Skip to content

🚀 Welcome to Frikiteam Docs 🚀

Welcome to Frikiteam's technical documentation! I am a professional passionate about technology who shares knowledge and experiences in the world of infrastructure, cloud, and automation.

🎯 My Idea

My idea is to provide practical, clear, and useful documentation about the technologies I use daily. I want to share not only theory but also real experiences, tricks, and best practices I've learned in the technological "trenches."

🆕 Latest Updates

📅 October 11, 2026

🧭 Five new guides from the roadmap (ES/EN)

  • Self-hosted DNS: resolver and authoritative server — Unbound as the resolver, BIND or PowerDNS for the internal zone, split-horizon, why home.arpa or a subdomain you own and not .local, and transfers with TSIG. The parent page that DNSSEC and reverse zones were missing.
  • Kubernetes at home: k3s, Ingress and cert-manager — from an empty cluster to a service with valid HTTPS: ServiceLB or MetalLB, Traefik or ingress-nginx, and HTTP-01 versus DNS-01.
  • eBPF and Cilium: networking, security and observability — Cilium as the CNI and kube-proxy replacement, L7 and FQDN policies, and Hubble to see which packet a rule drops.
  • Kubernetes backup: Velero and etcd snapshots — what to back up and what already lives in Git, CSI snapshots versus file-level backup with Kopia, hooks for databases and the restore test.
  • Linux forensics: evidence, memory and timeline — the follow-up to incident response: order of volatility, chain of custody, live triage and dumping a VM's memory from Proxmox.
  • MTU at 25G, 40G and 100G: new section in MTU/MSS values.

🌍 Seventeen English pages that were still in Spanish

The English version of 17 pages had a translated front matter and a Spanish body: most of the basic networking section, seven cybersecurity pages, model optimization and the observability stack. Four also had a meaningless title taken from a code comment. They are now translated, and check_sync.py --strict fails if it happens again. Errors present in both languages were fixed along the way: the IPv6 PTR reverse name had 29 nibbles instead of 32, the IP ranges table attributed the private ranges to each regional registry, and TEST-NET cited the wrong RFC.

💾 Local storage: ZFS and LVM (ES/EN)

  • New guide: ZFS and LVM on local disks — the disk of a Proxmox node explained from the ground up. PVs, VGs and LVs, thin pools and the risk of overcommitting them, snapshots and their limits; pools, vdevs and datasets, zfs send/receive for replication, scrubs and why the ARC seems to eat the RAM. With a table to choose between the two and mdadm as a third way. Proxmox, PBS and the 3-2-1 strategy took them for granted and no page explained them.

📅 October 10, 2026

📚 Sixteen guides that fit on one screen (ES/EN)

Sixteen pages that sat between 38 and 59 lines under the title of a full guide. They now follow the site's reference structure (problem, technical sections, troubleshooting with a symptom → cause → fix table, best practices), warn wherever something depends on the version, and link to neighbouring pages instead of repeating them. They were written from knowledge, not executed in a lab: the points to verify are recorded in TODO.md.

  • Backups: 3-2-1 strategy, Proxmox Backup Server and Restic and Borg — datastores, prune and verification, encryption and remote repositories, and why a backup nobody has restored is not a backup.
  • Storage: NetApp ONTAP (previously without a single code block), Pure Storage FlashArray and Ceph tuning — SVMs, exports and snapshots; volumes, hosts and protection groups; PGs, BlueStore and OSD memory with the rule of measuring before touching.
  • Linux: systemd, SSH security and WireGuard — unit drop-ins and sandboxing, SSH keys and certificates with Match, and the peer configuration with AllowedIPs that is almost always the cause of "it connects but no traffic flows".
  • Networking: VyOS as a vRouter, now on par with its siblings in the series, and network benchmarks — methodology with iperf3, MTU and offloads; a table of figures that came from no measurement was removed.
  • Databases: Redis and PostgreSQL — RDB/AOF persistence and memory policies, pg_hba.conf, roles and parameters that require a restart, both deployed with Quadlet.
  • Identity and monitoring: Keycloak and Uptime Kuma — realms and OIDC clients behind a reverse proxy; monitors, notifications and backup of the data volume.
  • Programming: FastAPI in production — multi-stage image, uvicorn workers, health endpoint for probes, Traefik in front and a GitHub Actions pipeline.

