stephkoh

What I do

I run infrastructure: servers, networking, Kubernetes, security. The tools I publish here didn't start as ideas — they started as problems I hit in production, then cleaned up and made generic so others can use them.

Three principles guide the work:

• Solve a real problem, not an imagined one.
• Few dependencies, because infrastructure tooling has to still work in five years.
• Document honestly, including what the tool doesn't do and when you're better off using something else.

Current project

certfleet — automatically deploys Let's Encrypt certificates to the servers cert-manager can't reach: Serv-U, HAProxy, IIS, Exchange, F5, vsftpd, Java keystores.

Maximum certificate lifetime dropped to 200 days in 2026, and falls to 47 days in 2029. What we renew once a year today will need renewing eight times a year. Manual renewal won't hold.

What your donation funds

These tools are built on personal time, outside of any professional activity. Donations fund the maintenance: keeping up with protocols and standards as they change, adding new connectors, writing documentation, and answering users.

Everything is released under a free software licence, and will stay that way.