Posts
Page 18 of 47
-
Sec-Fetch & UA Client Hints in 2026: What Actually Leaks
Ran 9 real headless tools against an echo server. Sec-Fetch alone catches almost none of them. Here's what actually leaks, WAF rules that work, and where Anubis fits in.
16 min read -
Kdenlive Basics: Effects You Actually Use
Kdenlive cheat-sheet for the effects you actually reach for every edit: blur for privacy, audio ducking, titles, transitions, and the render dialog.
12 min read -
OpenTelemetry for Self-Hosters: Traces, Metrics, Logs Without the Datadog Bill
OpenTelemetry + the Grafana LGTM stack gives you Datadog-class observability for $0/month. Deploy an OTel Collector, route to Tempo/Loki/Mimir, and instrument your app in minutes.
11 min read -
ZFS Send/Receive Over WireGuard for Off-Site Replication
Pipe ZFS incremental snapshots through WireGuard to a friend's NAS or a remote VPS. Encrypted in transit and at rest — no rsync.net bill or vendor lock-in.
12 min read -
K3s vs K0s vs MicroK8s: Lightweight Kubernetes for Home Labs
K3s, K0s, and MicroK8s all slim down Kubernetes for home labs and edge — but they make very different tradeoffs. Here's how to pick the right one without losing a weekend.
10 min read -
Blog Comments: Self-Host or SaaS?
Disqus is a tracker farm wearing a comment box costume. Here's every real alternative — self-hosted and SaaS — and which one actually fits your blog.
11 min read -
CrowdSec Collections & Bouncers: fail2ban for 2026
CrowdSec is the modern fail2ban: community-shared threat intel, scenario collections, and pluggable bouncers. Deploy it with Caddy or Traefik and block millions of bad IPs from day one.
9 min read -
mergerfs + SnapRAID: The Poor Man's Unraid
Skip the $129 Unraid license. mergerfs + SnapRAID gives you flexible JBOD pooling with parity protection on mismatched drives you already own for free.
11 min read -
Headscale: Self-Host Your Own Tailscale Control Plane
Headscale gives you all the magic of Tailscale's zero-config WireGuard mesh — without trusting a SaaS control plane. Deploy it end-to-end with Docker Compose, ACLs, MagicDNS, and exit nodes.
10 min read -
Object Storage on a Pi: SeaweedFS Cluster Walkthrough
Run a real S3-compatible object storage cluster on Raspberry Pi 4s with SeaweedFS — low RAM overhead, fast filer, no Ceph drama or surprise cloud bills.
11 min read -
eBPF for the Curious: Kernel Tracing Without the PhD
eBPF traces what Linux is actually doing — syscalls, TCP events, slow functions — without rebooting. A hands-on intro to bpftrace, BCC, and libbpf with copy-paste one-liners.
11 min read -
Bind Mounts vs NFS for Container Storage
Bind mounts are fast and simple; NFS is shared and flexible for containers. Pick wrong and your database corrupts at 2 AM. Here is how to choose wisely.
11 min read
