Irregular writing on infrastructure, self-hosting, tools I build, and things I learn. No comments section, no newsletter — just words.
A ClickUp-to-NetBird automation for temporary incident access — and the three real gaps a security review found in it.
A GitLab.com namespace went read-only over a seat-quota mismatch nobody could explain — here's the access pattern we shipped instead of an answer.
An expired OpenVPN server cert unraveled a forgotten dual-CA trust bundle — and the cross-sign intermediate someone had already built and never wired in.
Why Ubuntu 26.04's native TPM-backed full-disk encryption fails on real hardware, and how Clevis gets you there anyway.
Building a hardened Zabbix-to-Telegram alerting pipeline, and the off-site dead-man's-switch for the day Zabbix itself goes down.
How I deployed FQ-CoDel on a 200-user network, got it wrong, got it right, and then found something better.