Cloudflare - Tag - Lorenzo's Bloghttps://www.k8s.it/tags/cloudflare/Cloudflare - Tag - Lorenzo's BlogHugo -- gohugo.ioenThu, 24 Apr 2025 00:00:00 +0000Building a Scalable Image CDN with MinIO, imgproxy, and Cloudflarehttps://www.k8s.it/posts/building-a-scalable-image-cdn-with-minio-imgproxy-and-cloudflare/Thu, 24 Apr 2025 00:00:00 +0000Lorenzo Girardihttps://www.k8s.it/posts/building-a-scalable-image-cdn-with-minio-imgproxy-and-cloudflare/

Intro

In today’s digital landscape, efficiently serving images is critical for website performance. Users expect fast-loading, responsive websites, and images often account for the majority of a page’s weight. In this article, I’ll walk you through building a powerful, scalable image CDN using open-source tools that you can deploy in your own infrastructure.

The Architecture

Our image CDN consists of three main components:

  1. MinIO — An S3-compatible object storage backend that stores original images
  2. imgproxy — A fast and secure image processing service that resizes and optimizes images on-the-fly
  3. Cloudflare — Providing CDN capabilities through Cloudflare Tunnel

]]>Websocket, Cloudflare Tunnel, Apache httpd and a Bit of Securityhttps://www.k8s.it/posts/websocket-cloudflare-tunnel-apache-and-irritation/Thu, 03 Aug 2023 00:00:00 +0000Lorenzo Girardihttps://www.k8s.it/posts/websocket-cloudflare-tunnel-apache-and-irritation/

The Infrastructure Overview

Exposing home lab services to the internet can be both necessary and risky. Traditional methods — port forwarding, VPNs, reverse proxies with open inbound ports — come with their own set of challenges. This is where Cloudflare Tunnel (formerly Argo Tunnel) comes in as an elegant solution.

In this article, I’ll walk you through how I’ve implemented a secure infrastructure using Cloudflare Tunnel with WebSocket support, running on a Kubernetes cluster with Apache HTTPD as a reverse proxy. This setup allows me to securely expose internal services without opening ports on my residential firewall.

]]>Maximum Yield with Minimum Expensehttps://www.k8s.it/posts/maximum-yield-with-minimum-expense/Thu, 24 Dec 2020 00:00:00 +0000Lorenzo Girardihttps://www.k8s.it/posts/maximum-yield-with-minimum-expense/

Great marketing quote in the title — but honestly, the underlying principle is always true: keep it simple, keep it safe.

I want to structure this around four topics:

  • Static website
  • Tools
  • Security
  • Monitor

Each could be its own post. This one will cut across all of them because they’re connected.

This is not a post about how to create a blog. This post inspects some technology that can simplify your life or your work with small but important concepts.

]]>Terraform Your Free Cloudflare Accounthttps://www.k8s.it/posts/terraform-your-free-cloudflare-account/Fri, 06 Jul 2018 00:00:00 +0000Lorenzo Girardihttps://www.k8s.it/posts/terraform-your-free-cloudflare-account/

Introduction

Cloudflare provides a solid free tier. What sets it apart from competitors like Akamai or Incapsula isn’t just the price — it’s the API support and native Terraform provider. Everything you can click in the dashboard, you can manage in code.

This article walks through automating a complete Cloudflare account: DNS records, page rules, security settings, and zone configuration — all in Terraform, all in Git.

Setup

1. Authentication

Grab your API key from the Cloudflare portal:

]]>