Level Sony M.

Automating Jenkins Deployment on AWS with Terraform, EC2, Docker, and Cloudflare Tunnel

Thu, 19 Mar 2026 00:00:00 +0000

Note: The goal of this project goes beyond simply deploying Jenkins on AWS. I wanted to lay the foundation for an automated DevOps infrastructure — one capable of integrating the essential tools across an application’s entire lifecycle, from development to production. My intent is to build a reproducible, maintainable, and scalable technical base that automates infrastructure provisioning, service deployment, and eventually CI/CD orchestration. This project is also a concrete learning opportunity: experiment, test, make mistakes, correct them, and grow through real-world DevOps practice.

Building a More Reliable Terraform Installer with Bash

Tue, 17 Mar 2026 00:00:00 +0000

What is Terraform?

Terraform is an open-source Infrastructure as Code (IaC) tool developed by HashiCorp. It lets you define, provision, and manage infrastructure — servers, networks, databases, cloud services — using declarative configuration files written in HCL (HashiCorp Configuration Language).

The core idea is simple: describe the desired state of your infrastructure in code, and let Terraform compute and apply the changes needed to reach that state.

Typical use cases

Cloud provisioning: create VMs, VPCs, load balancers, DNS records on AWS/GCP/Azure
Self-hosting: deploy servers on OVH, Hetzner, or Scaleway from code
Kubernetes management: create EKS, GKE, AKS clusters and configure namespaces
Security: manage IAM roles, access policies, and TLS certificates in an audited way
Ephemeral environments: spin up and tear down test environments automatically

In a DevOps / Systems Administration curriculum, mastering Terraform is a deliverable.

Readme-runner: Launch Any Project in One Command, Powered by GitHub Copilot CLI

Sun, 15 Feb 2026 00:00:00 +0000

Submission for the GitHub Copilot CLI Challenge hosted by DEV Community × GitHub.

DEV Community · Jess Lee

Join the GitHub Copilot CLI Challenge! Win GitHub Universe Tickets, Copilot Pro+ Subscriptions and 1,000 USD in Cash

Rethinking Web Browsing with True Sandboxing

Fri, 21 Feb 2025 00:00:00 +0000

Today, we spend our lives on the web. We click on links without thinking twice, open suspicious attachments, visit unfamiliar sites. Yet each time, we expose our computer, files, passwords, and entire digital life more or less directly.

What if the simplest solution was also the most radical: never let the web truly touch our machine?

The Sandbox: An Old Idea That Remains Highly Relevant

The principle has existed for a long time. Modern browsers already isolate each tab in its own process with very limited rights. This is called native sandboxing.

How to Use Let's Encrypt Certificates with Keycloak

Thu, 23 Jan 2025 00:00:00 +0000

Keycloak is an open-source Identity and Access Management tool developed by Red Hat. It provides single sign-on (SSO), user and role management, and supports standard protocols such as OpenID Connect, OAuth 2.0, and SAML. Red Hat

An interesting fact: Red Hat itself uses Keycloak as the basis for Red Hat SSO to secure its internal applications, which is a solid vote of confidence in the project.

This internal adoption highlights Keycloak’s reliability and robustness for identity and access management.

Dockdock-Go – Security Gatekeeper for Harbor Registries

Sun, 15 Dec 2024 00:00:00 +0000

This article documents a Master 1 student project completed in 2023–2024, written from the perspective of December 2024. It provides an honest technical retrospective including architecture decisions, implementation challenges, technical debt, and lessons learned.

Written in December 2024

Team: 4 students (1× Rust backend, 2× infra/Kubernetes, 1× frontend/docs (me) )

Effective Duration: ≈9 months shared with courses and other projects

Current Status: Functional Proof-of-Concept in local demo, not production-maintained

1. The Real Problem We Wanted to Solve

In most organizations using Harbor as a private registry:

How to Install Oh My Zsh: My Favorite Shell

Fri, 13 Dec 2024 00:00:00 +0000

We’re going to see how to enhance the terminal’s features and give it a much more user-friendly look. The purpose of this article, like the rest, is personal to me as I often find myself forgetting certain practices, hence the idea of noting down and preserving my learnings.

