/dev/io

A DankMaterialShell widget that talks BLE to a Linak DPG1M controller, with sit/stand presets and height display, wired through Nix.

A small Nix-built helper waits for the Adv360 bootloader drive, copies the correct UF2, and waits for the flash to finish.

What still works for a responsive Linux desktop under compile load: scx_bpfland, bounded Nix build fan-out, a ZFS ARC cap - and the classic tuning advice that no longer does anything.

Self-hosting mail means taking over deliverability from a provider.

Disk latency on my hypervisor looked like it had been climbing for three weeks: ratenodediskwritetimesecondstotal5m / ratenodediskwritescompletedtotal5m gave seconds per write on an NVMe mirror, while

Attic exposes no /metrics and logs nothing by default.

Of 71,433 Firefox extensions carrying an open source license on AMO, only 18,734 link a public repository.

An ESP32 bonds with my iPhone over Bluetooth and republishes its notifications to Home Assistant, so apps with no integration become sensor state and history.

archive.is resolved instantly but returned an IP that dropped port 443.

If you run your own mail server but send through a provider, the relay changes the message and the picture you get of it.

I moved mailbox storage and inbound mail to Stalwart at home, while leaving outbound reputation and transactional delivery to a provider.

I reverse engineered a 22 GiB Acronis True Image backup chain and wrote a read-only Go extractor for its complete snapshots.

Working out the iOmeter Bridge's BLE onboarding protocol - GATT, HDLC framing, gRPC-over-Bluetooth - to do what the app won't: join a hidden Wi-Fi network.

Reverse-engineering a Tuya-OEM e-ink frame: the BLE protocol, a public S3 bucket, a hardcoded AES key for cloud creds, and why the firmware blob is a dead end.

Flashing a SONOFF dongle as a Thread radio, running the border router in Home Assistant, and routing the Thread mesh to a separate client VLAN from a NixOS router.

Tapping the Lelit Mara X read-only diagnostic UART and putting boiler and HX temperatures on a 3.5-inch panel with ESPHome and LVGL 9.

Using zmk-nix to build ZMK firmware for the Kinesis Advantage 360 Pro with a reproducible Nix flake, no Docker or GitHub Actions needed.

A year of Hetzner auction data: weekly volume down 43% since February, EPYC and Ryzen 9 inventory cratering, restocks shifting to budget CPUs.

Starla is a Rust reimplementation of the RIPE Atlas software probe with a NixOS module and Prometheus metrics.

A thought about binary I/O between LLM agents and the tools they call.

OpenRouter can broadcast OTLP traces for every LLM request.

Ordered something on AliExpress and it arrived in an Amazon package.

Cloudflare Workers are stateless and can't be scraped.

My apex domain kept redirecting to the old host after migration, despite correct DNS and certs.

If you run a local DNS resolver with custom entries splithorizon DNS, Caddy's DNS01 ACME challenges can fail silently.

I implemented DoQ upstream support in Blocky and cut cold encrypted-DNS latency from 20ms to 4ms.

Making microvm.nix VMs show up in machinectl and reachable over SSH-via-VSOCK, using the RegisterMachineEx machined API added in systemd 259.

curl fails with 'certificate rejected (28)' on Cloudflare-hosted sites after NSS 3.111 distrusted the AAA Certificate Services root.

Tuning qBittorrent throughput inside a WireGuard VPN namespace on NixOS: BBR congestion control, TCP buffer sizing, disk I/O threads, and systemd priorities.

Default CUBIC congestion control undershoots throughput on WireGuard tunnels.

iBGP over a WireGuard tunnel to propagate DN42 routes from a VPS to the home network, replacing fragile static routes.

Setting up Prometheus and Loki monitoring for Radarr, Sonarr, and Prowlarr with Exportarr metrics and log-based alerting on NixOS.

Routing Cloudflare traffic through a VPS with Tailscale to work around Telekom's peering bottleneck.

Deutsche Telekom refuses to peer properly with Cloudflare, degrading a fifth of the internet for German fiber customers.

Wiring a Cloudflare Workers blog to a homelab Prometheus behind a dynamic IP, using SigV4-signed requests and edge caching to show live uptime and stats.

Setting up CAKE SQM on NixOS to fix bufferbloat on a 1 Gbit fiber PPPoE line, including IFB ingress shaping and overhead compensation for a low-latency A rating.

Automatic failover across multiple WireGuard VPN endpoints on NixOS, using systemd services and Prometheus packet-loss metrics to switch to the healthiest server.

If your root account is locked common on NixOS, systemd's rescue mode normally refuses to start.

Automating ESPHome firmware updates across multiple devices using Home Assistant automations.

Replacing Deutsche Telekom's fiber modem with a Zyxel PMG3000-D20B SFP module to plug fiber directly into the switch.

A curated list of Firefox extensions for privacy, usability, and development that I use daily.

Clone a running OPNsense ZFS install to a second disk with no downtime, using gpart to copy the partition table and zpool attach to mirror and resilver.

A GRUB2 config that caps boot attempts per A/B slot to prevent infinite boot loops on remote or embedded systems, with RAUC integration for updates.

Hugo's documentation can be tricky to parse, so I look for good examples.

Authenticate multiple virtual hosts with a single OAuth app in Caddy Security, using the redirect_url parameter to work around callback URL matching.