The MTU Mismatch That Makes SSH Work Over WireGuard But Breaks Everything Else
Why a WireGuard tunnel can pass SSH and ping fine while web pages and file transfers hang, and how to fix it by getting the MTU right.
$ ls ./homelab
Homelab
Split-Horizon DNS: Why Your Reverse Proxy Setup Needs Two Different Answers for the Same Hostname
How to make service.example.com resolve to a different address inside your LAN than it does on the public internet, and why skipping this causes broken NAT hairpinning and cert mismatches.
Your Backup Job Says 'Success.' That Doesn't Mean the Data Is Restorable.
A backup that reports success can still be silently useless. Here's how to build a restore test you actually run, using restic as the example.
Why Your Two-Node Proxmox Cluster Keeps Losing Quorum (and What a QDevice Actually Fixes)
Two-node Proxmox clusters lose quorum on reboot or network blips because of basic vote math. A QDevice fixes it without buying a third full node.
Passing a USB Serial or Webcam Device Into an Unprivileged Proxmox LXC
Group membership doesn't save you here — unprivileged LXC UID remapping means the container sees your bind-mounted device as nobody:nogroup. What actually grants access, and the two config lines that do it.
ip neigh show Lies: Always arping Before You Assign a Static LAN IP
ip neighbor show only reflects hosts that have talked recently. An absent ARP entry does not mean an IP is free — here's why that matters and the one-line check that actually proves it.