Rootknecht's Blog on Rootknecht.net

A hands-on demo of fixup commits that lets you attach a forgotten change to an earlier commit instead of piling up “oops” commits.

A practical look at making Pi safer to use: isolating each project in a Tart-based virtual machine, sharing only the required directories, and using Pi extensions to block risky access patterns and destructive Git commands.

This blog now supports German language

How to self-host a KOReader sync server using kosync-dotnet and Docker, wire it up behind Nginx, and connect it to a Crosspoint-flashed XTEINK device — including a fix for the “document hash not found” error on first sync.

A walkthrough of my personal self-hosted infrastructure for 2026: what I run on Unraid at home, what lives on a rented root server, and how I handle backups.

I tested AFFiNE, Anytype, and Appflowy as self-hosted alternatives to Obsidian.

A long-term comparison of Supernote, Remarkable, and Onyx Boox E-ink note-taking devices, focusing on writing feel, software, privacy, and real-world use.

How to use .http files with Neovim to restore a deleted Azure DevOps repository

Setting up a self-hosted Supernote private cloud using Docker compose and Nginx.

My experience after two years of using Kagi as a paid, privacy-focused search engine alternative to Google.

This post provides a Terraform NSG configuration that enables Azure Container Apps to work properly while maintaining strict network security.

Poor Man’s Web Framework: How Go’s embed Package Replaces Your Entire Web Stack

SNAT replaces a client’s IP with a static IP to simplify; this can be set up using iptables or nftables, as shown in a Docker example.

How to use Headscale and Tailscale for static IP routing on Debian and macOS.

A brief demonstration of how to connect to a PostgreSQL database via SSH, implemented using Docker Compose.

Back to the basics: a little journey about a custom Neovim configuration that got out of control and how I simplified my setup to make it faster and more maintainable than ever.

A comparison between the Onyx Boox Note Air 3 C and the Remarkable 2 reveals that both are highly capable E-ink note-taking devices, but they also differ in various aspects..

I bought a 2019 (not so dumb) feature phone in the year 2024.

How to create an Azure PostgreSQL instance without public access and passwords using Terraform while ensuring security.

In this blog post, I want to illustrate technical and “organizational” strategies to prevent you from accidentally deleting your $HOME (guess who has achieved this medal 🙈).

Nginx is a popular Web-server/-proxy that is often used to serve frontend applications within a Docker container.

I have been working with Kubernetes as a container orchestration tool for years.

In this blog post, I want to describe a workaround how to get downloaded binaries to work on NixOS.

My first experiment with NixOS was likely in October 2021 😄.

As you probably know, I am a big fan of the plain text file format.

Recently, I stumbled over Hurl which is an exciting tool in my opinion.

In this post I want to describe my experience with macOS and especially “the bad” and “the ugly” topics from last year’s post.

Due to recent written warnings because of including Google fonts I wrote a little python script that checks the resources, like fonts, a webpage loads.

My workflow for reading and storing articles from the web with reMarkable2 and Obsidian.

Recently, I had to check the connectivity to a Redis 6 TLS enabled and password protected instance.

In my daily business I have to deal with a lot of YAML files.

Imagine you require a simple reverse proxy for one of your servers but you don’t have the permission to install Nginx, Apache etc.

What is so special about a single binary with Go you might ask?

In this post I want to briefly describe how to build Docker images for both platforms at the example of a Docker image for troubleshooting purposes especially within a Kubernetes cluster.

I am (still) a big fan of RSS feeds, and I have built a neat collection of feeds on my self-hosted Tiny Tiny RSS.

In this post, I will explain why I switched from Lenovo laptops running Linux for over a decade to the “arch enemy” macOS.

Are you planning to get a NAS (network attached storage) because your data is growing?

While in my early days of working with Kustomize, I was missing some condensed practical hands-on how to build deployments with Kustomize and how to achieve common requirements in a multi-cluster setup.

A blog post about my current workplace setup

In this post I give an overview of my current Laptop and some of my hardware I use for work.

Impressions about my new keyboard - the ErgoDox EZ

Some shenanigans with ThinkPads

Trying to make Windows work as a Linux user.

In this article I want to share my experiences and common concerns on the way to becoming a freelancer in IT.

What do I understand with DevOps and the related topics Cloud Computing and Infrastructure as Code

In this article I explain why I have chosen Grav CMS, maybe a rather unknown solution, for knowledge.rootknecht.net.

Minimalistic Java Spring Boot application coming with a preconfigured Prometheus and Grafana allowing to get insights of your application as well as OS and container metrics.