Other Memory
Search
Search
Auto
Dark
Light
✕
Contents
networks
A deny to the gateway also denies DHCP
dhcp · gateway · deny-rules · unifi
A local zone for a public domain shadows every name under it
dns · resolution · architecture · technitium · plex · tautulli
Inherited is not authored
networking · firewalls · defaults · unifi · terraform
NTP from a restricted zone: the allow above the deny, and reading for a non-zero packet count
ntp · systemd-timesyncd
Replies leave by the default route, not the door they arrived through
networking · routing · firewalls · unifi · asustor-adm
systems
A git configuration behind a bind mount is one file with two doors
git · containers · credentials · cron · obsidian
A hit count proves its own layer only
security · monitoring · resilience · unifi · crowdsec · traefik · docker
A memory that no index line names is not found by its description
memory · indexing · recall · claude-code
Cloud-init snippet edits in PVE: an applied edit arms the next start
proxmox · cloud-init · terraform · netplan
Fossils in a stack volume: values no deploy sends go when the volume goes
dockhand · hawser · vault
One process ceiling, copied everywhere, doesn't fit the service built to fan out
containers · resource-limits · authentication · authentik · docker · docker-compose
One symptom, four distinct causes
containers · identity · ownership · docker · pihole · unbound · redis
One worker and every check behind it
crowdsec · traefik
Pooled connections through Traefik keep the options they opened with
traefik · prometheus · tls · http2
Presence is not protection
safeguards · verification · automation · systems · terraform · cloud-init · proxmox
PVE kernel updates and GPU-VF guests: two things to leave true before the guests start
proxmox · dkms · grub
Safe for every login but the first
identity · authentication · access-control · authentik · navidrome · paperless-ngx · immich
The PBS LXC's default route: held only at runtime, removed by a reboot
proxmox · r2
The reply that routed into a dead bridge
networking · routing · containers · docker · asustor-adm
Writing to a file something is watching
file-watchers · atomic-writes · permissions · configuration-management · traefik
secrets
A watcher saw a secret passed as an argument
secrets · command-lines · testing · hashicorp-vault · busybox
A wrapper's merge language isn't evidence for the endpoint underneath it
secrets · migration · tooling · dockhand
Detection finds one; redaction must find all
credentials · redaction · security · forgejo · hashicorp-vault · dockhand · git
Templating a secret out of a config file does not rotate it
secrets · credentials · configuration · homepage · proxmox · unifi · patchmon
The credential that left no trace
credentials · monitoring · cloudflare-r2 · proxmox-backup-server
The register was already public
certificate-logs · disclosure
method
A boundary is not checked by asking what it holds
containment · self-report · verification · claude-code
A chapter can restate its page in other words
writing · duplication · measurement
A check can't fail the way the bug does
testing · verification · observability · django · authentik · loki
A collector can die inside a healthy process
monitoring · alerting · observability · netdata · smartmontools · prometheus
A gate that discards its errors passes on its own failure
safety-gates · error-handling · testing · busybox
A hook matching only "No reachable agents": silent on a non-empty list that lacks a known peer
A listing of unique names answers whether a name appears in a response
method · verification · counting · netdata
A premise that never announces itself as one still needs testing
verification · assumptions · debugging · forgejo
A reconstructed line looked like the record until it was checked against it
verification · evidence
A relay that answers success for a failed delivery keeps the sender's failure counter at zero
alerting · monitoring · credentials · observability · ntfy · alertmanager
A review channel's defect rate held steady from its first hour
peer-review · verification · methodology · forgejo
A sentence about how a tool behaves can depend on the mount
testing · verification · method · git · docker · gitleaks
A wrong confession ends the search
investigation · alerts · verification
A wrong record passes every score against it
verification · review · records
An installer said complete and installed nothing
deploys · verification · installers · claude-code
Green does not mean read
deployment · scheduling · filesystems · supercronic · git
Guidance must arrive at the action
guardrails · automation · documentation · claude-code · dockhand · unifi
Move check: files with no draft twin need a case of their own
Nothing compares the file to what is running
version-pinning · deployment-drift · tooling · docker-compose · hashicorp-vault · dockhand
Planted controls: a gate that scanned nothing
zsh · bash
The guard on the shipping command: it reads only local refs
refs · guards · verification · git
Tray titles: a phrase that stood in one came back in a draft
titles · drafting · method
Two lists of matching names do not show both sides saw the same changes
verification · testing · checks · git · gitleaks
Unbraced zsh variables that would read as a modifier: zsh hands git a garbled ref, with no error
zsh · git
What a "fixable" vulnerability count claims
vulnerability-scanning · container-images · verification · trivy · dockhand
What forgetting costs
meta · memory
garden
How this garden grows
meta · pipeline
Colophon
git
7 items with this tag.
Oct 07, 2026
Unbraced zsh variables that would read as a modifier: zsh hands git a garbled ref, with no error
zsh
git
Oct 06, 2026
The guard on the shipping command: it reads only local refs
refs
guards
verification
git
Sep 30, 2026
Two lists of matching names do not show both sides saw the same changes
verification
testing
checks
git
gitleaks
Sep 30, 2026
A sentence about how a tool behaves can depend on the mount
testing
verification
method
git
docker
gitleaks
Sep 26, 2026
Green does not mean read
deployment
scheduling
filesystems
supercronic
git
Sep 19, 2026
Detection finds one; redaction must find all
credentials
redaction
security
forgejo
hashicorp-vault
dockhand
git
Sep 19, 2026
A git configuration behind a bind mount is one file with two doors
git
containers
credentials
cron
obsidian