# proxy An intermediary server or program that mediates communication between a client and a destination server by forwarding, modifying, blocking, or directly answering requests. This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles. ## Running a Self-Hosted Tailscale Control Server Behind a Reverse Proxy DevFeed: [Running a Self-Hosted Tailscale Control Server Behind a Reverse Proxy]() Original publisher: [Read original article]() Author: Philipp Lehmann (philipp.lehmann@gruppe.ai) Published: 2026-09-15T07:00:00Z Content type: tutorial Language: en Sources: [Philipp Lehmann]() Topics: [tailscale](), [proxy](), [traefik](), [TLS (Transport Layer Security)](), [TLS handshake](), [Self-hosted](), [Homelab]() Tags: [dns](), [docker](), [h2](), [homelab](), [networking](), [proxy](), [reverse-proxy](), [security](), [self-hosted](), [tailscale](), [tls](), [tls-handshake](), [traefik]() ### AI overview This tutorial explains how to run a self-hosted Tailscale control server, Headscale, behind Traefik. It finds that the reverse proxy must use TLS with HTTP/1.1 only because Tailscale's noise handshake expects a full-duplex byte stream and can fail when ALPN negotiates HTTP/2. ### Source excerpt Headscale behind Traefik: tls.options=no-h2@file with alpnProtocols http/1.1, because the Tailscale noise handshake breaks when ALPN negotiates h2. ## nginx: The Map Variable That Fixes the URI in proxy\_pass DevFeed: [nginx: The Map Variable That Fixes the URI in proxy\_pass]() Original publisher: [Read original article]() Author: Philipp Lehmann (philipp.lehmann@gruppe.ai) Published: 2026-09-14T07:00:00Z Content type: tutorial Language: en Sources: [Philipp Lehmann]() Topics: [nginx](), [proxy](), [Caching](), [configuration]() Tags: [cache-control](), [ci-cd](), [configuration](), [docker](), [networking](), [nginx](), [observability](), [proxy](), [reverse-proxy]() ### AI overview This article explains an nginx build failure caused by using a URI-bearing proxy_pass inside a regex location. A newer nginx version treated the previously accepted configuration as an error. The proposed fix uses a bare upstream in the regex location and a map on $uri to apply a path-specific Cache-Control policy. ### Source excerpt nginx: [emerg] invalid URI prefix in proxy_pass: a regex location needs a bare upstream, and a map on $uri keeps a path-specific Cache-Control header. ## kube-proxy in iptables Mode and Native nftables Rules in the Forward Chain DevFeed: [kube-proxy in iptables Mode and Native nftables Rules in the Forward Chain]() Original publisher: [Read original article]() Author: Philipp Lehmann (philipp.lehmann@gruppe.ai) Published: 2026-09-08T07:00:00Z Content type: article Language: en Sources: [Philipp Lehmann]() Topics: [proxy](), [Kernel](), [Virtual Private Network]() Tags: [firewall](), [handle](), [ip](), [kernel](), [kubernetes](), [linux](), [networking](), [proxy](), [reliability](), [vpn]() ### AI overview The article explains how native nftables rules added by a WireGuard-based mesh agent to the FORWARD chain can cause kube-proxy in iptables mode to abort synchronization silently, leaving service endpoints stale. It describes removing the conflicting rules by handle. ### Source excerpt kube-proxy iptables-nft sync silently aborts on native nftables rules a mesh agent adds to the FORWARD chain. Fix: nft delete rule by handle, ip and ip6. ## Devenv 2.3: Portless and TUI configuration DevFeed: [Devenv 2.3: Portless and TUI configuration]() Original publisher: [Read original article]() Author: domenkozar Published: 2026-09-07T13:59:38Z Content type: release Language: en Sources: [Announcements - NixOS Discourse]() Topics: [Nix](), [Pingora](), [Text-based user interface](), [proxy](), [Processes](), [configuration]() Tags: [announcements](), [configuration](), [docker](), [llms](), [localhost](), [open](), [pingora](), [processes](), [proxy](), [python]() ### AI overview Devenv 2.3 introduces an opt-in localhost proxy using Pingora for stable process URLs, configurable TUI settings, a dotenv parser, improved process cleanup, credential helpers in SecretSpec 0.20, and a smaller devenv closure. ### Source excerpt