RSSAmplifier

Blog

Francis Augusto Medeiros-Logeay

IT Engineer with background in IT-Law, running enthusiast

francisaugusto.comRSS feed ↗10 posts

Latest posts

Why I won't migrate from Postfix+Dovecot to Stalwart

TL;DR and Disclaimer Stalwart is excellent, but it replaces Dovecot’s mail replication with cluster infrastructure I don’t want to run for a personal setup - so I’m staying on Dovecot + Wormhole. I feel Stalwart is the best option out there for those starting with a new mail server or who want to migrate to a cluster-based mail server. But for those who have been running Dovecot for a while, it…

Platform Single Sign-on Simplified Setup

Platform Single Sign-on: Simplified setup Let’s discuss a bit about some of the forms to deploy Platform Single Sign-on . We at the University of Oslo developed an open-sourced based Platform Single Sign-on Extension. You can find it here: https://github.com/unioslo/keycloak-psso-extension But as we started to use this extension, we ended up with a few questions: how do we use biometrics for…

Platform Single Sign-on DIY

What? This is a post about how to implement Platform Single Sign-on , Apple’s framework for simplifying logins from macOS devices. It builds on the SSO Extensions , but it takes it a bit further. It is also a collection of thoughts about Platform Single Sign-on and the challenges when designing it. Why, you ask? The reason is pretty simple: it is almost impossible to find good documentation where…

How to use Keycloak as an IdP for Entra ID via ADFS

What? This is a post about how to use Keycloak (or another SAML-supporting IdP) as an IdP for Entra ID via ADFS. Or, putting it in more technically correct terms, how to use Keycloak as an IdP for an ADFS instance that is federated with Entra ID. I decided to write this after suffering a lot to find good documentation and/or reports on how this should be done. Disclaimers I think it is fair to say…

E-mail authentication, quo vadis? (Or where is OIDC/Oauth2 for everyone?)

There’s something rotten in the world of e-mail. You see, if we come back twenty-five years ago, e-mail was handled in-house by companies or by your local ISP. People did have their hotmail or yahoo accounts, but you’d always get one from your ISP. Then companies like Google started to host e-mail for companies, but it was still possible to run your own e-mail server. Heck, it is still is. But a…

The complexities of running a Fediverse instance on clusters

Disclaimer I am no expert on Kubernetes and neither have I a deeper understand of all the components of the different Fediverse servers. What I am writing here is a result of my own impressions, which may be incorrect or misleading. Introduction I started to run Fediverse instances in november 2022. Our Mastodon instance, Babb.no has been running since. Since then, I also started to run a Pixelfed…

Installing Matrix on Kubernetes - what they don't tell you

Disclaimer I am no expert on Matrix or on Kubernetes. I just happen to use Kubernetes a bit, and got recently hooked on Matrix. This is not a complete manual or guide on how to install Matrix on kubernetes. It is rather an introduction on the challenges you might experience and a heads up so you don’t make the same mistakes I made. Why are you writing this? I wanted to install Matrix. I have…

Babb.no - The Fediverse and open social networks

Introduction TL;DR: About babb.no . I really want to stop using social network in this age of algorithms, monetization of personal data and AI. I like when I am in control of my own data, where I can migrate my data wherever I want. Last year, I got to know about Mastodon , a microblogging platform that gained fame just after Elon Musk bought Twitter. I decided that Mastodon was something for me,…

Running a Mastodon instance on kubernetes

Introduction I heard about Mastodon when it got widely mentioned as a result of Elon Musk’s Twitter acquisition. Its goal really got me interested, and I fell in love about it from day one. I decided to run my own instance, Mastodon.babb.be , and it has been a joy to use it and to maintain it. I want users to come, but when I heard other stories of servers having to quickly scale up in order to…

Booting a Raspberry Pi 400 from FreeNAS with Unifi

Introduction I am a hopeless collector of Raspberry Pi’s: they come out, I try to grab them. And when I saw the Raspberry Pi 400, being the nostalgic ex-Amiga user that I am, I knew I just had to buy one. My little daughter sometimes asks me to boot the Pi with RetroPie, so that she can play Road Warrior, an old Nintendo game that I used to play when I was a kid. Swapping those SD cards is…