2026
-
Self-hosting Vaultwarden, and the one path that ruins it
Deploying Vaultwarden behind nginx on a small VPS: closing signups properly, why disabling the web vault is worth the inconvenience, and the client-server version skew that produces a completely useless error message.
-
Metrics and a Homepage
VictoriaMetrics instead of Prometheus, why host networking is the simpler choice for a loopback-only metrics stack, and validating a homepage dashboard config before it takes the service down.
-
Encrypted offsite backups that verify themselves
Nightly age-encrypted backups from a small VPS to consumer cloud storage: why two different mechanisms for two shapes of data, why every run restores its own output, and the circular dependency that makes an encrypted backup useless.
-
PGP and SSH keys on a YubiKey
Moving a PGP key onto a YubiKey, restoring it on a second machine, wiring pass-git-helper into git, and generating FIDO2-backed SSH keys. Including which of it GitHub and GitLab refuse to support.
-
eSIM and WWAN on a ThinkPad P14s under Arch
Getting the Quectel RM520N-GL 5G modem, FCC unlock, and an eSIM profile working on Arch: firmware, lpac, and the AT commands in between. Ends with the one part that still does not work.
-
Linux tips and tricks
An Arch grab bag worth writing down: a three-branch dotfiles model with skip-worktree, dnsmasq under NetworkManager, keyd, amd_pstate, and the small fixes that are annoying to rediscover.
-
Forgejo on a small VPS: a backup forge
A complete self-hosted Forgejo deployment on a small VPS, pull-mirroring Codeberg, GitLab and GitHub. Every config file and script, plus the memory tuning that does not transfer between machines.
2025
-
MATLAB
Two MATLAB releases, two different glibc crashes on Arch, both diagnosed by reading the crash rather than guessing. Includes the R2026a WebGL fallback fix.
-
nixos
A short reference of the NixOS store, garbage collection and rebuild commands worth keeping to hand.
-
Networking in linux
WireGuard, GlobalProtect and eduroam 802.1X connections set up from the command line with nmcli.