Writing
Notes on how I build, run and review the work behind this site, newest first.
-
Moving sign-in to authentik in phases
Why I’m replacing Authelia with authentik one consumer at a time, with the identity configuration in git and a rollback for every phase.
-
Taking Plex off Cloudflare’s proxy
Why my media server’s internet path left Cloudflare’s proxy for a small cloud machine that passes the encrypted stream through untouched.
-
Checking Cloudflare Access twice
Why the tunnel connector at my origin re-checks the Cloudflare Access token the edge already checked, and what a small Worker does with the same token.
-
A tunnel for each server, and no open web ports
How each of my servers opens its own outbound tunnel to Cloudflare, what the cloud firewalls still admit, and why the house never had a choice.
-
Checks that pass while the thing they guard is broken
Six verification checks that printed success while the thing they guarded was broken, what each got wrong, and the habits that now catch them.
-
Plan in one session, build in another, review in the repo
How I split work between a Claude session that plans and reviews and a Claude Code session that builds, and what happened when a check went wrong.