L

Let's Encrypt

Français 🇫🇷

https://blog.devopsnotes.org

DevopsNotes est une application Full-Stack "Cloud-Native" conçue pour illustrer les standards modernes du DevOps et de la SecOps. Bien plus qu'un simple blog, ce projet est un laboratoire d'architecture évolutive et automatisée.

Points clés :

Architecture Stateless : Découplage total des médias via Cloudflare R2 (S3-compatible) et base de données managée MongoDB Atlas.

Pipeline CI/CD Robuste : Automatisation complète du build et du déploiement sur VPS via GitLab CI/CD et Docker.

Performance & Sécurité : Score Lighthouse avoisinant les 100/100, protection par Cloudflare (SSL Full Strict) et gestion d'emails transactionnels avec Resend.

Stack Technique : Node.js (TypeScript), React, Nginx, Docker Compose.

Un projet conçu pour démontrer la maîtrise du cycle de vie logiciel (SDLC), de la conteneurisation à l'optimisation des performances CDN.

English 🇬🇧

https://blog.devopsnotes.org

DevopsNotes is a Cloud-Native Full-Stack application showcasing advanced DevOps and SecOps workflows. This project serves as a real-world demonstration of scalable, automated, and high-performance architecture.

Key Highlights:

Stateless Infrastructure: Fully decoupled media storage using Cloudflare R2 (S3-compatible) and MongoDB Atlas for managed persistence.

Automated CI/CD: End-to-end build and deployment pipeline to VPS powered by GitLab CI and Docker orchestration.

Performance & Security: About 100/100 Lighthouse score, Cloudflare-hardened security (Full Strict SSL), and automated emails via Resend.

Core Stack: Node.js (TypeScript), React, Nginx, Docker Compose.

This project highlights expertise in software delivery (SDLC), containerization, and Edge-computing optimization for modern web environments.

Virtual hosting at your... command line!

Traefik deployment on Kubernetes with TLS via Let's Encrypt and DNS challenge via OVH.

Traefik configuration via docker-compose for the ingress at the https://equilibrator.weizmann.ac.il domain.

Default traefik configuration with SSL (Let's Encrypt) for docker compose file

Azure Function for automating ACME/Let's Encrypt TLS certificate generation and renewal. The certificates are validated using Azure DNS and published to Azure Key Vault.

Proxy with SSL certificates from Let's Encrypt https://hub.docker.com/r/palliis/ssl-proxy-certbot

An Ansible role that handles creating updating and distributing SSL certificates.