Technical writing on backend engineering, debugging, and system design
A segfaulting Docker service, an unlimited core ulimit, and a bind mount silently filled my server with crash dumps until SSH stopped working. Here is how I found it, fixed it, and made sure it never happens again.
How I deployed Frappe HRMS on my own infrastructure using Docker Compose, Caddy, Cloudflare, and WireGuard — with automated backups, user access control, and a rollback strategy.
A deep dive into analyzing a deployed Hermes agent's RAM and disk footprint, the five changes that cut its memory reservation in half, and the SQLite performance tuning that made it snappier.
A debugging story about running WSL Ubuntu off a flaky external HDD — a slow, fragile .zshrc that lost opencode from PATH, ext4 journal recovery eating the first boot, and 71 crash-orphaned junk files quietly piling up in $HOME.
Running an MTProto proxy on a VPS so I can connect when Telegram is blocked.
Running a WireGuard VPN server in Docker on a VPS for personal use.
Why I moved my autonomous AI agent (Hermes) from an Incus container to a hardened Docker Compose stack — seccomp, read-only rootfs, dropped capabilities, network segmentation, and the tradeoffs I made along the way.
A debugging story about orphaned processes, memory pressure, and the simple fixes that prevent long-running AI agents from silently consuming your server's RAM.
A real-world walkthrough of securing a production Ubuntu server — SSH hardening, fail2ban, firewalls, kernel tuning, Docker security, and the gaps I'm still fixing.
SSH stopped working. Telegram revoked my bot token. My AI assistant froze. It looked like an attack. The logs told a different story.
A deep architectural walkthrough of Wraft's digital signing pipeline — from Rust NIFs that parse PDF geometry, through Java signing JARs, to Elixir/Oban workflow orchestration — and how every piece connects.