🧰 Metadata in the English tree

All 146 EN twins now declare the same description, keywords, prerequisites and last_reviewed as their ES page, and validate_metadata.py --strict fails if any goes missing again. Before, 41 English pages inherited the site description, which is in Spanish.

📅 September 3, 2026

🧰 The last three stubs (ES/EN)

  • Proxmox SDN: software-defined networking — zone types with real selection criteria, and MTU on overlays, the number one cause of "it's slow and sometimes fails". A curious case: the English tree was more complete than the Spanish one, so this one was translated the other way round.
  • Flutter in production: build, signing and distribution — signing credentials in CI without putting them in the repository, and why a secret embedded in the binary is recoverable.
  • Repository troubleshooting: when the build breaks — this site's flagship failure explained in depth: the macros plugin runs every page through Jinja before Markdown sees it, and as far as Jinja is concerned a code block does not exist. A table of what it does to each sequence, plus the case that really bites: $ shows up later, everything in between is deleted with no error.

📚 Ten guides that were skeletons and are now documentation (ES/EN)

Ten pages that sat in the index with thirty lines and a promising title. They now carry reproducible content, a troubleshooting section, and explicit warnings wherever something depends on the version.

  • Terraform: state backend and migration — what the state holds and why it contains plaintext secrets, S3 with locking and a minimal IAM policy, the difference between -migrate-state and -reconfigure, and why workspaces do not isolate credentials.
  • Docker: hardening, secrets and scanning — the daemon is root-equivalent, capabilities, read-only filesystems, secrets that must never reach a layer and how to find them if they already did.
  • HAProxy advanced: balancing, TLS and high availability — real criteria for picking an algorithm, stick tables for rate limiting, and what breaks a seamless reload.
  • Wazuh: log centralization — architecture and what fails when each piece goes down, custom rules that don't break the built-in ones, and testing with wazuh-logtest before applying.
  • Ansible: roles and testing with Molecule — the four levels of checking, the idempotence test properly explained, and the patterns that break it.
  • Proxmox: migrating VMs and containers — the real requirements for live migration, and the drivers you must prepare before powering off the source.
  • Authentik: SSO, flows and forward auth — the data model everyone struggles with, and the proxy provider for applications with no SSO support.
  • Keystone: identity, catalog and tokens — domains and projects, mispointed endpoints, and why rotating Fernet keys badly invalidates sessions across the whole cloud.
  • React in production: build, deployment and operations — the 404 when reloading a client-side route, and why a secret in the bundle is an irreversible mistake.
  • fio: measuring IOPS and latency without fooling yourself — why dd won't do, the four canonical profiles, and the mistakes that invalidate a measurement.

📅 August 3, 2026

🛡️ Linux operations: firewall, scripting and diagnosis (ES/EN)

  • nftables + fail2ban: a persistent ruleset and real integration — sets with expiry, a safety net so you don't lock yourself out, backend = systemd and banaction = nftables-* (the values in older guides leave the jail silently idle), the recidive jail and custom filters.
  • Bash and REST APIs: curl and jq without scripts that lie — separating body/status/network errors, exponential backoff, pagination, secrets off the command line and a tested service checker.
  • Terminal monitoring: btop, glances, ctop, lazydocker and k9s — how to read load average and PSI correctly, plus a diagnostic order for "the server is slow".

🐋 Podman Quadlet: containers as systemd services (ES/EN)

  • Quadlet: declaring containers as systemd units — .container/.volume/.network/.pod files, healthchecks with automatic restart, startup dependencies, auto-update with rollback and a translation table from Docker Compose.
  • Expands the Quadlet section of Rootless Podman, which now links here for the full lifecycle.

