<feed xmlns="http://www.w3.org/2005/Atom"> <id>https://surajremanan.com/</id><title>Suraj Remanan</title><subtitle>I' m Suraj, a Senior DevOps Engineer, specializing in Kubernetes, Docker, Terraform, Configuration Management, CI/CD, Automation and Observability in both conventional and cloud-native environments. I've worked with a diverse set of global clients, including international banks, telecommunication services, retail businesses and financial services.</subtitle> <updated>2026-03-27T15:19:58+00:00</updated> <author> <name>Suraj Remanan</name> <uri>https://surajremanan.com/</uri> </author><link rel="self" type="application/atom+xml" href="https://surajremanan.com/feed.xml"/><link rel="alternate" type="text/html" hreflang="en" href="https://surajremanan.com/"/> <generator uri="https://jekyllrb.com/" version="4.4.1">Jekyll</generator> <rights> © 2026 Suraj Remanan </rights> <icon>/assets/img/favicons/favicon.ico</icon> <logo>/assets/img/favicons/favicon-96x96.png</logo> <entry><title>Migrating Ingress NGINX to Gateway API - Envoy Gateway with Cilium as the L2 Load Balancer</title><link href="https://surajremanan.com/posts/migrating-ingress-nginx-to-gateway-api/" rel="alternate" type="text/html" title="Migrating Ingress NGINX to Gateway API - Envoy Gateway with Cilium as the L2 Load Balancer" /><published>2026-03-26T00:59:00+00:00</published> <updated>2026-03-27T15:07:29+00:00</updated> <id>https://surajremanan.com/posts/migrating-ingress-nginx-to-gateway-api/</id> <content type="text/html" src="https://surajremanan.com/posts/migrating-ingress-nginx-to-gateway-api/" /> <author> <name>Suraj Remanan</name> </author> <category term="Self-Hosting" /> <summary>Like all things in technology (and in life), retirement is inevitable. While building my Talos Kubernetes cluster a few years back, choosing Ingress NGINX was a no-brainer. For someone like me who started their career as a Middleware administrator, the Ingress annotations never felt scary. In fact, I liked the granular control they offered for customizing my Ingress resources. Definitely a ques...</summary> </entry> <entry><title>GitOps on Kubernetes with FluxCD, SOPS, and Renovate</title><link href="https://surajremanan.com/posts/gitops-on-kubernetes-with-fluxcd-sops-and-renovate/" rel="alternate" type="text/html" title="GitOps on Kubernetes with FluxCD, SOPS, and Renovate" /><published>2025-09-30T01:59:00+01:00</published> <updated>2026-03-26T21:13:56+00:00</updated> <id>https://surajremanan.com/posts/gitops-on-kubernetes-with-fluxcd-sops-and-renovate/</id> <content type="text/html" src="https://surajremanan.com/posts/gitops-on-kubernetes-with-fluxcd-sops-and-renovate/" /> <author> <name>Suraj Remanan</name> </author> <category term="Self-Hosting" /> <summary>I have been running most of my self-hosted services on Kubernetes in my home-lab for a while now. For GitOps I have always preferred Flux because of its simplicity and cloud native approach. Flux integrates seamlessly with Renovate, Helm, Kustomize and SOPS. I did try ArgoCD, but the UI and the overall ClickOps approach wasn’t my cup of tea. My home lab uptime was reasonable until last month, w...</summary> </entry> <entry><title>Authentik with Kubernetes: Forward Authentication using Ingress Nginx</title><link href="https://surajremanan.com/posts/authentik-with-kubernetes-forward-auth/" rel="alternate" type="text/html" title="Authentik with Kubernetes: Forward Authentication using Ingress Nginx" /><published>2025-01-19T00:59:00+00:00</published> <updated>2025-01-20T16:12:12+00:00</updated> <id>https://surajremanan.com/posts/authentik-with-kubernetes-forward-auth/</id> <content type="text/html" src="https://surajremanan.com/posts/authentik-with-kubernetes-forward-auth/" /> <author> <name>Suraj Remanan</name> </author> <category term="Self-Hosting" /> <summary>Building my own home server and tinkering with it has always been a satisfying hobby, even if it means creating over-engineered solutions to problems that don’t really exist. Despite the occasional chaos, there’s something deeply rewarding about the process of self-hosting. As my user base grew from a single digit to a larger single digit, it became evident that centralized identity management ...</summary> </entry> <entry><title>Automating Talos Installation on Proxmox with Packer and Terraform, Integrating Cilium and Longhorn</title><link href="https://surajremanan.com/posts/automating-talos-installation-on-proxmox-with-packer-and-terraform/" rel="alternate" type="text/html" title="Automating Talos Installation on Proxmox with Packer and Terraform, Integrating Cilium and Longhorn" /><published>2024-07-07T01:59:00+01:00</published> <updated>2025-08-11T23:34:44+01:00</updated> <id>https://surajremanan.com/posts/automating-talos-installation-on-proxmox-with-packer-and-terraform/</id> <content type="text/html" src="https://surajremanan.com/posts/automating-talos-installation-on-proxmox-with-packer-and-terraform/" /> <author> <name>Suraj Remanan</name> </author> <category term="Self-Hosting" /> <summary>I recently migrated my home kubernetes cluster from K3s to Talos. While K3s was an excellent lightweight option for my home server, it required installing, hardening and maintaining a base operating system (Debian, in my case). As someone who frequently builds and destroys Kubernetes clusters - both intentionally and accidentally - my priority has always been to restore my services with minimal...</summary> </entry> <entry><title>Beginner's Guide to Self-Hosting using Docker, WireGuard and DuckDNS</title><link href="https://surajremanan.com/posts/beginners-guide-to-self-hosting/" rel="alternate" type="text/html" title="Beginner&amp;apos;s Guide to Self-Hosting using Docker, WireGuard and DuckDNS" /><published>2024-02-20T00:59:00+00:00</published> <updated>2024-03-15T00:06:15+00:00</updated> <id>https://surajremanan.com/posts/beginners-guide-to-self-hosting/</id> <content type="text/html" src="https://surajremanan.com/posts/beginners-guide-to-self-hosting/" /> <author> <name>Suraj Remanan</name> </author> <category term="Self-Hosting" /> <summary>Self-Hosting is becoming increasingly popular these days. It is essentially the practice of locally hosting and managing services, putting you in full control of your data. A few years back, I wrote a guide on self-hosting Nextcloud and exposing it to the internet using a simple SSH tunnel. This is an updated version of the same guide, using a WireGuard tunnel instead of SSH. We will be hosting...</summary> </entry> </feed>