Introduction

As a passionate Linux user, one of the first configurations I perform on every new PC or Linux system is installing Oh My Zsh. This interactive and customizable shell has transformed my command-line experience, and I’m going to explain why I love it and how you can install it easily.

Hosting Your Apps from a PC or VPS: Coolify & Cloudflare Tunnel

Fri, 15 Mar 2024 00:00:00 +0000

In my previous article, I described how Coolify structured my VPS deployments. Today, we’re pushing the idea further: can we turn any machine — a laptop, a desktop PC, or a VPS — into a hosting platform accessible from anywhere on the Internet?

The answer is yes. And the Coolify + Cloudflare Tunnel combination is what makes it possible, even in notoriously tricky network setups.

The Hidden Trap: CGNAT

Before we start, there’s a point that most self-hosting guides quietly skip over: CGNAT (Carrier-Grade NAT).

From VPS Chaos to Deployment Zen: My Coolify Love Story

Sat, 24 Feb 2024 00:00:00 +0000

I’ve long used my VPS like many developers: a few manually launched Docker containers, a cobbled-together reverse proxy, scattered configuration files, and manual redeployments with each new version. It was this context, mixed with the desire to professionalize my deployments without falling into the complexity of Kubernetes, that led me to discover Coolify.

I had just integrated Cloudflare Tunnel into my workflow to properly expose services hosted at home or on a small server, without opening ports all over the place. This approach worked well, but also revealed all the limitations of my stack: each new app added to the VPS required reworking the reverse proxy configuration, managing SSL certificates, thinking about database backups, and keeping track of environment variables somewhere. After a few projects, the whole thing became fragile, difficult to document, and even harder to hand off to someone else.

Goodbye "It Works on My Machine!" - Docker

Fri, 15 Dec 2023 00:00:00 +0000

“It works on my machine!”

You’ve all heard this phrase (or said it yourself). I said it at least a dozen times during my high school projects. And my teachers too, when they tried to run my code on their computers…

This week, we started talking about development environments, dependencies, virtualization… and then, the teacher said: “Today, we’re going to look at Docker. It’s going to solve 90% of your ‘it doesn’t work on my computer’ problems.”

🐙 Git Memo: All Essential Commands

Thu, 23 Mar 2023 00:00:00 +0000

A list of Git commands — feel free to come back to it as often as you need.

Git Overview

Git is a free and open source distributed version control system designed to handle everything from small to very large projects with speed and efficiency. Here’s a summary of the most useful commands, organized by category.

Tell Git Who You Are

First things first, set up your identity so Git knows who is making commits.

Securing a Debian Server – My Configuration

Thu, 23 Mar 2023 00:00:00 +0000

Why do this from the start?

As soon as a server (even an old recycled laptop) exposes services (website, API, Git, Nextcloud, dashboard, reverse proxy…), it becomes a target.

My Quick Setup

I already have Debian 12 Bookworm installed on an old recycled Toshiba laptop (dead battery, screen off, headless).

Hardware Old Toshiba Satellite → low power consumption, quiet once the fan calms down, ideal for getting started.

What I Want to Achieve

Fixed IP → to always know where the server is
Hardened SSH → only remote access method, ultra protected
Firewall → blocks everything we haven’t explicitly allowed
Fail2Ban → punishes bots trying thousands of passwords
Auto updates → fixes vulnerabilities without me thinking about it

1. Fixed IP via DHCP Reservation

Why?

If the IP changes with every reboot (normal DHCP behavior), you have to check each time what IP your server got. It’s annoying and error-prone. With a fixed IP (reserved by the router), you always connect to the same place: ssh lab.