Posts
jjpk.me
The hassles of proxying HTTPS transparently

Proxying HTTPS transparently in a network has always been a bit of a pain. Intercepting such traffic and rerouting it tends to go against the initial goals behind TLS. Let's have a look at those issues and introduce tls2httpconnect, a little tool to work around them.

Stilgar: a lightweight, no-fuss, drop-in replacement for Rudderstack

Introducing Stilgar, a self-hosted user analytics solution inspired by Rudderstack, minus the hefty, hair-pulling Cloud overhead.

Web applications behind nginx: signing trusted headers with HMACs

A look at how the set-misc nginx module can be used to sign request headers before forwarding to upstream applications.

Google Compute Engine: handing GCP maintenance events without Live Migration

Live Migration is GCP's approach to moving around VMs when maintenance needs to take place on the underlying hosts. When using GPUs or Confidential Computing however, such a migration is impossible and VMs need to be terminated. This article briefly introduces workarounds to handle those downtimes smoothly.

Homemade system provisioning and dotfiles management: SetMeUp!

A quick article to introduce my latest toy: SetMeUp! It is an Ansible-based provisioning tool which makes it easy (for me) to set up systems when I don't have much more than an Internet connection.

Combining LaTeX, Jinja2 and Babel for a multi-version, multi-language Curriculum Vitae

Keeping a CV up to date when you have to deal with several variants and translations can be a little repetitive. Here's a way to simplify the process using templates and Babel for i18n!

Continuous integration and deployment using Gitlab, Webhook and Ansible

For this personal website, I am using Gitlab, Webhook and Ansible to automate everything between my git pushes and the production update. This is a small article which describes the approach.