Blog

└── Write-only off-site copies, encryption you can do but not undo, a pull-based replica for the big data, GitHub metadata exports, and restore recipes - making sure one incident cannot take both production and its backups

└── A small step-ca internal CA with manual and ACME issuance, and why automation turns certificate lifetime from an operational constraint into a security choice

└── Adding IndieWeb microformats2 and Webmention support to htsh.pl - and where the line is between "worth doing" and "checklist theater"

└── Setting up GitHub OIDC federation to AWS and Azure, so CI workflows get short-lived scoped credentials instead of static cloud keys

└── Running Claude Code and VS Code against the same local MLX MoE model using Rapid-MLX's native Anthropic and OpenAI-compatible APIs

└── Running several self-hosted GitHub Actions runners on one box via a GitHub App instead of a PAT

└── Another attempt at blogging on my own