Why curl can't reach example.com anymore
Debugging TLS failures in a NixOS microvm that turned out to be a system-wide Cloudflare certificate chain issue.
tlsnixoscurlcloudflarecertificates
Archive
Every post, newest first.
2026
Tuning qBittorrent and WireGuard Throughput on NixOS
Squeezing more throughput out of qBittorrent in a WireGuard VPN namespace with BBR congestion control, TCP buffer tuning, and systemd tweaks.
nixosqbittorrenthomelabwireguard
Running iBGP Over WireGuard for DN42 and Beyond
Using iBGP over a WireGuard tunnel to automatically propagate DN42 routes from a VPS to the home network, replacing fragile static routes.
networkingbgpwireguardhomelabnixos
Monitoring the *arr Stack on NixOS
Setting up Prometheus and Loki monitoring for Radarr, Sonarr, and Prowlarr with Exportarr metrics and log-based alerting on NixOS.
homelabnixosprometheuslokimonitoring
Bypassing Telekom's Cloudflare Congestion with Tailscale
Routing Cloudflare traffic through a VPS via Tailscale subnet routing to work around Telekom's peering bottleneck. Connection times dropped from 11s to under 400ms.
networkingtailscalenixoscloudflare
Netzbremse: How Telekom Throttles the Internet
Deutsche Telekom's refusal to peer properly with Cloudflare degrades a fifth of the internet for German fiber customers. A rant about monopoly rent-seeking.
networkingpeeringrant
Building a Live Stats Page for My Homelab
Connecting a Cloudflare Workers blog to a homelab Prometheus instance to display live uptime, storage, network, and DNS stats.
homelabprometheusgonixos
Traffic Shaping with CAKE on NixOS
Setting up CAKE SQM on a 1 Gbit fiber connection to eliminate bufferbloat and keep latency low under heavy load.
nixosnetworkinghomelab
Automatic WireGuard Failover with NixOS and Prometheus
Building automatic failover for multiple WireGuard VPN endpoints using systemd services and Prometheus-based health monitoring.
nixoswireguardprometheushomelab
2023
Auto-updating ESPHome Devices with Home Assistant
Automating ESPHome firmware updates across multiple devices using Home Assistant automations.
esphomehomeassistantautomation
Telekom Glasfaser with Zyxel SFP ONT
Replacing Deutsche Telekom's fiber modem with a Zyxel PMG3000-D20B SFP module to plug fiber directly into the switch.
sfpfibertelekomopnsensenetworkzyxel
My Favorite Firefox Extensions
A curated list of Firefox extensions for privacy, usability, and development that I use daily.
firefoxextensionsrecommendations
Cloning OPNsense to Another Disk on a Live System
Step-by-step guide for cloning a running OPNsense ZFS installation to another disk without downtime.
opnsensefreebsdzfsdisk-cloningvirtualization
GRUB2: How to Avoid Boot Loops by Limiting Retries
A GRUB2 configuration that limits boot attempts per slot to prevent infinite boot loops on remote or embedded systems.
grub2resiliencefailoverrauclinux