OpenTofu on the Proxmox box. The homelab gets a plan phase.
on opentofu, proxmox, homelab
The hypervisor is the one server I never treated as code. OpenTofu and the bpg/proxmox provider fix that in an evening — template prep included.
Read more
Read more
The Tailscale feature I under-used for two years: exit nodes.
on tailscale, vpn, networking
I used Tailscale to reach boxes. The exit node turns it around: your laptop’s whole internet leaves through a machine you own, on any network you distrust.
Read more
Retire the AWS keys in your GitHub secrets. OIDC, in one sitting.
on github actions, aws, security
Long-lived AWS keys in repo secrets are rotation debt with a blast radius. The OIDC route is fifteen minutes of IAM and no stored credentials at all.
Read more
EKS Pod Identity vs IRSA. I moved one cluster to find out.
on eks, iam, kubernetes
IRSA works, but it costs an OIDC provider and a trust policy per cluster. Pod Identity moves that bookkeeping into the EKS API. The actual differences, measured on a real migration.
Read more
Four routes to an AI flyer. Only two of them keep your text.
on design, ai, marketing
AI can draw a flyer in seconds and still put your opening hours on the wrong planet. Which generator to pick depends on one question: how much text is on it?
Read more