Archive
Everything published in this engineering notebook.
Verifying a DNS change before declaring it done
A resolver-by-resolver checklist for safe address migrations.
A small TLS renewal runbook
How to make certificate renewal boring and observable.
Error pages that help instead of confusing people
Correct redirects and honest HTTP semantics for static sites.
A repeatable Linux network baseline
Small sysctl changes that are easy to understand and verify.
Backups that survive a container upgrade
A practical way to capture and restore stateful Docker services.
Designing an allowlist without locking yourself out
Safe exposure rules for private service-to-service links.