My work at $DAYJOB that involves a lot of work with data pipeline these days. Particularly the design of new and better ones, which help us serve users with better data (more advanced processing, bett...

In my last post, one of the things I glossed over was the TLS termination setup. While there are many ways of doing this, and half a dozen tutorials on most of them, you may remember that my setup on ...

For various reasons, I recently decided to start running a homelab again. In this post I'll give a broad overview of the architecture I settled on, and why I made specific choices. I'll try to keep th...

It's not like the world needs yet another WireGuard tutorial, but I thought I'd write one since one of the top SEO-ranked ones I stumbled upon was pretty low quality, with several obvious errors and o...

DNS is a complex beast, so it's little surprise when I learn something new. Today I learned a bit more about the internals of how DNS works at various privacy-centric providers. It all started a few w...