Your Own .onion Site From Scratch: Vanity Addresses, Stealth Onions, and Real Hardening
Set up hardened Tor v3 onion services with vanity addresses, client authorization, and comprehensive security hardening techniques.
WireGuard Mesh Networking for Homelabs: Topology, Routing, and Persistent Keepalive Explained
Learn WireGuard mesh networking for homelabs with proper topology, routing, and keepalive settings. No single point of failure, direct peer connections.
Deploying Prosody XMPP Like a Pro: MUC, PubSub, OMEMO, and Modern Clients on Your Own Server
Prosody XMPP deployment guide: lightweight server with MUC, PubSub, OMEMO encryption, and modern clients. Federated self-hosting without Matrix’s RAM overhead.
INP Explained: How to Debug the Core Web Vital That’s Killing Your Search Rankings
Debug INP, Google’s core web vital replacing FID. Learn what INP measures, understand tooling gaps, and implement code patterns to improve search rankings.
Effect-TS: Stop Writing Fragile TypeScript and Start Using Typed Effects
Effect-TS brings type safety to errors, dependencies, and side effects in TypeScript. Learn how to build robust programs that actually work in production.
Self-Hosted Renovate: Automate Dependency Updates Without Giving Up Control
Self-host Renovate to automate dependency updates. Ideal for GitLab, Gitea, and private repos. No external services, stateless, and simple to deploy.
mTLS from Scratch in Go and Rust: Lock Down Your Services Without a Service Mesh
Implement mutual TLS for service authentication in Go and Rust. Generate certificates, set up your CA, and secure internal services without service meshes.
OWASP Top 10 2025 Walkthrough: Stop Copying Security Checklists — Here’s What Actually Fixes Things
OWASP Top 10 2025 explained with vulnerable code and real fixes. Understand broken access control, injection, and critical vulnerabilities.
Container Image Scanning at Scale: Harbor, Quay, and ECR Compared
Container image scanning at scale: compare Harbor, Quay, and ECR for registry scanning, CVE monitoring, and securing thousands of images in production.
Cloudflare D1: Run SQLite at the Edge Without Losing Your Mind
Cloudflare D1 brings SQLite to the edge, eliminating latency from distant databases. Learn how D1 works, replication, and sharding for production apps.