Setting up OpenClaw is easy. Setting it up right so your AI agent actually does useful work autonomously takes some know-how. Quick Answer: OpenClaw is a self-hosted AI agent orchestration system that runs on TrueNAS. This guide walks you through installing OpenClaw from scratch, configuring LLM backends, setting up automated workflows,… Read more →
Security, DevOps & Trading Tech — Practical Guides
-
GitOps vs GitHub Actions: Security-First in Production
Migrating from GitHub Actions-only deployments to a hybrid GitOps setup with ArgoCD changes your security posture fundamentally—but the tradeoffs aren’t obvious until you’ve lived with both in production. The shift affects secret management, drift detection, and rollback speed in ways the docs undersell. Quick Answer: For security-critical production environments, GitOps (ArgoCD/Flux)… Read more →
-
Secure TrueNAS Plex Setup for Your Homelab
Learn how to set up Plex on TrueNAS with enterprise-grade security practices tailored for home use. Protect your data while enjoying smooth media streaming. Quick Answer: To securely run Plex on TrueNAS, create a dedicated jail or VM with isolated networking, mount your media datasets read-only, configure a reverse proxy with… Read more →
-
Stop Ngrok Tunnels: Enterprise Security at Home
Learn how to securely stop Ngrok tunnels using enterprise-grade practices scaled down for homelab environments. Protect your home network with these practical tips. Quick Answer: Instead of exposing your homelab services through ngrok tunnels, use Cloudflare Tunnels with Zero Trust policies or WireGuard/Tailscale VPN for enterprise-grade security. These alternatives provide encrypted… Read more →
-
CSS Gradient Builder: Fixing Annoyances of Existing Tools
Conic gradients are the forgotten sibling of CSS gradients—every online gradient builder handles linear and radial, but try generating a conic gradient for a loading spinner and you’re hand-writing CSS from MDN docs. That gap is exactly why this tool exists. Quick Answer: This CSS gradient builder solves the common frustrations… Read more →
-
Free VPN: Cloudflare Tunnel & WARP Guide (2026)
TL;DR: Cloudflare offers two free VPN solutions: WARP (consumer privacy VPN using WireGuard) and Cloudflare Tunnel + Zero Trust (self-hosted VPN replacement for accessing your home network). This guide covers both approaches step-by-step, with Docker Compose configs, split-tunnel setup, and security hardening. Zero Trust is free for up to 50… Read more →
-
Pod Security Standards: A Security-First Guide
Kubernetes Pod Security Standards 📌 TL;DR: I enforce PSS restricted on all production namespaces: runAsNonRoot: true, allowPrivilegeEscalation: false, all capabilities dropped, read-only root filesystem. Start with warn mode to find violations, then switch to enforce. This single change blocks the majority of container escape attacks. 🎯 Quick Answer: Enforce Pod Security Standards… Read more →
-
I Tested ArgoCD and Flux Side by Side — Here’s What Won for Secure GitOps
I run ArgoCD on my TrueNAS homelab for all container deployments. Every service I self-host — Gitea, Immich, monitoring stacks, even this blog’s CI pipeline — gets deployed through ArgoCD syncing from Git repos on my local Gitea instance. I’ve also deployed Flux for clients who wanted something lighter. After… Read more →
-
OAuth vs JWT: Choosing the Right Tool for Developers
I’ve implemented both OAuth and JWT in production systems across my career—from enterprise SSO rollouts to lightweight API auth for side projects. The single most common mistake I see? Treating OAuth and JWT as the same thing, or worse, picking one when you needed the other. They solve different problems,… Read more →
-
PassForge: Building a Password Workstation Beyond One Slider
I was setting up a new server last week and needed twelve unique passwords for different services. I opened three tabs — LastPass’s generator, Bitwarden’s generator, and 1Password’s online tool. Every single one gave me a barebones interface: one slider for length, a few checkboxes, and a single output. Copy,… Read more →