Home » Archives for Emmanouil Gkatziouras

Author Archives: Emmanouil Gkatziouras

I am a versatile software engineer with experience in a wide variety of applications/services. I am enthusiastic about new projects, embracing new technologies, and getting to know people in the field of software.

Add mTLS to Nginx

Previously we added ssl to an Nginx server. On this example we shall enhance our security by adding mTLS to Nginx. Apart from encrypting the traffic between client and server, SSL is also a way for the client to make sure that the server connecting to, is a trusted source. On the other hand mTLS is a way for the ...

Read More »

Add SSL to Nginx

Nginx is a versatile tool that has many usages, can be used as a reverse proxy, load balancer etc. A common usage is to handle the SSL traffic in front of applications. Thus instead of handling SSL from your application layer you can have nginx in front. In our example we shall generate the certificates and make Nginx do the ...

Read More »

Using Minikube on osx

Docker compose is making for me wonders when it comes to run some simple components on my workstation. Spawning and simulating an infrastructure locally is fast and takes no time. Also it is lightweight. However most teams nowadays use Kubernetes.If you want to simulate a Kubernetes environment locally the tool to use is Minikube. With Minikube you need to have ...

Read More »

Kubernetes and Secrets

This is going to be a small post since it has to deal with kubernetes and secrets. Yet it is a very useful once since adding secrets is so common yet so easy to forget (guilty as charged). So we will cover username and password, key/values, file uploading, secrets. Upload username and password using command line. kubectl create secret generic ...

Read More »

Add ssl to Mysql and Postgresql

Adding ssl support to a relational database like mysql or postgresql is a standard task. First we need to have our certificates ready. We can either use mysql workbench which has a nice wizard. Or we can create them using openssl. In the end we will end up with three files ssl-ca=ca.pem ssl-cert=server-cert.pem ssl-key=server-key.pem We can also check that everything is ok ...

Read More »

Systemd and Upstart Services

Most linux servers that I use are either Debian based or RedHat based. A common task is adding daemon services. Suppose that we want to start a tomcat application on startup First we shall install tomcat mkdir /opt/tomcat groupadd tomcat useradd -s /bin/false -g tomcat -d /opt/tomcat tomcat wget http://apache.cc.uoc.gr/tomcat/tomcat-8/v8.0.33/bin/apache-tomcat-8.0.33.tar.gz tar xvf apache-tomcat-8.0.33.tar.gz mv apache-tomcat-8.0.33/* /opt/tomcat rm -r apache-tomcat-8.0.33 apache-tomcat-8.0.33.tar.gz cd ...

Read More »