Things I build, break, fix, and write about

9 July 2026
Checking Logpush field mappings after schema updates

Cloudflare Logpush datasets do not always announce when they change shape, and that is where the trouble starts. I check the field map against real exports, because a parser that still runs can be quietly throwing away useful data.

8 July 2026
Local DNS proxy now preserves DNSSEC records

Cloudflare One Client for Windows now leaves DNSSEC records alone, which is exactly the sort of change I like, because it stops the client quietly...

8 July 2026
Cloudflare One Client for macOS DNS search suffixes

Cloudflare One Client for macOS can make a short hostname behave very differently, and most of the pain sits in the suffix list rather than DNS itself...

7 July 2026
Tracing acme.sh certificate handling in TLS interception

I spent too long chasing the neat version of TLS wiretapping reconstruction, then found the mess: shell parsing, token limits, and renewal timing. The...

Latest blog posts you might like

30 April 2026
n8n | stable

n8n 2 18 5: hide AI workflows, warn on publishing AI gateway creds, editor fixes, open executions from Connect usage, OpenAI dynamic image models

28 April 2026
Testing Proxmox restores before you rely on them

A green job in a Proxmox backup guide means very little until the restore boots, logs in, and serves traffic. I have trusted the dashboard before, only to find the archive was fine and the recovery...

27 April 2026
Network segmentation for vehicle telemetry in Home Assistant

Modern cars are noisy little computers, and vehicle telemetry isolation only works if you treat them that way from the start. I put the car on its own VLAN, lock the firewall down, then let Home...

26 April 2026
Isolating Android on a VLAN with firewall rules and DNS split

I would not migrate an Android phone into my homelab blind. A clean Android homelab firewall DNS split, with VLAN isolation and hard DNS rules, keeps the phone useful without letting it sniff around...

26 April 2026
Security Advisory – 24 Apr 2026

Daily security advisory summary for 24 Apr 2026

25 April 2026
Setting lifecycle tracking for kitchen appliances with Home Assistant

I stopped treating appliance failure as a surprise and built a Home Assistant replacement schedule around dates, run counts, and service history. It is plain, slightly dull, and far more useful than...

25 April 2026
Security Advisory – 24 Apr 2026

Daily security advisory summary for 24 Apr 2026

24 April 2026
Network segmentation with VLANs, DNS and firewall rules

A proper network blueprint is mostly unglamorous discipline, VLANs with a job, DNS that stays in its lane, firewall rules that mean something, and DHCP reservations that do not rely on memory. Get...

24 April 2026
Security Advisory – 23 Apr 2026

Daily security advisory summary for 23 Apr 2026

23 April 2026
Safe ways to remove Copilot from Windows applications

Windows has a habit of putting Copilot back after updates, so I check policy first, then the package itself. If you need to remove Microsoft Copilot from Windows properly, the trick is knowing which...