Tang & Clevis: LUKS Auto-Unlock Without a Typed Passphrase
Stop typing LUKS passphrases on every headless reboot. Tang + Clevis = NBDE: disks unlock automatically on your trusted network, stay sealed everywhere else.
Tag: security
All the articles with the tag "security".
Collateral Freedom: Costly to Block
Protocol mimicry only wins the hiding fight. Learn why relay cascades, domestic hosting, and disposable infrastructure make blocking your traffic expensive.
REALITY: Borrowing a TLS Handshake
REALITY does not disguise your traffic as a real TLS handshake, it serves an actual one. How that works, a working config, and the honest limits of the trick.
nftables in 2026: Stop Pretending iptables Will Live Forever
iptables is in soft retirement. Here's why the nft shim isn't a long-term plan and what direct nftables syntax actually buys you.
Why Your VPN Is Already Detected
Encryption hides content, not shape. Here's why state-level censors don't read your VPN traffic, they recognize it, and what actually still works in 2026.
YubiKey + age: Hardware-Backed Encryption Without GPG
Use age + age-plugin-yubikey to encrypt files with a key that literally cannot leave your hardware token. No GPG drama required.
Pangolin: Self-Hosted Cloudflare Tunnel Alternative
Pangolin gives you Cloudflare Tunnel-style access to home services via a $5 VPS, WireGuard mesh, and zero vendor lock-in.
Sigstore + Gitsign: Signed Commits Without GPG Pain
Keyless signed git commits with Sigstore and Gitsign, no GPG key rot, no passphrase prompts. OIDC-backed ephemeral certs that just work.
Sealed Secrets vs External Secrets Operator
Sealed Secrets vs External Secrets Operator: which Kubernetes secret manager fits your GitOps workflow best, home lab cluster or production multi-tenant setup?
Renovate vs Dependabot: Self-Hosted Dependency Bots
Renovate vs Dependabot for self-hosted teams: config depth, ecosystem coverage, self-host paths, and which bot wins for Forgejo/GitLab shops.
Mesh VPN Showdown: Tailscale, Nebula, ZeroTier, NetBird
Tailscale vs Nebula vs ZeroTier vs NetBird, honest comparison of mesh VPN options for homelabs, small teams, and self-hosters in 2026.
Self-Hosted Email Gateways in 2026
Self-hosted secure email gateways compared: Proxmox Mail Gateway vs Hermes SEG vs DIY Rspamd, plus which classic appliances are now abandonware.