Replace Caddy with cloudflared: expose Kubernetes without opening ports 80 and 443
Move the public entry point and identity checks to Cloudflare, then reach internal services through an outbound-only Tunnel.
Tag · 2 stories
#security
→
Remove an accidentally committed secret from Git—locally and remotely
Deleting the file is only the first step: rotate the credential, rewrite every reachable ref, verify the remote independently, and prevent the next …