From LAMP Stack to Kubernetes

What this project is, who built it, and why. The big picture — from security consultancy to infrastructure portfolio.

How mfa2fa.com ran before Kubernetes — Apache, WordPress, MySQL on a single VPS. What worked, what didn't, why it had to change.

Architecture decision records. Why K8s over Docker Compose, how the migration was planned, what was containerised first.

How kube1, kube2, kube3 were built with kubeadm. ContainerD, Flannel CNI, MetalLB, NFS provisioner, Wazuh SIEM.

Full network topology. OVH VPS as reverse proxy, WireGuard tunnel, MetalLB Layer 2, CSF firewall gotchas, nginx rewrites.

Running WordPress as a Deployment in the wordpress6 namespace — pods, MySQL, PVCs, LoadBalancer service, URL rewriting.

Building the cluster-dashboard namespace from scratch. CronJob probe, ServiceAccount RBAC, NFS storage, MetalLB gotchas, CSF BOGON fix.

Full runbook for the mfa2fa-docs namespace — NFS setup, deploy commands, troubleshooting, export script for cluster migration. Download as Markdown.