Notes

A boring, reliable TLS renewal routine 2026-10-18

Every few years I rediscover that certificate renewal is a thing that breaks exactly once: the day you forget it exists. The current routine is deliberately dull — acme.sh in cron, certificates copied to a plain directory, a reload hook per consumer.

The day my IPv6 prefix wandered off 2026-09-30

A residential prefix is a gentleman's agreement. Mine was renumbered on a Tuesday, and everything that hard-coded it failed in thirteen different ways. The fix was boring: derive, don't hard-code.

Quarterly backup drill 2026-08-14

A backup you have never restored is a rumour. Four times a year I pick one node, wipe a spare VM, and rebuild it from the archives with a stopwatch running.