Tag Archives: AWS

Arch Linux: a DNS Mystery – VPN, systemd-resolved, and Unbound
0 (0)

21 May 2026

I’d been wrestling with the problem of accessing AWS EKS from the office for a long time – finally lost my patience and figured it out 🙂 Here’s the problem: there’s an AWS EKS cluster with both Public and Private endpoints for the API. Working from my office laptop, sometimes requests to it go through… Read More: Arch Linux: a DNS Mystery – VPN, systemd-resolved, and Unbound0… »

Loading

AWS: Setting up Okta SSO with AWS IAM Identity Center
0 (0)

31 March 2026

In the previous part of the Okta series we set up SSO for Grafana (see Okta: configuring Grafana SSO with OIDC and Role mapping) – now for a more interesting task: configuring SSO for AWS, with not just login but also user provisioning. Okta has a ready-made AWS IAM Identity Center App that lets you… Read More: AWS: Setting up Okta SSO with AWS IAM Identity Center0… »

Loading

VictoriaMetrics: Basic Monitoring for AWS, Linux, NGINX, and PHP
5 (1)

28 March 2026

The RTFM migration from DigitalOcean to AWS went smoothly, and I’m gradually settling in. New infrastructure, everything new – so for the first while I want to keep a close eye on the server and blog state, which means setting up basic monitoring for WordPress: NGINX, PHP-FPM, the database, and the infrastructure running it all.… Read More: VictoriaMetrics: Basic Monitoring for AWS, Linux, NGINX, and PHP5 (1) »

Loading

AWS: Amazon Linux – Sending Email with Postfix via Gmail
1 (1)

16 March 2026

Continuing the setup of the new RTFM server. The next step is configuring the ability to send mail from EC2, since both important messages for the root user and RTFM itself need to send emails. I was thinking of using AWS Simple Email Service – purely to refresh my memory on how to work with… Read More: AWS: Amazon Linux – Sending Email with Postfix via Gmail1… »

Loading

AWS: Increasing the EBS volume size on an EC2 instance running Linux
0 (0)

16 March 2026

Every time I need to do this, I have to look it up, even though I’ve written about it somewhere before – but it was a long time ago: manually increasing the disk size on an AWS EC2. You get used to Kubernetes, where it’s enough to just change a value in a PersistentVolumeClaim, and… Read More: AWS: Increasing the EBS volume size on an EC2 instance… »

Loading

AWS: ALB and Cloudflare – Configuring mTLS and AWS Security Rules
0 (0)

16 March 2026

While preparing the infrastructure for migrating RTFM from the DigitalOcean server to AWS (see AWS: basic infrastructure setup for WordPress) I decided to also try AWS ALB mutual authentication (for some reason I thought this feature launched at the last re:Invent, at the end of 2024, but it’s actually been around since late 2023 –… Read More: AWS: ALB and Cloudflare – Configuring mTLS and AWS Security… »

Loading

AWS: Self-Managed EC2 NAT Gateway vs AWS Managed NAT
0 (0)

15 March 2026

I looked at the costs for the infrastructure described in the previous post AWS: basic infrastructure setup for WordPress, and let out a heavy sigh: One NAT Gateway is a quarter of my AWS spend, and even with AWS Credits I can’t help feeling a bit stingy about it. There’s an option to remove the… Read More: AWS: Self-Managed EC2 NAT Gateway vs AWS Managed NAT0 (0) »

Loading

AWS: Basic Infrastructure Setup for WordPress
0 (0)

15 March 2026

It’s time for a major server upgrade for RTFM, which I usually do by migrating to a new server – because I also do various other upgrades along the way, like upgrading the PHP version or even migrating to a different cloud. This time I’m planning to move from DigitalOcean, where RTFM has been hosted… Read More: AWS: Basic Infrastructure Setup for WordPress0 (0) »

Loading

FreeBSD: Home NAS, part 9 – data backup to AWS S3 and Google Drive with rclone
5 (1)

22 January 2026

In the previous post of the Home NAS on FreeBSD setup series, we got acquainted with restic – a utility for working with backups that supports encryption, snapshots, and change history; see FreeBSD: Home NAS, part 8 – backup of NFS and Samba data with restic. However, in addition to archival data in S3, I… Read More: FreeBSD: Home NAS, part 9 – data backup to AWS… »

Loading

VictoriaMetrics: Recording rules for AWS Load Balancer logs
0 (0)

6 December 2025

Continuing the topic of AWS Load Balancer logs: in the previous post, Golang: recording AWS Load Balancer logs to VictoriaLogs, we collected logs using our own logs collector in Golang. Now we need to get something useful out of these logs. Previously, when I had Loki on my project, we used its RecordingRules to create… Read More: VictoriaMetrics: Recording rules for AWS Load Balancer logs0 (0) »

Loading