🚦 Traefik: dynamic reverse proxy (ES/EN)

📅 July 19, 2026

🔒 Cybersecurity: backup, incident response, compliance and offensive auditing (ES/EN)

🤖 LLMs in production: Kubernetes, observability and cost (ES/EN)

🐳 Containers and databases (ES/EN)

📅 July 18, 2026

🤖 Complete local LLM ecosystem (ES/EN)

  • Inference engines: LLaMA.cpp (build, GGUF quantization and benchmarking), LM Studio (graphical interface) and vLLM (serving at scale with high throughput).
  • Unified gateway: LiteLLM as a single OpenAI-compatible layer in front of local models and cloud providers, with budget control and fallbacks.
  • Distributed inference: MeshLLM, a P2P mesh that pools GPUs from several machines behind a single endpoint.
  • MCP protocol: MCP and FastMCP integrated into the navigation.

🔒 Security: runtime, IaC and GitOps (ES/EN)

☸️ Kubernetes and storage (ES/EN)

📅 April 18, 2026

🌐 New vRouters section (ES/EN)

📅 January 25, 2026

🚀 Complete OpenStack + Ceph documentation

📊 Privacy-friendly analytics

  • Plausible Analytics: complete self-hosting guide (GDPR-compliant, cookie-free)
  • Log script: access analysis to monitor without invasive tracking
  • Ready-made configuration: MkDocs prepared to integrate analytics when deployed

🔧 Maintainability improvements

  • Freshness tracking: script that detects stale documentation (>90 days)
  • Simplified checklist: contribution guide updated with 5 essential points
  • Improvement roadmap: TODO.md with a practical maintainability plan

🤖 Artificial Intelligence section

📅 January 24, 2026

  • Full ES/EN parity: translation of 40+ critical files (Kubernetes, Docker, networking, cybersecurity)
  • New AI documentation: local ecosystems, RAG, vector databases
  • Storage improvements: PostgreSQL + Ceph, Pure Storage, NetApp

📅 January 23, 2026

  • Blog reorganization: technical posts moved to drafts for publication on WordPress
  • i18n link fixes: symmetric Spanish/English navigation
  • Build validation: clean MkDocs build with no errors

See all updates →

📚 Available Technical Documentation

🔧 Automation & Infrastructure

☁️ Cloud Platforms

🐳 Containers & Storage

  • Docker - Containers and virtualization
  • Kubernetes - Container orchestration
  • Ceph - Scalable distributed storage
  • Pure Storage - Enterprise all-flash storage
  • NetApp - Enterprise storage solutions
  • Protocols & Metrics - Protocols (iSCSI/NFS/SMB/S3) and metrics (IOPS, latency, throughput)

🌐 Networking & Connectivity

  • Networking - VPN and networking solutions (NetBird, Tailscale, ZeroTier)

🎯 Curiosities and Comparisons

  • Curiosities - Interesting comparisons between technologies

🚀 Getting Started

Don't know where to start? We recommend:

  1. If you're new to automation: Start with Ansible
  2. If you want to work with containers: Explore Docker
  3. If you're interested in cloud: Discover OpenStack
  4. If you want to orchestrate applications: Learn Kubernetes
  5. If you want to deploy a complete HomeLab: Learn Proxmox
  6. If you need to connect devices securely: Explore Networking

📖 Blog and Articles

Stay up to date with the latest news and tutorials on my blog. I share experiences, best practices, and real use cases.

🤝 Contributing

Your contribution is welcome! If you find errors, want to add content, or have suggestions:

  • GitHub: rasty94/Frikiteam-docs
  • Issues: Report problems or request new features
  • Pull Requests: Contribute with improvements or new content

📞 Contact

Thank you for being part of our community. We hope this documentation is useful in your technological journey! ✨

Antonio Rodríguez 🚀