DEV Community

david profile picture

david

Cloud Infrastructure Engineer · Azure Terraform blueprints for ISO 27001 & NIS2 environments · woitzik.dev

Location Cologne, Germany Joined Joined on  Personal website https://woitzik.dev github website

Work

System Engineer · Cloud Infrastructure Solutions

MikroTik vs Ubiquiti for Home Network 2026
dwoitzik profile

MikroTik vs Ubiquiti for Home Network 2026

#networking #mikrotik #review
Comments
12 min read
Best NAS for Home Backup 2026
dwoitzik profile

Best NAS for Home Backup 2026

#backup #hardware #homelab
Comments
12 min read
Best Mini PC for Homelab 2026
dwoitzik profile

Best Mini PC for Homelab 2026

#hardware #homelab #review
Comments
11 min read
Zero NetworkPolicies on Vault: How I Found the Biggest Gap in My Cluster and a GitOps Tracking Bug That Hid It
dwoitzik profile

Zero NetworkPolicies on Vault: How I Found the Biggest Gap in My Cluster and a GitOps Tracking Bug That Hid It

#kubernetes #security #gitops #vault
Comments
5 min read
Renovate OOMKilled Three Times: Why the Fix Wasn't More Memory
dwoitzik profile

Renovate OOMKilled Three Times: Why the Fix Wasn't More Memory

#kubernetes #homelab #debugging
Comments
3 min read
Discord Voice Choppy? It Was Bufferbloat — Fixed with 51 Lines of Terraform
dwoitzik profile

Discord Voice Choppy? It Was Bufferbloat — Fixed with 51 Lines of Terraform

#networking #homelab #debugging
Comments
4 min read
Kubernetes Health Probes: The Host Header Trap That Restarts Healthy Pods
dwoitzik profile

Kubernetes Health Probes: The Host Header Trap That Restarts Healthy Pods

#kubernetes #homelab #debugging
Comments
5 min read
Zero NetworkPolicies on the Database Namespace: The Gap That Let Any Pod Reach Authelia's Postgres
dwoitzik profile

Zero NetworkPolicies on the Database Namespace: The Gap That Let Any Pod Reach Authelia's Postgres

#kubernetes #homelab #security
Comments
3 min read
Migrating Atlantis to an LXC Accidentally Made It Fully Public
dwoitzik profile

Migrating Atlantis to an LXC Accidentally Made It Fully Public

#security #kubernetes #homelab
Comments
4 min read
Inside My Homelab: The Hardware Behind Every Article on This Blog
dwoitzik profile

Inside My Homelab: The Hardware Behind Every Article on This Blog

#homelab #hardware #networking
Comments
8 min read
310 Restarts in 21 Days: CNPG's Silent PodMonitor Failure and the Leader-Election Trap
dwoitzik profile

310 Restarts in 21 Days: CNPG's Silent PodMonitor Failure and the Leader-Election Trap

#kubernetes #homelab #debugging
Comments
4 min read
Beszel: Lightweight Host Monitoring That Doesn't Deserve Its Own Server
dwoitzik profile

Beszel: Lightweight Host Monitoring That Doesn't Deserve Its Own Server

#kubernetes #homelab #monitoring
Comments
4 min read
The .gitleaks-baseline.json That Suppressed Live Production Secrets
dwoitzik profile

The .gitleaks-baseline.json That Suppressed Live Production Secrets

#security #gitops #homelab
Comments
4 min read
Redis Killed Nextcloud and Nobody Noticed for Hours
dwoitzik profile
david

Redis Killed Nextcloud and Nobody Noticed for Hours

#kubernetes #redis #homelab
Comments
4 min read
The Disaster Recovery Runbook Nobody Had Actually Run
dwoitzik profile
david

The Disaster Recovery Runbook Nobody Had Actually Run

#backup #proxmox #homelab
Comments
4 min read
kubectl Said Everything Was Correct. Traefik 404'd Anyway.
dwoitzik profile

kubectl Said Everything Was Correct. Traefik 404'd Anyway.

#kubernetes #networking #homelab
Comments
5 min read
SLO Burn-Rate Alerting with Prometheus: Beyond Threshold Alerts
dwoitzik profile

SLO Burn-Rate Alerting with Prometheus: Beyond Threshold Alerts

#kubernetes #monitoring #homelab
Comments
5 min read
I Hardened Pod securityContext and Broke 9 Containers in Production
dwoitzik profile

I Hardened Pod securityContext and Broke 9 Containers in Production

#kubernetes #security #homelab
Comments 1
8 min read
Hardening Unattended Raspberry Pi Edge Nodes: Watchdog, fail2ban, nftables, and the Mistakes That Take Down DNS
dwoitzik profile

Hardening Unattended Raspberry Pi Edge Nodes: Watchdog, fail2ban, nftables, and the Mistakes That Take Down DNS

#homelab #security #networking
Comments
9 min read
IPv6 NAT66 Behind a FritzBox: The RouterOS 7 Bug That Broke WiFi Clients
dwoitzik profile

IPv6 NAT66 Behind a FritzBox: The RouterOS 7 Bug That Broke WiFi Clients

#mikrotik #networking #homelab
Comments
6 min read
My Firewall Had 77 Rules. Terraform Knew About 22 of Them.
dwoitzik profile

My Firewall Had 77 Rules. Terraform Knew About 22 of Them.

