Posts
Page 6 of 72
-
chezmoi vs GNU Stow vs Bare-Repo Dotfiles
Compare dotfile managers: chezmoi templating, GNU Stow symlinks, bare git repos. Multi-machine sync, secrets handling, learning curve.
11 min read -
Neovim Setup Without the 6-Month Slog
A Neovim config you can read in one sitting. lazy.nvim, vim.lsp.config on Neovim 0.12, the defaults worth keeping, and the keymaps that quietly break LSP.
13 min read -
Email Aliasing: SimpleLogin vs addy.io
SimpleLogin vs addy.io compared on verified September 2026 pricing, free-tier limits, and what self-hosting each one actually costs you in moving parts.
12 min read -
Discord Alternatives That Actually Work
Discord's age checks sent people looking for exits. Stoat, Fluxer, Matrix and Mumble compared on features, hosting, and whether your community follows.
12 min read -
Tor Hidden Services for Self-Hosters
Run a Tor v3 onion service for your self-hosted apps. Working torrc and Compose config, client authorization, vanity addresses, and the opsec that doxxes you.
15 min read -
Anubis: Anti-AI-Crawler Proof-of-Work
Anubis puts a proof-of-work gate in front of your site. Real policy file config, weights and thresholds, Caddy wiring, and the false positives you hit.
12 min read -
GrapheneOS for the Curious
GrapheneOS hardens Android on Pixels. The web installer, re-locking the bootloader, sandboxed Google Play, banking app attestation, and what actually breaks.
· Updated:14 min read -
Browser Hardening 2026: Brave vs LibreWolf vs Mullvad
Brave, LibreWolf, and Mullvad Browser compared on fingerprinting, telemetry, and sync, plus the extension stack and about:config tweaks that matter.
14 min read -
Matomo Self-Hosted: When You Need Funnels
Plausible and Umami both have funnels now. What self-hosted Matomo actually buys you, what its premium plugins cost, and a Compose setup that holds up.
15 min read -
Falco + Trivy in k3s: Runtime Security on Small Clusters
Combine image scanning and runtime detection in k3s with Falco and Trivy Operator. Practical Helm setup, working rules, and alert routing for small clusters.
15 min read -
Renovate for k8s GitOps
Auto-update Kubernetes images and Helm charts with Renovate: the built-in Helm managers, custom regex managers, cron scheduling, and PR grouping rules.
14 min read -
External Secrets Operator + Vault on k3s
Pull secrets out of git with External Secrets Operator and Vault on k3s: real server mode, Kubernetes auth that actually works, rotation and audit trails.
15 min read
