Articles

How I added a Mastodon-based comment system to this Pelican blog - no databases, no third-party services, just the Fediverse’s public API and a bit of JavaScript.

How I obtained my own AS number and IPv6 prefix, set up a FreeBSD BGP router with FRR, and built a tunnel overlay to bring globally routable addresses to servers that already have provider-assigned IPv6 - using dual-FIB policy routing to make both coexist.

A comprehensive guide to configuring PF on FreeBSD, covering core concepts, practical configurations for jails and dual-stack networking, and advanced techniques including brute-force protection and bastion host setups with authpf.

Exploring atomic desktop Linux distributions, the technology stack behind them, and why Universal Blue’s Aurora and Bazzite represent a compelling vision for reliable, maintainable desktop systems.

A clean approach to integrating FreeBSD 15 into a FreeIPA realm using native components - Kerberos for authentication, LDAP for identity, and no local user management.

Fixing Life is Strange Before the Storm on modern Linux distributions by compiling a small shim library that restores deprecated glibc internal functions.

Running CryptPad in a FreeBSD VNET jail with isolated networking, NAT via PF, and Caddy for TLS termination.

A technical deep-dive into running a modern, secure mail server on FreeBSD 15.0 using VNET jails, ZFS encryption, and GeoIP-aware firewalling.

Using LD_PRELOAD to surgically hide a PC/SC smartcard reader from a Rust-based OpenPGP SSH agent, allowing two incompatible hardware security stacks to coexist peacefully on the same system.

Using MaxMind’s GeoLite2 database with FreeBSD’s PF firewall to restrict client-facing services to specific countries, reducing brute-force attempts and log noise while keeping essential services globally accessible.