Debian 13 Trixie: The Sysadmin’s Honest Review — What Changed, What Broke, What Matters
Debian 13 Trixie: kernel 6.12, Python 3.13, OpenSSL 3.4. Breaking changes, io_uring hardening, and production upgrade guidance.
Server Administration
Guides, tutorials, and best practices for managing Linux servers, configuration, security, and deployment in production environments.
WireGuard Mesh Networking for Homelabs: Topology, Routing, and Persistent Keepalive Explained
Learn WireGuard mesh networking for homelabs with proper topology, routing, and keepalive settings. No single point of failure, direct peer connections.
Deploying Prosody XMPP Like a Pro: MUC, PubSub, OMEMO, and Modern Clients on Your Own Server
Prosody XMPP deployment guide: lightweight server with MUC, PubSub, OMEMO encryption, and modern clients. Federated self-hosting without Matrix’s RAM overhead.
Stop Letting PostgreSQL Bloat Kill Your Performance: Autovacuum Tuning for High-Write Workloads
Master PostgreSQL autovacuum tuning to eliminate table bloat, boost query performance, and prevent transaction ID wraparound in high-write workloads.
SCIM Provisioning Between Authentik and Self-Hosted Apps: Tested Patterns That Actually Work
Learn SCIM provisioning with Authentik to automatically manage users across self-hosted apps. Covers architecture, working configurations, and failure modes.
Chrony for Sub-Millisecond Time Sync: The Configuration That Actually Beats ntpd
Configure Chrony for sub-millisecond time sync on Linux. How Chrony beats ntpd with adaptive polling, faster convergence, and system clock reliability.
Drone vs Woodpecker vs Gitea Actions: Which CI Actually Belongs on Your Self-Hosted Forge?
Compare Drone, Woodpecker, and Gitea Actions for self-hosted CI. Learn which CI system best fits your Gitea or Forgejo forge with detailed tradeoffs.
Stop Managing Your Homelab in a Spreadsheet: NetBox and Nautobot for Real IPAM/DCIM
Replace spreadsheets with NetBox or Nautobot for homelab IPAM. Free, open-source DCIM tools for managing IP space, devices, and network documentation locally.
Keycloak in Production: Clustering, Custom Themes, Federation, and Auth Flows That Actually Work
Deploy production-ready Keycloak with distributed clustering, LDAP federation, custom themes, and enterprise SSO for 50,000+ users.
Stop Bleeding I/O: The dm-crypt & LUKS2 Performance Tuning Playbook
Stop I/O bottlenecks with LUKS2 and dm-crypt tuning. Learn kernel-level optimization, cryptsetup flags, and configuration for production encryption.