Posts
Page 4 of 41
-
ZFS Replication with syncoid + sanoid: The Lazy Admin's Backup
sanoid manages ZFS snapshot policies automatically, syncoid replicates them over SSH to remote pools — together they're the lowest-effort offsite backup strategy for any ZFS user.
10 min read -
Kopia Repository Server: Multi-Host Backups Done Right
Stop letting every machine write directly to S3. Kopia repository server gives you shared dedup, per-host auth, and sane maintenance — all in one place.
11 min read -
Sec-Fetch & UA Client Hints in 2026: What Actually Leaks
Ran 9 real headless tools against an echo server. Sec-Fetch alone catches almost none of them. Here's what actually leaks, WAF rules that work, and where Anubis fits in.
16 min read -
Kdenlive Basics: Effects You Actually Use
Kdenlive cheat-sheet for the effects you actually reach for every edit: blur for privacy, audio ducking, titles, transitions, and the render dialog.
12 min read -
OpenTelemetry for Self-Hosters: Traces, Metrics, Logs Without the Datadog Bill
OpenTelemetry + the Grafana LGTM stack gives you Datadog-class observability for $0/month. Deploy an OTel Collector, route to Tempo/Loki/Mimir, and instrument your app in minutes.
11 min read -
ZFS Send/Receive Over WireGuard for Off-Site Replication
Pipe ZFS incremental snapshots through WireGuard to a friend's NAS or a remote VPS. Encrypted in transit and at rest — no rsync.net bill or vendor lock-in.
12 min read -
K3s vs K0s vs MicroK8s: Lightweight Kubernetes for Home Labs
K3s, K0s, and MicroK8s all slim down Kubernetes for home labs and edge — but they make very different tradeoffs. Here's how to pick the right one without losing a weekend.
10 min read -
Restic Repository Maintenance: Prune, Check, Forget
Your restic repo is ballooning. Learn forget, prune, and check — the right order, real flags, automation, and why full check can wreck your entire weekend.
11 min read -
Blog Comments: Self-Host or SaaS?
Disqus is a tracker farm wearing a comment box costume. Here's every real alternative — self-hosted and SaaS — and which one actually fits your blog.
11 min read -
CrowdSec Collections & Bouncers: fail2ban for 2026
CrowdSec is the modern fail2ban: community-shared threat intel, scenario collections, and pluggable bouncers. Deploy it with Caddy or Traefik and block millions of bad IPs from day one.
9 min read -
mergerfs + SnapRAID: The Poor Man's Unraid
Skip the $129 Unraid license. mergerfs + SnapRAID gives you flexible JBOD pooling with parity protection on mismatched drives you already own for free.
11 min read -
Headscale: Self-Host Your Own Tailscale Control Plane
Headscale gives you all the magic of Tailscale's zero-config WireGuard mesh — without trusting a SaaS control plane. Deploy it end-to-end with Docker Compose, ACLs, MagicDNS, and exit nodes.
10 min read
