✍️ Blogs
Field notes from building and operating real systems — infrastructure, backend architecture, and the self-hosting setups I run day to day. Every guide is written to be reproducible from a clean machine.
PostgreSQL Public Gateway with VPS + WireGuard
A reproducible walkthrough for publishing PostgreSQL from a home server through a small
VPS gateway over WireGuard: keys, tunnel, DNAT, SNAT, persistent iptables, pg_hba, and
end-to-end verification — without exposing port 5432 on the home router.
Read the guide →
Carve a Dedicated /data Volume Out of Free LVM Space on Ubuntu
A reproducible walkthrough for claiming the unallocated space Ubuntu leaves inside its
volume group — new LV, ext4, fstab, and a clean separation between OS and data.
Read the guide →
Expose a Home Server Safely with Cloudflare Tunnel and Cockpit
A production-shaped walkthrough for publishing services from a machine behind NAT — no port
forwarding, free TLS, DDoS protection at the edge, and an identity gate in front of your
admin panel.
Read the guide →
Expose the MicroK8s Dashboard Safely with Cloudflare Tunnel and systemd
A reproducible setup for publishing the MicroK8s Kubernetes dashboard through a Cloudflare
Tunnel — ClusterIP stays internal, the port-forward binds to loopback, and a systemd unit
keeps it alive across reboots and tunnel reconnects.
Read the guide →