Alek's Blog
Go programming language logo

cert-manager-webhook-libdns: One Webhook, Many DNS Providers

How cert-manager-webhook-libdns enables DNS-01 across many DNS providers via libdns, with practical operational improvements, compatibility automation, and a quick Kubernetes deployment path.

cert-manager-webhook-libdns: One Webhook, Many DNS Providers
Kubernetes logo

ESO (External Secrets Operator) Breaking Change in 0.10.0

ESO (External Secrets Operator) breaking change in 0.10.0: "secret does not contain needed label... Update secret label to use it with webhook".

ESO (External Secrets Operator) Breaking Change in 0.10.0
Blog post cover image

How to Run Tor Arti as an HTTP Proxy or Behind a g3 HTTP Proxy

How to run Tor Arti as an HTTP proxy or behind a g3 HTTP proxy.

How to Run Tor Arti as an HTTP Proxy or Behind a g3 HTTP Proxy
Sequence diagram: tls-proxy-tunnel relaying an HTTP CONNECT through an upstream proxy to open a tunnel, after which the client completes a TLS handshake directly with the destination server

tls-proxy-tunnel: Transparent TLS Tunnelling Through Corporate HTTP Proxies

How tls-proxy-tunnel (tpt) uses SNI peeking to tunnel TLS connections through corporate HTTP CONNECT proxies without ever terminating TLS — layer 4, zero config on the client side.

tls-proxy-tunnel: Transparent TLS Tunnelling Through Corporate HTTP Proxies
Blog post cover image

Simple autotls setup with ferron

This article describes simple autotls setup with ferron webserver

Simple autotls setup with ferron
Blog post cover image

How to automate TLSA update

This article describes how to automatically update the TLSA record for DANE

How to automate TLSA update