2026.05.03
Built in a Weekend, Runs While You Sleep
A personal news pipeline assembled with Claude — from RSS feeds to a spoken-word podcast, all on a machine under the desk.
ai
20 min
Notes from an SRE
I’m an SRE who can’t stop building things. This blog is where I document the home lab projects, tools, and technologies I’m obsessing over — whether that’s something I picked up managing production infrastructure at scale or something I stood up in my basement at midnight.
~/featured
~/posts
2026.06.25
Raising Your AI from Toddler to Adult
A practical guide to shifting your mental model from treating AI as a search engine to treating it as a colleague, with three components (prompts, agents, instructions) that make …
ai
21 min
2026.05.20
Pocket ID HA, Part 2: Write Proxies, 401s, and the Edge Cases You Don't Think About Until Bed
Building the write proxy for Pocket ID’s HA secondary node exposed three cascading failures — a dropped cookie, mismatched JWT signing keys, and a WebAuthn registration edge …
security
12 min
2026.05.19
Building High-Availability Pocket ID with Encrypted Sync
How I designed a cross-site replication system for Pocket ID using ECIES encryption to safely sync user and OIDC config over plain HTTP.
security
13 min
2026.05.16
Evolving Squid to MITM HTTPS with HashiCorp Vault PKI
TLS bump in Squid shows you the SNI hostname of every outbound connection. In a world of supply chain attacks and container CVEs, that’s not enough. This is how I extended my …
security
19 min
2026.05.15
Adding Passkey Authentication to ADFS with PocketID
ADFS supports OIDC for downstream apps but only speaks SAML 2.0 for incoming federation. PocketID only speaks OIDC. So we extended PocketID’s Go backend with a SAML IdP …
security
20 min
2026.05.15
Eight Layers of ADFS Debugging: Adding PocketID as a ADFS Claims Provider
Connecting PocketID to ADFS as an external claims provider sounds straightforward until MSIS5007 appears and every assumption turns out to be wrong. This is the full account of …
security
23 min
2026.05.13
AI Doesn't Have to Be Serious: Building a Disney Dreamlight Valley Assistant
Not every AI project needs a business case. Here’s how I wired up a local AI assistant to help me play a cozy video game — using OpenWebUI, a MediaWiki MCP server, and a …
ai
13 min