Posts

2026

• An Agent Pipeline for dvarapala: Opus Reviews, Sonnet Implements, I Merge Nov 2
• Homelab Rebuild Part 41: n8n with Claude Code Runners on the Subscription Nov 2
• dvarapala: Training an XGBoost Model from Its Own LLM Labels Nov 1
• Homelab Rebuild Part 40: Taking Rate Limiting Back from Cloudflare Oct 28
• dvarapala: An Anti-DDoS Gateway in Rust, from L7 Down to XDP Oct 28
• ipcalc: A Subnet Calculator That Explains Itself, Served as a Wasm Component Oct 27
• Homelab Rebuild Part 39: Wasm Pods on k0s, and the Label That Kept Them Packed Oct 26
• Proving an Authorization Table with Bend Oct 23
• Homie Demo: Watch Your Own CI Runs, Nothing Stored Oct 23
• Homelab Rebuild Part 38: An Autonomous AI Pentester in a Sealed Box Oct 23
• Homie: One Page for My Whole Homelab, and a Public Demo of It Oct 22
• Homelab Rebuild Part 37: A Power Trip, a Search Domain and a Wildcard Oct 20
• socialbtw: Hiding Spam in My Threads Replies with a Decision Model Oct 19
• Homelab Rebuild Part 36: The Fans Were Loud, the CPUs Were Idle Oct 19
• Homelab Rebuild Part 35: Wazuh Without the 8 GB, Endpoint Security for One Mac and Three Hosts Oct 19
• Homelab Rebuild Part 34: From Watching to Blocking, and a Record of Who Did What Oct 19
• Homelab Rebuild Part 33: The Firewall Held, the Tailnet Did Not Oct 19
• Homelab Rebuild Part 32: Alerts That Reach Me, Even When the Lab Is Dead Oct 19
• Homelab Rebuild Part 31: First Backups, Postgres, OpenBao and etcd to R2 Oct 18
• Homelab Rebuild Part 30: Proxmox Joins the SSO, and a Plan Token Loses Admin Oct 18
• Homelab Rebuild Part 29: One Meter for Every Model, LiteLLM on Workers AI Oct 18
• Homelab Rebuild Part 28: Observability, Take Three: Making It Worth Looking At Oct 17
• Homelab Rebuild Part 27: One Bad Power Adapter, Two Different Deaths Oct 17
• Homelab Rebuild Part 26: TLS on the Front, Plaintext Behind It Oct 17
• Homelab Rebuild Part 25: It Was the Router Oct 16
• Homelab Rebuild Part 24: Pi-hole Without a Home Host Oct 16
• Three Ways Into My Homelab, Drawn as a Water Lock Oct 16
• Adding a Light Theme to a Dark-Only Hugo Theme Oct 16
• Fixing My Blog's Lighthouse Scores, Then Moving It to Cloudflare Workers Oct 15
• Homelab Rebuild Part 23: microVM Sandboxes on Proxmox Oct 15
• Homelab Rebuild Part 22: Turning Four Days of Fixes into AI Runbooks Oct 15
• Homelab Rebuild Part 21: pve-02 Loses Power, and Pi-hole Has Nowhere to Go Oct 15
• Homelab Rebuild Part 20: Headlamp SSO, or Teaching kube-apiserver to Trust Cloudflare Access Oct 15
• Homelab Rebuild Part 19: Logging In to OpenBao with Cloudflare Access and Google Oct 14
• Homelab Rebuild Part 18: When the API Server Outgrew Its VM Oct 14
• Homelab Rebuild Part 17: Making the Guardrails Earn Their Keep Oct 14
• Homelab Rebuild Part 16: Handing the Cluster to FluxCD Oct 14
• Homelab Rebuild Part 15: Requests and Limits for Everything Oct 14
• Homelab Rebuild Part 14: Observability, Take Two with OpenTelemetry Oct 14
• Homelab Rebuild Part 13: The Host That Kept Losing Power Oct 14
• Homelab Rebuild Part 12: Observability with Coroot, and Losing pve-01 Oct 13
• Homelab Rebuild Part 11: Hardening the Cluster in Five Layers Oct 13
• Homelab Rebuild Part 10: When the Hypervisor Went Quiet Oct 13
• Homelab Rebuild Part 9: Going Public Safely with Cloudflare Tunnel Oct 12
• Homelab Rebuild Part 8: Stateful Workloads on Unequal Hardware Oct 11
• Homelab Rebuild Part 7: Self-Hosted CI and Getting Back to IaC Oct 10
• Homelab Rebuild Part 6: Certificates, DNS and a Private CA Oct 9
• Homelab Rebuild Part 5: Secrets Without Secrets in Git Oct 8
• Homelab Rebuild Part 4: Living on the Tailnet Oct 7
• Homelab Rebuild Part 3: When Tailscale Breaks Your Cilium Gateway Oct 6
• Homelab Rebuild Part 2: Starting Over When the IaC Is Broken Oct 5
• Homelab Rebuild Part 1: Upgrading Proxmox VE 8 to 9 Oct 4

2024

• Provide short-lived credential using OIDC Federation between AWS and GCP Feb 24
• Setup Free Email for Your Own Domain with Cloudflare and Mailjet Feb 13