The new opt-in localhost proxy (using Pingora) gives your processes stable URLs, even when automatic port allocation changes the underlying port: { pkgs, config, ... }: { process.proxy.enable = true; processes.web = { exec = "${pkgs.python3}/bin/python -m http.server $PORT"; ports.http.allocate = 8000; env.PORT = builtins.toString config.processes.web.ports.http.value; }; } Run devenv up and open http://web..localhost. You can override hostnames per process or port and enable HTTPS per process. The TUI now has a personal configuration file for statusline placement, colors, keybindings, and log behavior. You can also hide the statusline or disable the (devenv) prompt prefix. Other highlights: multiverse.pins resolves multiple package versions through the fewest nixpkgs revisions. A new dotenv parser supports quotes, multiline values, variable substitution, and ordered files. SecretSpec 0.20 adds Git and Docker credential helpers and five new providers. Process shutdown and cleanup are more reliable. The devenv closure shrank from 528 MB to 376 MB. nixpkgs PR devenv devenv 2.3: Portless and TUI configuration Fast, Declarative, Reproducible, and Composable Developer Environments using Nix. LLMs have been used 1 post - 1 participant Read full topic ## Using a Local Proxy to Centralize AI Tool Routing, Logging, and Policy DevFeed: [Using a Local Proxy to Centralize AI Tool Routing, Logging, and Policy]() Original publisher: [Read original article]() Author: Philipp Lehmann (philipp.lehmann@gruppe.ai) Published: 2026-08-18T07:00:00Z Content type: article Language: en Sources: [Philipp Lehmann]() Topics: [proxy](), [API](), [audit](), [configuration](), [Self-hosted]() Tags: [api](), [audit](), [configuration](), [llm](), [proxy](), [python](), [security](), [self-hosted]() ### AI overview The article proposes routing every model-using tool on a developer machine through one local proxy. This centralizes endpoint selection, request logging, auditing, and enforcement of policies such as keeping sensitive project code on a self-hosted model. It notes that tools with hardcoded or otherwise unsupported upstream configuration can bypass the proxy. ### Source excerpt OPENAI_BASE_URL=http://localhost:8080/v1 for every AI tool: one local FastAPI proxy that logs each request and refuses internal-only projects. ## 【Istio 控制面】Linkerd 对照：非 xDS 的控制面机制 DevFeed: [【Istio 控制面】Linkerd 对照：非 xDS 的控制面机制]() Original publisher: [Read original article]() Author: Liao Tonglang Published: 2026-08-11T00:00:00Z Content type: article Language: zh Sources: [土法炼钢 - 系统与基础设施]() Topics: [istio](), [linkerd](), [API](), [proxy]() Tags: [api](), [control-plane](), [destination-controller](), [envoy](), [go](), [identity](), [istio](), [istiod](), [kubernetes](), [linkerd](), [mechanism-comparison](), [network](), [policy](), [proxy](), [route](), [rust](), [service](), [serviceaccount](), [sidecar](), [xds]() ### AI overview This article compares Linkerd's control-plane architecture with Istio's istiod and xDS model. It describes Linkerd's separately deployed destination, identity, and proxy-injector components; its proxy-specific gRPC APIs; and its CSR-based identity issuance, contrasting these with Istio's consolidated control plane and xDS/SDS resource model. It explicitly avoids declaring either system superior without workload-specific evidence. ### Source excerpt 以官方文档为准，对照 Linkerd destination/identity 控制面与 Istio istiod/xDS 的机制差异：资源模型、订阅形状、身份签发路径；只讲机制边界，不判定优劣。 ## Substituter proxy \`selector4nix\` 0.9.0: various new features and optimizations DevFeed: [Substituter proxy \`selector4nix\` 0.9.0: various new features and optimizations]() Original publisher: [Read original article]() Author: oo-infty Published: 2026-08-06T14:36:51Z Content type: release Language: en Sources: [Announcements - NixOS Discourse]() Topics: [Nix](), [proxy](), [Caching](), [Latency](), [Streaming]() Tags: [announcements](), [caching](), [features](), [latency](), [network](), [proxy](), [releases]() ### AI overview A forum release announcement for selector4nix 0.9.0, a Nix substituter proxy with parallel cache queries and latency-aware selection. It describes private substituter