Digital
Security This is an article about a secrets store I have built and not yet opened. The deployment pipeline is finished, all five share holders have passed the rehearsal, and the initialisation ceremony, after which
Digital What belongs in front of your services is not the fastest reverse proxy but the one whose defaults you are willing to live with for three years. Defaults, not feature tables, decide what happens to you
Digital Most companies that ask me about Kubernetes do not need a Kubernetes cluster. That is the first thing I say on the call, and half of those conversations end there, to everyone’
Digital An employee left a laptop in a taxi on Friday evening. The machine goes into lockdown from the panel, which also shows whether disk encryption is on and where the device was last seen, and the decision
Digital With a dozen servers, the state of the estate lives in an administrator’s head. With hundreds of them spread across providers, hypervisors and containers, infrastructure fleet management stops being
Digital Device fleets are usually managed with Intune, Jamf or Hexnode, and in most cases that is the right call. We built a self-hosted MDM not because the ready-made ones are bad, but because for our profile
Security A great deal has been written about Zero Trust, and almost all of it is about principles. It is far more useful to see what those principles turn into under real operation: which decisions get made, what
Digital The usual way to stand up a virtualization cluster is to do it by hand: install each node from a USB stick, click through the wizard, wire the network in the web UI, tweak configs until it works.
Digital The usual way to stand up a server is to do it by hand: order the box, open a remote console, click through the installer, edit a few configs, install the applications. It works, and for one machine it is even fast.
Digital A few months after I shipped my open-source Home Assistant integration for the Klipsch Flexus, a soundbar over-the-air update killed it. Reads still worked; every write came back 401 Forbidden.
Digital Shipping three iOS apps and their Android counterparts through App Store Connect and Google Play is a full-time operations job. Every release cycle requires certificate rotation, provisioning profile regeneration
Digital Rocket.Chat 8.4 shipped native voice calls. No Jitsi, no external VoIP providers, just click-to-call from any DM. Mobile clients worked fine: iOS and Android 4.72+ connected over TURN relay, audio came