Pants Build System: The Sane Way to Run a Python Monorepo
Master Pants build system for Python monorepos. Dependency inference, sandboxes, and caching solve monorepo problems faster than Bazel or Makefiles.
Month: August 2025
Debian 13 Trixie: The Sysadmin’s Honest Review — What Changed, What Broke, What Matters
Debian 13 Trixie: kernel 6.12, Python 3.13, OpenSSL 3.4. Breaking changes, io_uring hardening, and production upgrade guidance.
Your Own .onion Site From Scratch: Vanity Addresses, Stealth Onions, and Real Hardening
Set up hardened Tor v3 onion services with vanity addresses, client authorization, and comprehensive security hardening techniques.
WireGuard Mesh Networking for Homelabs: Topology, Routing, and Persistent Keepalive Explained
Learn WireGuard mesh networking for homelabs with proper topology, routing, and keepalive settings. No single point of failure, direct peer connections.
Deploying Prosody XMPP Like a Pro: MUC, PubSub, OMEMO, and Modern Clients on Your Own Server
Prosody XMPP deployment guide: lightweight server with MUC, PubSub, OMEMO encryption, and modern clients. Federated self-hosting without Matrix’s RAM overhead.
INP Explained: How to Debug the Core Web Vital That’s Killing Your Search Rankings
Debug INP, Google’s core web vital replacing FID. Learn what INP measures, understand tooling gaps, and implement code patterns to improve search rankings.
Effect-TS: Stop Writing Fragile TypeScript and Start Using Typed Effects
Effect-TS brings type safety to errors, dependencies, and side effects in TypeScript. Learn how to build robust programs that actually work in production.
Self-Hosted Renovate: Automate Dependency Updates Without Giving Up Control
Self-host Renovate to automate dependency updates. Ideal for GitLab, Gitea, and private repos. No external services, stateless, and simple to deploy.
mTLS from Scratch in Go and Rust: Lock Down Your Services Without a Service Mesh
Implement mutual TLS for service authentication in Go and Rust. Generate certificates, set up your CA, and secure internal services without service meshes.