support, persistent disk caching, a dashboard, and concurrent chunked NAR streaming to improve throughput on high-latency links. ### Source excerpt selector4nix is a Nix substituter proxy with parallel cache queries and latency-aware selection. The last time I shared this project in this forum was about 3 months ago. From then on, selector4nix has gained more features, improvements and optimizations. The notable features included in these new versions are: Private substituter support: Accessing private substituter servers is possible with additional credentials. AFAIK it worked well with Cachix, Garnix and attic. Persistent caching: NAR info and other queried data can be persisted to disk cache and then be retrieved again after the process restarts. Dashboard: It started from a minimal static page, and gradually evolved into its current form. Now it has several pages and shows each substituter's availability, statistics of the server's cache and storage, realtime information of NARs being trasferred currently, and so on. Chunked NAR streaming: Since selector4nix intercepts NAR requests, it can any optimization for its client transparently. the proxy tries to request multiple NAR chunks from the selected upstream substituter concurrently, and forwards chunks to clients. This feature helps improve the throughput on high-latency network links, which is especially useful for myself. etc. Compared to its alternative, ncro, selector4nix is not that popular, but I still gained supports from some of my friends and users of this project. I'm very appreciated of your acknowledgement. This is my first project that managed to address other people's real problems and made a difference, and I also learnt a lot when polishing it. I'll continue to work on selector4nix and enjoy getting involved in the Nix community. Please refer to the following links for more information: Homepage: https://github.com/StarryReverie/selector4nix/ v0.9.0 release: https://github.com/StarryReverie/selector4nix/releases/tag/v0.9.0 v0.9.0 changelog: https://github.com/StarryReverie/selector4nix/blob/8c28a663078b97eaa6c125f2c7db0d9e75b22311/CHANGELOG ## I spent two months screen-sharing to ship one integration. So I rebuilt it on Temporal. DevFeed: [I spent two months screen-sharing to ship one integration. So I rebuilt it on Temporal.]() Original publisher: [Read original article]() Author: Stephen Montague Published: 2026-08-06T00:00:00Z Content type: tutorial Language: en Sources: [Temporal Blog]() Topics: [proxy](), [networking](), [legacy application](), [Messaging](), [on-prem](), [retry](), [Cloud]() Tags: [legacy-application](), [messaging](), [networking](), [on-prem](), [proxy](), [retry](), [software](), [temporal-voices]() ### AI overview The article explains how to connect a cloud application to a firewalled on-premises edge site using an egress-only proxy and a single outbound Temporal connection. It describes the operational difficulties of a legacy, one-way integration and the need for bidirectional messaging, retry handling, and testing. ### Source excerpt How to durably reach a firewalled edge site with no inbound ports: an egress-only proxy that hot-reloads config over a single outbound Temporal connection. ## Caddy: proxy inverso con HTTPS automático DevFeed: [Caddy: proxy inverso con HTTPS automático]() Original publisher: [Read original article]() Author: Antonio Pérez Published: 2026-08-06T00:00:00Z Content type: tutorial Language: es Sources: [tengoping.com]() Topics: [proxy](), [TLS (Transport Layer Security)](), [let's encrypt](), [nginx](), [traefik](), [Go]() Tags: [debian](), [fedora](), [go](), [let-s-encrypt](), [nginx](), [proxy](), [rhel](), [systemd](), [tls](), [traefik](), [ubuntu]() ### AI overview This Spanish tutorial explains how Caddy works as a Go-based reverse proxy with automatic HTTPS certificate issuance and renewal through Let's Encrypt or ZeroSSL. It compares Caddy with Nginx and Traefik, then covers installation and basic Caddyfile configuration. ### Source excerpt Caddy emite y renueva certificados HTTPS automáticamente vía Let's Encrypt sin tocar Certbot: Caddyfile, requisitos y comparativa con Nginx