A personal publication dedicated to web architecture, containerized infrastructure, and digital self-reliance.
As teams replace expensive SaaS subscriptions with bespoke internal tools, the biggest trap is over-engineering the persistence tier. Why flat files, Git-backed Markdown, and single-file SQLite in WAL mode outperform distributed client-server databases in latency, cost, and operational resilience.
The era of paying $45/user/month for glorified CRUD wrappers is coming to an end. How generative AI and agentic engineering are inverting the build-versus-buy equation, dismantling the SaaS subscription tax, and empowering sovereign developers and small-to-medium businesses.
Why we ditched Google Analytics and built a lightweight, 100% self-hosted visitor telemetry engine in Next.js: using cryptographic daily rotating salt hashes, offline MaxMind GeoIP lookups, navigator.sendBeacon, and zero third-party cookie banners.
A deep-dive systems engineering guide to nesting Docker securely inside unprivileged Proxmox LXC containers: mastering subuid/subgid user namespace remapping, storage driver performance over ZFS datasets, AppArmor profiles, and solving the dreaded bind-mount permission trap.
How we migrated our entire continuous deployment pipeline from GitHub Actions to self-hosted Gitea Actions running on a Proxmox LXC runner: achieving zero-cloud dependency, sub-minute builds, secure private network deployments, and persistent state management.
A complete, zero-dependency architectural guide to building RFC 6238 Time-based One-Time Passwords (TOTP) and RFC 4226 HOTP in TypeScript—handling Base32 decoding, HMAC-SHA1 dynamic truncation, virtualized LXC container clock drift, and single-use offline recovery codes without external cloud auth dependencies.
Why putting Cloudflare in front of your self-hosted stack is essential: shielding your origin IP, eliminating inbound firewall ports with Cloudflare Tunnel, mitigating edge DDoS attacks, offloading bandwidth, and enforcing Zero Trust security boundaries.
A comprehensive architectural breakdown of how this blog was engineered from the bare metal up: Proxmox LXC containers, Docker host networking, privacy-first local analytics, and a zero-cloud GitOps CI/CD pipeline.
An introduction to DevPulse—a modern, zero-cloud-lock-in tech blog dedicated to self-hosting, system architecture, and software craftsmanship.
A practical step-by-step guide to running containerized web applications at home or on private VPS nodes securely with reverse proxies and SSL.
An in-depth breakdown of Proxmox VE: the good, the bad, and the ugly, exploring whether it's the right virtualization platform for your homelab, business, or enterprise.
Why using .local domains for internal networks leads to mDNS conflicts, SSL/TLS certificate failures, and subtle resolution issues—and what to use instead.
Crucial considerations for securing hybrid IT environments, from access management and least privilege to unified logging and data sovereignty.
Why the fading use of tape backups leaves organizations vulnerable to ransomware and long-term data loss, and why tape still deserves a place in a modern hybrid backup strategy.
How the Broadcom acquisition and rising licensing costs are pushing enterprises toward Microsoft Azure Stack HCI as a viable hybrid virtualization alternative.
Examining why the rush to the cloud isn't always the right financial or operational move for every company, and when on-premises infrastructure wins.