Forward real IP to a NGINX behind a GCP Load Balancer

This article focuses in GCP Load Balancers, but can apply to other cloud providers / proxy servers. Introduction We worked in a project that required a nginx server to be able to whitelist some public ip addresses while denying all other connections. While this can be addressed using GCP firewall rules there were some other […]

Nginx and Letsencrypt with certbot in docker alpine

UPDATE 31/08/2020 As Nicolas ponted out in the comments, the alpine software repositories already include the certbot package and therefore can be updated directly with apk: apk add certbot certbot-nginx Original post In this lab we will learn how to install certbot using the official nginx:alpine docker image and use it to create a SSL […]

How to enable Brotli compression on Ingress-Nginx

Introduction Brotli is a compression method developed by Google and released in 2015. Depending on the scenario, brotli is capable of achieving a compression rate improvement of between 20 and 30% over gzip, which is the ingress-nginx default compression method. ingress-nginx configuration To create the ingress-nginx based on our provider, we can follow the documentation […]

How-to: Install cert-manager with HTTP validation in Kubernetes

Struggling with certificates can be a headache, but luckily for us in Kubernetes we can use cert-manager and let it manage everything to easily create any certificate that we need. In this how-to we will cover how to install cert-manager in our cluster as well as how to perform HTTP validation. We will also learn […]