DevSecOps Engineer blogs about coding, life and other stuff
Debugging a Nextcloud deployment on Podman Quadlets that kept breaking every thirty seconds, from a Cloudflare 502, to an Apache 403, to the real culprit: one uppercase letter in a shared SELinux volume label.
A transient DNS failure restarted my Cloudflare Tunnel and left it running but unreachable. Here's how I tracked it down, and the health checks, systemd hardening, and DNS redundancy I added to stop it happening again.
A tour of my daily setup: MacBook and iPhone hardware, a self-hosted Podman Quadlet homelab, my RSS and read-later stack, Obsidian for notes, and the security and dev tools I rely on.
How I built and open-sourced a FreshRSS Raycast extension with feeds, articles, search, categories, caching, pagination, and Readwise Reader integration.
A personal reflection on transitioning from digital note-taking to analog pen-and-paper journaling, and how it transformed my mental clarity and creative flow.
How to self-host a Hugo blog using shell scripts and rsync for deployment, plus automating frontmatter and SEO tasks to avoid platform dependency.
How I use Hermes Agent to turn rough instructions into usable artifacts like runbooks, research notes, curated feeds, diagrams, and Telegram-delivered outputs.
Learn how to run production containers using Podman Quadlet and systemd instead of Docker Compose. A clean, daemonless approach to managing infrastructure services on Linux.
Running AdGuard Home as a Quadlet-managed container on Rocky Linux to turn DNS into a network-wide policy enforcement point, with encrypted upstream resolution and full query visibility.
A battle-tested guide to running production containers with Podman Quadlet. Architecture, migration strategy, failure modes, and GitOps for single-node platforms.
How I expose self-hosted services publicly with Cloudflare Tunnel instead of port forwarding: setup, configuration, DNS, running it as a service, and the mistakes I've made along the way.
A bash script that blocks distracting sites like Reddit, Instagram, and X at the system level by redirecting them to localhost in /etc/hosts, with safe, reversible block/unblock commands.
How to download, install, and add NeoVim to the system PATH on Windows Server, where the usual winget install isn't an option.
On why keeping a blog consistently updated is harder than starting one: ideas pile up faster than the time to write them down.
Steps for running Ollama with GPU acceleration in Docker on Fedora, including the Nvidia Container Toolkit setup needed to use it with Fabric.
Why other people's elaborate Obsidian setups don't work for me: plugin fragility, templates I don't need, and a preference for a simple, uncustomized interface.
Why I moved back from Notion to Obsidian after a month, and how Notion's repeated outages confirmed that local-first, offline-capable notes matter more than a flashier interface.
A small Go CLI for generating passwords and secrets, with flags for length, character sets, and digits/special characters. Built as a way to practice Go.
Using Docker Compose Watch to automatically sync files and rebuild containers on local development changes, instead of syncing and rebuilding by hand.
A Raycast extension for FreshRSS with feeds, articles, search, categories, caching, pagination, and Readwise Reader integration