y Traefik. ## Vaultwarden: gestor de contraseñas autoalojado DevFeed: [Vaultwarden: gestor de contraseñas autoalojado]() Original publisher: [Read original article]() Author: Antonio Pérez Published: 2026-08-03T00:00:00Z Content type: tutorial Language: es Sources: [tengoping.com]() Topics: [Docker](), [Docker Compose](), [TLS (Transport Layer Security)](), [nginx](), [proxy](), [backups]() Tags: [backups](), [bitwarden](), [compose](), [docker](), [docker-compose](), [hardening](), [homelab](), [https](), [nginx](), [proxy](), [tls](), [vaultwarden]() ### AI overview A Spanish-language tutorial explains how to self-host Vaultwarden, an unofficial Rust server compatible with Bitwarden clients. It covers Docker Compose deployment, HTTPS behind an Nginx reverse proxy, admin-token hardening, and backups, while noting the trade-off between community support and the official Bitwarden server. ### Source excerpt Instala Vaultwarden con Docker: servidor ligero compatible con los clientes de Bitwarden, con HTTPS, hardening del admin token y backups. ## Traefik: proxy inverso para contenedores DevFeed: [Traefik: proxy inverso para contenedores]() Original publisher: [Read original article]() Author: Antonio Pérez Published: 2026-08-03T00:00:00Z Content type: tutorial Language: es Sources: [tengoping.com]() Topics: [traefik](), [Docker](), [proxy](), [let's encrypt](), [Docker Compose](), [TLS (Transport Layer Security)]() Tags: [docker](), [docker-compose](), [let-s-encrypt](), [proxy](), [tls](), [traefik]() ### AI overview This tutorial explains how Traefik acts as a reverse proxy for Docker containers. It covers automatic container discovery through Docker labels, routing with entryPoints, routers, and services, and automatic HTTPS certificates through Let's Encrypt. It also compares Traefik with manually configured Nginx and mentions Caddy as an alternative. ### Source excerpt Traefik detecta tus contenedores Docker automáticamente y les da HTTPS con Let's Encrypt vía labels, sin tocar un fichero de configuración. ## pproxy: a forward proxy that load-balances a pool of upstream proxies DevFeed: [pproxy: a forward proxy that load-balances a pool of upstream proxies]() Original publisher: [Read original article]() Published: 2026-06-22T00:00:00Z Content type: article Language: en Sources: [Andika Ahmad Ramadhan -- Blog]() Topics: [proxy](), [client](), [health checks](), [HTTP]() Tags: [client](), [health](), [health-checks](), [http](), [prometheus](), [proxy](), [reload](), [round-robin](), [socks5](), [tls]() ### AI overview This article presents pproxy, a forward proxy that distributes client traffic across upstream proxies. It describes active health checks, round-robin selection, failover within requests, hot configuration reloads, per-user authentication, and Prometheus metrics. ### Source excerpt pproxy is a forward proxy that load-balances client traffic across a pool of upstream proxies with active health checks and hot config reload, so switching proxy providers means editing one config file instead of every client. ## Key Components of a Production Web Application DevFeed: [Key Components of a Production Web Application]() Original publisher: [Read original article]() Author: Saurabh Dashora Published: 2026-06-09T07:56:22Z Content type: article Language: en Sources: [System Design Codex]() Topics: [web applications](), [CI/CD](), [Load Balancing](), [proxy](), [Caching]() Tags: [cache](), [caching](), [ci-cd](), [cloudflare](), [ddos](), [haproxy](), [web]() ### AI overview This article provides a high-level overview of components used in production web applications, including CI/CD pipelines, DNS resolution, load balancers, reverse proxies, and content delivery networks. It explains their roles in deployment, availability, scalability, performance, and security. ### Source excerpt A big picture view... ## KPN Interactieve TV zonder Experia Box DevFeed: [KPN Interactieve TV zonder Experia Box]() Original publisher: [Read original article]() Published: 2026-06-07T10:36:42Z Content type: tutorial Language: nl Sources: [Bert Hubert's writings]() Topics: [multicast](), [DHCP](), [Linux](), [Script](), [Internet](), [proxy](), [Raspberry