#mikrotik #terraform #security #networking
Comments
5 min read
Kyverno: Supply Chain Security as Admission Control on Kubernetes
dwoitzik profile

Kyverno: Supply Chain Security as Admission Control on Kubernetes

#kubernetes #security #homelab
Comments
5 min read
I Ran Gitleaks Against My Own Repo and Found 12 Real Secrets
dwoitzik profile

I Ran Gitleaks Against My Own Repo and Found 12 Real Secrets

#security #kubernetes #homelab
Comments
6 min read
ArgoCD Gotchas: Cache Staleness and the SharedResourceWarning Nobody Explains
dwoitzik profile

ArgoCD Gotchas: Cache Staleness and the SharedResourceWarning Nobody Explains

#kubernetes #gitops #homelab
Comments
5 min read
How a 1 GiB Memory Limit Took Down My Entire k3s Cluster
dwoitzik profile

How a 1 GiB Memory Limit Took Down My Entire k3s Cluster

#kubernetes #homelab #debugging
1
Comments
6 min read
External Secrets Operator + HashiCorp Vault: GitOps Secret Lifecycle in Kubernetes
dwoitzik profile

External Secrets Operator + HashiCorp Vault: GitOps Secret Lifecycle in Kubernetes

#kubernetes #security #homelab
1
Comments
6 min read
Full Observability on k3s: kube-prometheus-stack + Loki + Grafana OIDC
dwoitzik profile

Full Observability on k3s: kube-prometheus-stack + Loki + Grafana OIDC

#kubernetes #homelab #monitoring
Comments
6 min read
HA DNS for Homelab: Unbound + AdGuard Home + Keepalived on Raspberry Pi
dwoitzik profile

HA DNS for Homelab: Unbound + AdGuard Home + Keepalived on Raspberry Pi

#homelab #networking #dns
Comments
5 min read
k3s Backup Without the Complexity: Velero + Garage S3 on Longhorn
dwoitzik profile

k3s Backup Without the Complexity: Velero + Garage S3 on Longhorn

#kubernetes #homelab
Comments
5 min read
Enterprise Homelab: K3s, Authelia & Longhorn on Proxmox with Terraform
dwoitzik profile

Enterprise Homelab: K3s, Authelia & Longhorn on Proxmox with Terraform

#kubernetes #homelab #security
Comments
6 min read
Self-Hosted Tailscale Control Plane: Headscale on k3s with Authelia OIDC
dwoitzik profile

Self-Hosted Tailscale Control Plane: Headscale on k3s with Authelia OIDC

#kubernetes #homelab #security #networking
Comments
4 min read
Bare-Metal LoadBalancer on K3s: MetalLB + Traefik with ArgoCD
dwoitzik profile

Bare-Metal LoadBalancer on K3s: MetalLB + Traefik with ArgoCD

#kubernetes #homelab #networking
Comments
4 min read
GitOps on K3s: Managing a Complete Homelab with ArgoCD
dwoitzik profile

GitOps on K3s: Managing a Complete Homelab with ArgoCD

#kubernetes #gitops #homelab
Comments
4 min read
Deploying Gemma 4 26B on Proxmox: IaC Setup with Terraform, Ansible & AMD iGPU
dwoitzik profile

Deploying Gemma 4 26B on Proxmox: IaC Setup with Terraform, Ansible & AMD iGPU

#homelab #ai #terraform
Comments
4 min read
Automating MikroTik Bridge VLAN Filtering & Proxmox Trunks with Terraform
dwoitzik profile

Automating MikroTik Bridge VLAN Filtering & Proxmox Trunks with Terraform

#mikrotik #terraform #networking
Comments
4 min read
Automating MikroTik WireGuard VPN with Role-Based Access via Terraform
dwoitzik profile

Automating MikroTik WireGuard VPN with Role-Based Access via Terraform

#mikrotik #terraform #networking
Comments
3 min read
Implementing a Zero-Trust MikroTik Firewall with Terraform
dwoitzik profile

Implementing a Zero-Trust MikroTik Firewall with Terraform

#mikrotik #terraform #security #networking
Comments
3 min read
Hardening Azure Acmebot for ISO 27001 & NIS2 Compliance
dwoitzik profile

Hardening Azure Acmebot for ISO 27001 & NIS2 Compliance

#azure #terraform #security #compliance
Comments
4 min read
Zero-Trust RAG: Defeating the Shared Private Link Deadlock in Azure Terraform
dwoitzik profile

Zero-Trust RAG: Defeating the Shared Private Link Deadlock in Azure Terraform

#azure #terraform #ai
Comments
5 min read
NIS2 Article 21 in Azure: Implementing Network Security Controls with Terraform
dwoitzik profile

NIS2 Article 21 in Azure: Implementing Network Security Controls with Terraform

#azure #terraform #compliance #security
Comments
5 min read
Wildcard TLS Certificates on K3s with cert-manager and Cloudflare DNS
dwoitzik profile

Wildcard TLS Certificates on K3s with cert-manager and Cloudflare DNS

#kubernetes #homelab #security
Comments
4 min read
Architecting an Enterprise-Grade Homelab: My Ansible Master Playbook
dwoitzik profile

Architecting an Enterprise-Grade Homelab: My Ansible Master Playbook

#homelab #ansible
Comments
3 min read
Surviving Azure Policies: Zero-Trust Hub & Spoke with Terraform
dwoitzik profile

Surviving Azure Policies: Zero-Trust Hub & Spoke with Terraform

#azure #terraform #networking #security
Comments
4 min read
Breaking the Loop: Solving Circular Dependencies in Azure Firewall Routing
dwoitzik profile

Breaking the Loop: Solving Circular Dependencies in Azure Firewall Routing

#azure #terraform #networking
Comments
4 min read
loading...