Locking Down SSH in a DMZ for Hugo Deployments
Hardening SSH access to a DMZ web server revealed an overlooked dependency in my Hugo deployment pipeline: the server also needs outbound SSH to pull from Git.
Homelab
Mail Relay at Home: Postfix Smart Host
How to build a reliable home mail relay using Postfix as a smart host with msmtp clients on Linux workstations, enabling sendmail-compatible outbound email for scripts and system alerts.
A Git-Backed Home Lab Knowledge Base with BookStack
How I built an internal BookStack knowledge base where Markdown in a private Git repo is the source of truth, synced automatically by Gitea Actions, with public posts derived only by a manual, reviewed step.
Automating Let's Encrypt for Internal Hosts with DNS-01 and SSH Push
How I replaced a dozen ad hoc certbot setups with one central acme.sh instance. It uses DNS-01 validation through Cloudflare and pushes each certificate to its host over SSH.
Homelab Monitoring with Grafana, Loki, Prometheus and Alloy
How I centralised logs and metrics for my homelab with Grafana, Loki, Prometheus and Grafana Alloy, and what I learned about push-based collection, alerting and code-generated dashboards.