Notes
Blog & notes
Practical write-ups on infrastructure, home lab work and the small lessons that are easy to forget. Written mostly for future me, shared in case they help you too.
Cloudflare Access without exposing ports
How to reach self-hosted web apps from anywhere using Cloudflare Tunnel and Access, with no inbound ports and identity checks in front of every request.
Rootless Podman with Quadlet: the one tip that matters
Run containers as an ordinary user with Podman Quadlet and systemd, and why enabling lingering is the step everyone forgets.
Proxmox backup retention that won’t surprise you
A practical approach to keep-last, daily, weekly and monthly retention on Proxmox Backup Server, plus garbage collection, verification and restore testing.
Lessons from DNS caching and NXDOMAIN
Why a fixed DNS record can still return NXDOMAIN, how negative caching and the SOA minimum work, and how to troubleshoot layered DNS caches.