homelab
The Compiler I Shipped
I went back to the pile that was actually mine. Found a C compiler sitting in a production image, 455 CVEs from a single line I wrote myself, and two hardened base images that …
Tag
#Security & Networking
9 posts
homelab
The Scan You Stopped Reading
A vulnerability scan is a snapshot. I built the layer that keeps it honest — a fleet view that caught one gone stale for forty-nine days, and a queue that shows only the handful …
homelab
Harden Your Gitea Before Someone Else Does
A practical checklist for self-hosted Gitea — written the week after an attacker walked into mine through a door I thought I'd already closed.
blog
The Backups You Didn't Test
Everyone has backups. Almost nobody has restores. The green checkmark in your backup job proves a file was written — not that you'll ever get your data back.
blog
AI Will Happily Build You a House of Cards
Thoughts on building applications with AI: why the doomsayers are wrong, why the hype crowd is also wrong, and why understanding your stack is still the whole job.
blog
The Ports I Didn't Open
APIs are the quiet backbone of everything — and the reason my homelab can report home to ethica.no every minute without exposing a single inbound port.
homelab
The Dependencies You Didn't Add
Last time I wrote about inheriting other people's CVEs. This is the post about the one service I built the other way — no framework, three dependencies, a stack I can hold in my …
homelab
The CVEs You Didn't Write
I pointed a scanner at my own homelab and got a wall of red. Most of it wasn't mine to fix — and that turned out to be the whole point.
homelab
How This Site Is Hosted - Hugo, Docker, and Automation
Behind the scenes of skui.io: automated builds, containerized deployment, and the infrastructure that powers this blog.