively for infrastructure automation.

Prerequisites

• Debian 12 (Bookworm) servers
• Root or sudo access
• Static IP addresses for all servers
• Properly configured hostname and DNS settings
• Minimum system requirements:
  • 2GB RAM
  • 2 CPU cores
  • 20GB disk space

Architecture Overview

Puppet follows a client-server architecture:

I think Tailscale is a great product. Despite this, I’ve been hesitant to use it for everything due to not being able to use it without using Big Tech as an identity provider. The options have historically been to use either Microsoft, GitHub (basically Microsoft), Google or Apple. None of these companies align with my personal values. One workaround is to use Headscale which is a self-hosted implementation of the Tailscale control server which removes the need to use an identity provider altogether.

May the peace and blessings of Almighty Allah be upon you.

I did my second Umrah in 2022 alone (first one was in 2017 with my family), All praise goes to Allah! Here it is how I did it with help from lord of the Universe.

The Trigger

It was a fine Sunday (I believe, I forgot when I write this, but I am more or less sure because I meet my friends on weekends), I was in half sleep and laying on my bed and the Reddit notification (How I got my multi-entry Saudi eVisa as the UAE resident) was popped up on my phone. Yes! You heard it right. Reddit!