Pi]() Tags: [dhcp](), [internet](), [linux](), [multicast](), [pi](), [pppoe](), [proxy](), [script](), [vlan](), [vlans]() ### AI overview This tutorial explains how to use a KPN Interactieve TV Set Top Box without an Experia Box. It describes the required KPN VLANs, multicast and IGMP proxy setup, DHCP option 60, and a Linux script that can run even on a Pi Zero. The author notes that the instructions were updated in June 2026 and includes a factory-reset tip. ### Source excerpt Ik ben een heel tevreden klant van KPN Internet. Om diverse redenen gebruik ik de Experia Box niet, maar ik wil wel graag TV kunnen kijken met de KPN Interactieve TV Set Top Box ("5202"). Vroeger ging dat "vanzelf goed", tegenwoordig is daar wat werk voor nodig. UPDATE Juni 2026 (na 5 jaar!): de instructies werken weer, er is een update geweest in het igmpproxy.conf bestand. Ook heb ik een tip toegevoegd hoe de ontvanger terug te brengen naar fabrieksinstellingen, wat bij mij recent nodig was. ## Strategies for Moving from a Monolith to Microservices DevFeed: [Strategies for Moving from a Monolith to Microservices]() Original publisher: [Read original article]() Author: Saurabh Dashora Published: 2026-05-26T07:58:51Z Content type: tutorial Language: en Sources: [System Design Codex]() Topics: [microservices architecture](), [migration](), [legacy systems](), [proxy]() Tags: [architecture](), [big-bang](), [feature-flags](), [incremental](), [monolith]() ### AI overview This tutorial describes patterns for gradually moving from a monolithic architecture to microservices. It covers the Strangler Fig Pattern, Parallel Run Pattern, and Collaborator Pattern in the supplied text, emphasizing incremental migration, traffic splitting, behavior comparison, feature flags, and reduced rewrite risk. ### Source excerpt Strategies worth knowing ## Snowflake Volunteer open-source app DevFeed: [Snowflake Volunteer open-source app]() Original publisher: [Read original article]() Author: Cláudia Published: 2026-05-13T14:19:29Z Content type: article Language: en Sources: [Blog - Bloco]() Topics: [tor](), [Android](), [Virtual Private Network](), [Open Source](), [proxy](), [Internet](), [Protocol (disambiguation)]() Tags: [android](), [app](), [apps](), [automatically](), [design](), [development](), [network](), [open-source](), [proxy](), [tor]() ### AI overview Snowflake Volunteer is an open-source Android app that lets people run a Snowflake proxy to help others access the Tor network where it is blocked. The article explains installation and configuration options, including limiting operation to Wi-Fi or charging, and points to the source repository, bug reporting, feature requests, and translation work. ### Source excerpt Snowflake Volunteer is an open-source app that helps others reach the Tor network in places where Tor is blocked. It turns your phone into an anonymous Volunteer proxy, without you having to worry about the technical stuff. Similar to VPNs, which help users bypass Internet censorship, the Snowflake protocol disguises Internet activity as if someone were making a video or voice call, making it less detectable to Internet censors. ## Reddit's Media Metadata Store and Data Migration Process DevFeed: [Reddit's Media Metadata Store and Data Migration Process]() Original publisher: [Read original article]() Author: Saurabh Dashora Published: 2026-03-17T08:41:58Z Content type: article Language: en Sources: [System Design Codex]() Topics: [Reddit](), [Databases](), [migration](), [data](), [Amazon S3](), [Latency](), [API](), [proxy](), [systems]() Tags: [api](), [architecture](), [aws](), [data](), [database](), [latency](), [migration](), [proxy](), [reddit](), [s3]() ### AI overview This article explains why Reddit built a unified media metadata store for media-related information previously scattered across multiple systems. It describes the store's requirements, its AWS Aurora Postgres architecture with an API service and pgBouncer, and a migration process using dual writes, data backfilling, and dual reads while serving high request volume. ### Source excerpt How it works ## Proxy inverso con Nginx: guía