Wireguard

📁 Featured Work

Self-hosted infrastructure stack — Docker Compose, Caddy, monitoring, backups, and the orchestration glue that keeps it all running.

Internal tool — track all servers, their roles, and deploy status from one dashboard. Python + FastAPI + SQLite.

A small bash script that pulls, health-checks, and rolls back automatically — no docker-rollout, no Kubernetes, just bash.

Replace fail2ban with CrowdSec — shared blocklists, modern dashboard, and a bouncer that integrates with Caddy and iptables.

A practical, step-by-step guide to hardening a fresh Ubuntu VPS for hosting real workloads — secure, automated, reproducible.

Self-hosted uptime monitoring — HTTP, TCP, DNS, and even cron job health checks. Better than Pingdom, free forever.

Set up WireGuard on a VPS so you (and only you) can reach internal services without exposing them to the internet.

How a single missing index, combined with a cron job running at peak, locked up the entire database for 47 minutes. Full timeline and lessons.

First post — the AI-experiment kicks off. Why this site, what's here, and how it was built.