// Blog
Tech Ramblings

System administration, security holes, and cloud misconfigurations

/* Warning: May contain traces of sarcasm */

Featured Post

How I Accidentally DDoSed My Own Server

A cautionary tale about writing bad cron jobs and the importance of rate limiting. Includes graphs of my pain and what I learned about monitoring.

/* 10/10 would not recommend */
Read More
IPv6 Implementation

IPv6: Why Your Excuses Don't Work Anymore

The IPv4 apocalypse is coming. Here's how to implement IPv6 without losing your sanity or your hair.

/* No, NAT is not a security feature */
Bash Scripting

Bash Scripts That Will Make You Question Your Life Choices

Collection of bash scripts that somehow work in production. Includes my infamous "turn it off and on again" automation.

/* Don't show this to your CS professor */
Kubernetes

Kubernetes: Because Your App Wasn't Complicated Enough

A realistic look at when you actually need Kubernetes (and when you just need a single well-configured server).

/* YAML engineer not included */
SSH Security

SSH Hardening: Because Password Auth is Basically a Welcome Mat

Step-by-step guide to securing SSH that even your "it works fine" colleague can't argue with.

/* Hackers hate this one weird trick */
Backup Strategy

The Backup Paradox: Nobody Cares Until They Do

Why your "it hasn't failed yet" backup strategy is a time bomb, and how to fix it before management notices.

/* Test your backups or perish */
Server Monitoring

Monitoring: How to Panic Before Your Users Do

Setting up monitoring that actually alerts you to problems before they become outages (and your problem).

/* The server is always on fire */