TAG
A kiosk device needs predictable behavior after power cuts and network drops. My Raspberry Pi setup starts from a minimal OS image with only the packages required for display and remote maintenance.
Exposing SSH or dashboards directly to the internet is unnecessary risk for small deployments. WireGuard gives a cleaner and safer remote access model.
Once Raspberry Pi projects move from prototype to unattended deployment, process supervision matters more than application code.
Most Raspberry Pi projects run fine until they do not. Without metrics and logs, troubleshooting becomes guesswork. This post describes a minimal but production-like observability stack that fits on Pi hardware.
Many Pi setups claim to have backups but fail the first real restore. A backup is only valid if recovery has been tested against realistic failure scenarios.
Edge devices frequently run with broad network exposure and weak maintenance. Security hardening has to be practical, repeatable, and automation-friendly.
A long retrospective on how I hardened a Debian 12 VPS for public internet exposure with practical config details and operational lessons.
A detailed retrospective on using Apache2 as a reverse proxy in front of legacy internal applications with TLS, auth, and rollout control.
A long practical report on setting up Nginx edge caching and predictable zero-downtime deployments on a small VPS stack.
A detailed retrospective on migrating small VPS and homelab hosts to Ansible-managed infrastructure with practical role and rollout patterns.
A long retrospective on building a reliable Proxmox homelab cluster with practical lessons on storage, backups, networking, and operations.
A detailed retrospective on backup and disaster recovery drills across homelab and VPS services, including RPO/RTO design and practical runbooks.
A deep retrospective on tuning PostgreSQL performance with query analysis, index strategy, autovacuum adjustments, and connection management improvements.
A practical retrospective on building a reliable WireGuard site-to-site VPN between home lab and VPS environments with routing, MTU, and operational hardening lessons.
