Automation
Publishing a static site on shared hosting: the real problems I solved
A Next.js bug that blocked every upload to Altervista, shared hosting limits on security headers, and a layout bug that broke words in tables.
5 min read
Blog and guides
Technical guides and notes
Procedures, configurations and reasoning on virtualization, networking, systems, backup and security. Commands copy with one click; notes flag the places where it's easy to go wrong.
12 articles
- Automation
A hidden CSS bug in my homelab dashboard: the unclosed comment
Rebuilding the self-hosted dashboard with real data, a binary copy-paste that gets corrupted, and an unclosed CSS comment that silently disables an element.
5 min read - AI and machine learning
Applied AI for infrastructure: log analysis with a local model
How to use a local language model to summarize and classify system logs, masking sensitive data and leaving the final decision to a person.
8 min read - Automation
Provisioning Proxmox VMs with cloud-init templates and Ansible
How to build a cloud-init template on Proxmox VE, clone it with qm and automate the same flow with Ansible, keeping secrets out of Git.
8 min read - Networking
WireGuard: remote access and site-to-site VPN without the complications
A guide to WireGuard on Debian: keys, server and client configuration, IP forwarding, a site-to-site VPN between two sites and good peer management practices.
7 min read - Linux and Windows Server
Windows Server: a basic Active Directory lab with AD DS, DNS and GPO
How to build a test Active Directory domain on a Proxmox VM: AD DS role, integrated DNS, OUs, users, groups, GPO, joining a client and backup.
7 min read - Virtualization
Unprivileged LXC containers on Proxmox: bind mounts and UID mapping
Why a bind mount in an unprivileged LXC container shows nobody-owned files, and how to fix it with UID math or with lxc.idmap, subuid and subgid.
8 min read - Linux and Windows Server
Monitoring infrastructure with Prometheus and Grafana in an LXC container
How to collect metrics from Linux and Proxmox VE nodes with Prometheus, visualize them in Grafana and get alerts, in a dedicated unprivileged LXC.
8 min read - Virtualization
Three-node Proxmox VE cluster: setup, quorum and first checks
How to create a three-node Proxmox VE cluster with pvecm, read the quorum, use a QDevice with two nodes and handle emergency recovery with pvecm expected.
7 min read - Cybersecurity
SSH hardening on Debian: a practical checklist
ed25519 keys, drop-in configuration, root and password logins disabled, fail2ban and a testing method so you don't lock yourself out of a Debian server.
8 min read - Networking
Segmenting the network with VLANs: a reference design for a homelab
Why to split the network into segments, a VLAN layout for management, servers, clients, IoT and guests, the Proxmox VE VLAN-aware bridge and the most common mistakes.
6 min read - Storage and backup
3-2-1 backup strategy with Proxmox Backup Server and a NAS
How to apply the 3-2-1 rule with Proxmox Backup Server: datastore, retention, verification, encryption, off-site copy, test restores and a final checklist.
7 min read