The scripts I used to run by hand from my desktop now live behind a small LAN-only web console. It uses passkey sign-in and a fixed list of audited actions. Claude drafts pages, and a security gate checks them before I approve anything.
How I replaced a dozen ad hoc certbot setups with one central acme.sh instance. It uses DNS-01 validation through Cloudflare and pushes each certificate to its host over SSH.
How I moved my domain’s email from a hosted provider to a self-hosted Postfix and Dovecot server in my home lab, the design choices behind it, and what I learned along the way.