Blogs
Headroom: The Private Finance Overview School Never Gave You
A self-hosted Norwegian finance tracker. Equity after tax, ten years of salary against CPI, what you cost your employer, the month, and a fifteen year forecast.
Tuning Azure WAF Without Paying Log Analytics Prices
Azure WAF false positives are painful to tune and expensive to analyse in Log Analytics. lawless-waf queries the archived logs on your laptop with DuckDB and hands you the Terraform exclusion.
Seeing Into a Talos Cluster: The Observability Stack I Actually Run
Metrics, logs, traces and runtime security on a Talos Kubernetes cluster: Prometheus, Loki, Tempo, Grafana and Falco, wired into one dashboard.
Locking Down Your Cluster: Rolling Out Cilium Network Policies Without Breaking Everything
Rolling out CiliumNetworkPolicies on Kubernetes without breaking traffic. Start in audit mode with Hubble, move to default-deny, and dodge the gotchas.
Surviving the NGINX Ingress EOL: A Zero-Downtime Migration to Traefik
ingress-nginx is reaching end of life. A zero-downtime migration to Traefik and the Gateway API on Kubernetes, with the cutover plan and pitfalls to avoid.
Getting Started with Kubernetes: A Quick Start Guide
A beginner quick start for Kubernetes: the core objects, how pods, deployments and services fit together, and the first commands to run a workload.
Yet Another Tech Blog (I'm Sorry)
Why I built yet another tech blog, and how it ships: a Hugo site containerised and deployed to Kubernetes through GitOps with GitHub Actions and ArgoCD.