práctica DevFeed: [Proxy inverso con Nginx: guía práctica]() Original publisher: [Read original article]() Author: Antonio Pérez Published: 2026-01-09T00:00:00Z Content type: tutorial Language: es Sources: [tengoping.com]() Topics: [nginx](), [proxy](), [rate-limiting](), [let's encrypt](), [rhel](), [SELinux]() Tags: [let-s-encrypt](), [nginx](), [proxy](), [rate-limiting](), [rhel](), [selinux](), [ssl]() ### AI overview A practical Spanish-language guide to using Nginx as a reverse proxy. It covers routing traffic to internal applications, HTTPS with Let's Encrypt, load balancing, upload and proxy timeout settings, request-rate limiting, gzip compression, security headers, and the 502 issue associated with SELinux on RHEL. ### Source excerpt Nginx como proxy inverso: subidas de archivos grandes, timeouts, rate limiting, gzip y el clásico 502 por SELinux en RHEL. ## Using Coolify for subdomain direct redirect without a app resource DevFeed: [Using Coolify for subdomain direct redirect without a app resource]() Original publisher: [Read original article]() Author: Julien Published: 2025-09-14T19:07:33Z Content type: tutorial Language: en Sources: [Thoughts, stories and ideas.]() Topics: [proxy](), [Redirection](), [YAML](), [configuration](), [TLS (Transport Layer Security)](), [interface]() Tags: [coolify](), [devops](), [dns](), [habits](), [proxy](), [ssl](), [tls](), [traefik](), [yaml]() ### AI overview A tutorial showing how to use Coolify's dynamic proxy configuration to redirect a subdomain to an external URL without creating a full application resource. It uses a YAML configuration with Traefik to define the redirect, router, TLS handling, and required dummy service. ### Source excerpt Coolify's dynamic proxy configuration lets you redirect subdomains to external URLs without creating full resources. Using a simple YAML file with Traefik configuration, you can set up SSL-enabled redirects directly through Coolify's interface. ## Creating private services on NixOS using Tailscale and Caddy DevFeed: [Creating private services on NixOS using Tailscale and Caddy]() Original publisher: [Read original article]() Author: Harsh Shandilya Published: 2025-09-13T15:48:00Z Content type: tutorial Language: en Sources: [Posts on Harsh Shandilya]() Topics: [tailscale](), [Authentication](), [proxy](), [Grafana](), [Server]() Tags: [authentication](), [caddy](), [integration](), [nixos](), [release](), [tailscale]() ### AI overview A guide to configuring private services on NixOS with Tailscale and Caddy. It explains the experimental Caddy integration, installation of the caddy-tailscale plugin, authentication-key configuration, and a Grafana setup that uses Tailscale identity for access. The article also notes device-limit and duplicate-dashboard-entry caveats. ### Source excerpt A simple guide to setting up private services on NixOS using Tailscale and Caddy with authentication. ## Announcing automated, zero-downtime migrations to Temporal Cloud DevFeed: [Announcing automated, zero-downtime migrations to Temporal Cloud]() Original publisher: [Read original article]() Author: Nikitha Suryadevara Published: 2025-03-04T00:00:00Z Content type: release Language: en Sources: [Temporal Blog]() Topics: [migration](), [Cloud](), [Self-hosted](), [API](), [proxy](), [Replication](), [Security]() Tags: [api](), [automated](), [cloud](), [migrate](), [migrations](), [product-news](), [proxy](), [replication](), [security](), [self-hosted](), [zero]() ### AI overview Temporal announces pre-release migration tooling for moving self-hosted Temporal instances to Temporal Cloud. It is designed to automate the migration while keeping long-running workflows running and avoiding application-code changes. ### Source excerpt Easily migrate from self-hosted Temporal to Temporal Cloud with zero downtime. Fully automated, seamless, and built to minimize effort. ## Keycloak 26.0.6 released DevFeed: [Keycloak 26.0.6 released]() Original publisher: [Read original article]() Author: Keycloak Team Published: 2024-11-22T00:00:00Z Content type: release Language: en Sources: [Keycloak Blog]() Topics: [Keycloak](), [LDAP](), [OpenID connect (OIDC)](), [proxy]() Tags: [idm](), [kerberos](), [keycloak](), [keycloak-release](), [ldap](), [migration](), [migration-guide](), [oidc](), [openid-connect](), [release](), [reverse-proxy](), [saml](), [server](), [sso]() ### AI overview Keycloak 26.0.6 was released on November 22, 2024. The release adds additional context details to some admin events, updates the database schema with a DETAILS_JSON column, revises documentation for X.509 client-certificate lookup through a reverse proxy, and includes enhancements and bug fixes. ### Source excerpt To download the release go to Keycloak downloads. Highlights Admin events might include now additional details about the context when the event is fired In this release, admin events might hold additional details about the context when the event is fired. When upgrading you should expect the database schema being updated to add a new column DETAILS_JSON to the ADMIN_EVENT_ENTITY table. Updates to documentation of X.509 client certificate lookup via proxy Potential vulnerable configurations have been identified in the X.509 client certificate lookup when using a reverse proxy. Additional configuration steps might be required depending on your current configuration. Make sure to review the updated reverse proxy guide if you have configured the client certificate lookup via a proxy header. Upgrading Before upgrading refer to the migration guide for a complete list of changes. All resolved issues Enhancements #34315 Update the Keycloak CPU and Memory sizing guide to reflect the new ec2 workder nodes #34386 Some dynamic imported functions are also statically imported making bundling them in-efficient #34570 Make documentation more clear that keycloak javascript adapter and node.js adapter are OIDC docs #34855 Add conditional text to Installation Locations #34873 Update Leveraging JaKarta EE in Server Development guide #34887 Apply QE edits to High Availability guide Bugs #609 Workflow failure - Jakarta - SAMLServiceProviderTest.testAccessAccountManagement quickstarts #11008 Incorrect get the members of a group imported from LDAP ldap #17593 Incorrect ldap-group-mapper chosen to sync changes to ActiveDirectory when several mappers with varying group paths used ldap #19652 Members are inhereted from LDAP group with the same name ldap #23732 JavascriptAdapterTest errors when running with strict cookies on Firefox ci #27856 Social login - Stack Overflow test fails ci #31456 Enabling/Disabling user does not work with Microsoft AD LDAP via Admin API/UI ldap #32786 Organization ## Kamal 2.0 released DevFeed: [Kamal 2.0 released]() Original publisher: [Read original article]() Author: Donal McBreen Published: 2024-09-26T17:00:00Z Content type: release Language: en Sources: [37signals Dev]() Topics: [Deployment](), [proxy](), [configuration](), [let's encrypt](), [Web](), [Rails](), [traefik]() Tags: [configuration](), [deploy](), [deployment](), [let-s-encrypt](), [maintenance](), [password](), [rails](), [secrets](), [traefik](), [upgrade](), [web-apps]() ### AI overview 37signals announces Kamal 2.0, a deployment tool for running web applications on virtual machines or bare-metal servers. The release adds kamal-proxy for gapless deployments, automatic HTTPS with Let's Encrypt, multi-application deployment on one server, command aliases, and simplified secret management. ### Source excerpt Making deployments simpler and faster. ## Thruster is now open source DevFeed: [Thruster is now open source]() Original publisher: [Read original article]() Author: Kevin McConnell Published: 2024-03-07T18:00:00Z Content type: release Language: en Sources: [37signals Dev]() Topics: [proxy](), [Rails](), [HTTP](), [Open Source](), [Caching](), [SSL](), [Compression]() Tags: [caching](), [compression](), [http](), [open-source](), [proxy](), [rails](), [ssl]() ### AI overview 37signals announces Thruster, an open-source minimal HTTP/2 proxy server for Rails applications. It runs alongside Puma and adds HTTP/2 support, Let's Encrypt SSL, HTTP caching for public assets, static file serving, and compression. ### Source excerpt A minimal HTTP/2 proxy for easy, production-ready Rails deployments. [Next page]()