KRZYSZTOF RUSSEK

Home Server Configuration Automation with Ansible Playbook

As part of my ongoing pursuit of enhancing my skills in Infrastructure as Code (IaC) and automation, I undertook a project to configure my personal home server using Ansible. This project allowed me to apply the principles of infrastructure automation and leverage Ansible’s powerful capabilities to streamline the setup and maintenance of my server.

The main objective of the project was to create an Ansible playbook, structured with roles, to perform essential configuration tasks on my home server. By employing IaC methodologies, I aimed to achieve consistent and reproducible server configurations while reducing manual intervention and potential errors.

The project encompassed the following key components and tasks:

Role Development:
I developed a custom Ansible role to orchestrate the essential configuration tasks required for securing and optimizing my home server. This involved utilizing Ansible’s modular and reusable role structure, which enhanced the playbook’s maintainability and scalability.

SSH Configuration:
Within the role, I implemented updates to the SSH configuration to enhance security. This involved modifying SSH settings to disallow root login, enforcing key-based authentication, and disabling password-based authentication.

Passwordless Sudo:
To enhance administrative capabilities, I incorporated tasks to enable passwordless sudo for the designated user account. This eliminated the need to enter a password when executing administrative commands, promoting convenience while maintaining security.

Suppressing Login Message:
I utilized Ansible to suppress the login message, ensuring a clean and uncluttered login experience on the server.

Package Management:
Using Ansible’s package management modules, I integrated tasks to update the system and install essential packages required for efficient server operation.

Lid Settings and Drive Mount:
Recognizing the unique requirements of my home server (old laptop), I created additional tasks within the playbook to handle lid settings and drive mount configurations. These tasks addressed specific needs associated with closing the lid of the server and managing drive mounts effectively.

Samba Server Configuration:
Furthermore, I developed a separate Ansible role to automate the installation and simple configuration of the Samba server. This role facilitated the sharing of files and resources across devices within my local network, promoting seamless access and collaboration.

Throughout the project, I adhered to Ansible’s best practices and employed Ansible-specific vocabulary and concepts, such as roles, playbooks, and tasks. By embracing infrastructure automation and leveraging Ansible’s capabilities, I successfully transformed the manual server configuration process into a streamlined, reproducible, and easily maintainable infrastructure.

This project not only deepened my understanding of Infrastructure as Code principles but also showcased my ability to design and implement automation solutions using Ansible, ultimately contributing to improved efficiency and security in managing my personal home server.

GitHub Repo

Library Management System Project

During my computer science studies, I undertook the project of developing a library management system application. The goal of the project was to create a tool that would allow users to easily keep track of their books, including which books they have read and which ones they want to read.

One of the biggest challenges I faced during this project was figuring out how to effectively store and retrieve data from a database. I ended up using a combination of C# and SQL to interact with an Azure SQL database, which allowed for secure and efficient storage of user data.

Another challenge was figuring out how to display the data in a way that was easy for the user to understand. I decided to use a data grid view, which allowed me to display all of the relevant information about a book in a clear and organized way. I also implemented a search feature, so users could easily find specific books they were looking for.

One of the things I enjoyed most about this project was being able to use my creativity to come up with new and innovative solutions to the problems I faced. For example, I developed a method for validating URLs that were used to add cover images for books. This method uses the Uri class to check if a URL is valid, and that the file exists and is reachable.

Overall, working on this project has helped me to gain a better understanding of how to work with databases and how to design user interfaces that are easy to use. I am proud of the final product and I am looking forward to continuing to improve and add new features to it.

In conclusion, this project has been a great learning experience for me and has allowed me to improve my skills in C#, SQL, and user interface design. I am excited to continue working on this project and to see how it evolves over time.

GitHub Repo

Traefik Reverse Proxy with Let’s Encrypt SSL

Project Overview

The core of the project involved setting up Traefik in a Docker environment. Traefik serves as an edge router, dynamically routing incoming requests to the appropriate backend services. Its configuration is highly dynamic and integrates seamlessly with containerized environments, making it an ideal choice for microservices architectures.

Key Challenges and Solutions

1. Dynamic Service Discovery: One challenge was ensuring Traefik could automatically discover and route to new services as they came online. By leveraging Traefik’s Docker provider, I was able to configure Traefik to listen for Docker events and automatically update its routing table as containers were started or stopped.
2. SSL Automation with Let’s Encrypt: Ensuring secure communication is critical, so I integrated Let’s Encrypt to automatically issue and renew SSL certificates. This was achieved through Traefik’s built-in ACME support, which simplifies the process of certificate management, making it almost hands-off.
3. Traefik Dashboard Security: Exposing the Traefik dashboard for monitoring while keeping it secure was another important aspect. I implemented basic authentication and restricted access to the dashboard, ensuring only authorized personnel could view it.
4. Network Configuration: Proper network configuration was essential to ensure isolated and secure communication between containers. I created a dedicated Docker network for Traefik and the services it managed, which provided an additional layer of security and simplified network management.

Conclusion

This project exemplified the practical application of DevOps principles, such as automation, monitoring, and security, in a real-world scenario. It was a valuable learning experience that solidified my understanding of how to effectively deploy and manage microservices within a Dockerized environment, ensuring scalability, security, and reliability.

GitHub Repo

GCP (GKE) – CI/CD Pipeline

In a pursuit to showcase my passion for DevOps and cloud-native development, I embarked on a self-driven project that encapsulated the essence of modern software delivery practices. I meticulously crafted a comprehensive CI/CD (Continuous Integration/Continuous Deployment) pipeline with a Flask web application as the centerpiece. This endeavor underscored my proficiency in DevOps, where precision and automation reign supreme.

Key milestones in this journey included the seamless automation of Docker image builds using Google Cloud Build and the secure, efficient storage of these images in the GCP Artifact Registry. But it didn’t stop there – I ventured further into Kubernetes territory, strategically architecting deployment and service YAML configurations. This allowed for the optimization of application management in a dynamic containerized environment.

One of the project’s standout achievements was the establishment of a continuous deployment pipeline. By seamlessly integrating a GitHub repository with Google Kubernetes Engine (GKE), I ensured that the code-to-deployment cycle was as smooth as it could be. To add finesse to this orchestration, I leveraged Cloud Build triggers, automating builds and deployments on code changes – a testament to my end-to-end CI/CD proficiency.

This project is a tangible testament to my technical prowess and a reflection of my dedication to staying at the forefront of cloud-native development and efficient deployment practices. It’s a testament to the capabilities I bring to the table in DevOps and cloud engineering, where precision, automation, and efficiency converge to drive innovation.

GitHub Repo