Zero-trust homelab with Cloudflare Tunnel
How I put every inbound port behind a tunnel, ditched the VPN, and why my firewall rules got boring in the best way.
§ 01 — writing
Recent writing.
Field notes from consulting engagements and the homelab. Indonesian and English, depth over volume.
A field guide to reading CVEs
CVSS is not the score you should read first. Here is the order I walk an advisory in — and the tells that separate a real risk from a headline.
Wazuh for mining operations: a year in
Twelve months of SIEM alerts across four pits, three smelters and a lot of legacy PLCs. What stuck, what I ripped out.
Why I self-host everything
Not because SaaS is evil. Because ownership is a slow, compounding advantage — and I would rather pay in hours than in data.
A BI stack that fits on one VPS
For Indonesian SMEs priced out of Tableau and Snowflake, here is a BI stack that costs one small server and a week of setup.