Caddy and Local DNS for Network-Wide Dev Access
Your development servers run on localhost:4000, localhost:5173, and localhost:8080. Testing on your phone means typing 192.168.1.51:5173 from memory. Your tablet needs a different IP. A colleague o...
Derrek Landauer
A Local Dev Services Dashboard in Python
Working on five projects simultaneously means five development servers scattered across terminals. Port 4000 runs the blog—or was it 4001? Port 5173 is Vite, port 8070 is Python, and port 8123 is… ...
nohup for Background Processes: Use Cases, Tradeoffs, and Alternatives
SSH into a server, start a 12-hour training job, close your laptop—and the process dies. This happens because the shell forwards SIGHUP to child processes when the terminal disconnects. Screen and ...
Game Server Backup and Update Scripts with Automatic Rollback
Game server updates break worlds. A mod incompatibility corrupts player data. A config change causes crashes. You need to restore the backup—which you forgot to take, or took three days ago, or can...
VirtualBox VM Orchestration with a Simple Bash Script
Running a home lab with multiple VirtualBox VMs means clicking through the GUI to start five servers individually, hoping you remembered the correct boot order, and praying you didn’t forget to shu...
A Modular, Self-Documenting Makefile for Docker Compose
A reusable Makefile template for managing Docker Compose projects, featuring colored output, self-documenting help, environment management, database operations, and modular organization. Problem S...
Reproducible VPS Deployments with Bash and Age Encryption
This post presents a complete redeployment bundle for rebuilding a VPS from scratch: pack secrets with age encryption, deploy configs and services with a single script, and verify with an automated...
Self-Auditing Your VPS with an External Pentest Script
This post presents a bash script that audits a VPS from an external perspective: port scanning, TLS configuration, security headers, path traversal, API authentication, and information leakage. The...
VPS Security Hardening and Monitoring with Auditd, Fail2ban, and a One-Command Report
This post presents a complete VPS security stack: kernel hardening via sysctl, file change auditing with auditd, brute-force protection with fail2ban, automated updates with conditional reboots, Ge...
Automated Token Rotation for Rathole Tunnels
This post presents a zero-downtime token rotation system for rathole tunnels: the server generates new tokens, clients pull them automatically, and the server finalizes after a grace period. No man...