Linux & open source consultant
Forgejo is the software forge I keep coming back to when a project needs its own git server. It is a single Go binary, it runs happily on modest ARM64 hardware and it does not drag Docker, Kubernetes or a JavaScript build chain into your infrastructure. For a small development team that wants its source...
Dolibarr is one of the few open source ERP and CRM platforms that stays genuinely lightweight while still covering the core needs of a small business: quoting, invoicing, CRM, projects and accounting. Where Odoo or ERPNext ask for a Python stack, message queues and several gigabytes of RAM before they even boot, Dolibarr runs comfortably...
In the previous post, I walked through installing OpenCloud 6.0 as a bare metal deployment inside a Debian 13 Incus container, compiled from source with libvips support for full image thumbnail generation. That gave us a fast, lean file sync and sharing platform with no Docker, no PHP, and no database. This follow-up covers the...
Ghost is a powerful, open source publishing platform built on Node.js. It s fast, clean and purpose-built for content creators who want a modern alternative to WordPress. This guide walks through a production installation of Ghost 6.x on Debian 13 (Trixie) inside an Incus container, with Nginx handling SSL termination on a separate proxy server. This...
After 25 years of running production Linux infrastructure, I have tried nearly every major distribution at some point. Red Hat and CentOS through their many incarnations (CentOS was the cPanel favorite for years), Fedora, Ubuntu from its early days when it genuinely made Linux better, Alpine and even Manjaro and Arch. Each taught me something...
If you run WordPress sites behind nginx on Debian, you already know the reality: bots hammer /wp-login.php hundreds of times a day, exploit scanners probe for webshells and every request that reaches PHP costs CPU cycles. A single bot sweep can saturate your php-fpm worker pool and bring a server to its knees. This guide...
If you re running Ubuntu 22.04 or 24.04 with LXD and planning to migrate to Incus, you re likely in for an unpleasant surprise. The official lxd-to-incus migration tool only supports LXD up to version 5.21, but Ubuntu s snap package manager has silently auto-updated your LXD installation to version 6.7, making the official migration path impossible. This...
Running a production mail server means more than getting it installed and configured correctly. It means knowing when something goes wrong, ideally before your clients do. This article covers a practical monitoring approach for Postfix that alerts you to delivery failures, TLS handshake errors, and other problems that would otherwise sit silently in the logs....
On April 29, 2026, a vulnerability was publicly disclosed that affects virtually every Linux system built since 2017. CVE-2026-31431, nicknamed Copy Fail, is a local privilege escalation flaw in the kernel s cryptographic subsystem. It allows any unprivileged user to gain full root access using a script of less than 800 bytes. No race conditions. No...
On April 21, 2026, Internet.nl rolled out a fully updated TLS test based on the latest NCSC-NL guidelines. Mail servers that previously passed the test may now show new warnings. This guide walks through the exact fixes on Debian 13 Trixie with Postfix 3.9 or later, based on hands-on troubleshooting on a production server. The...