Other Memory
Search
Search
Auto
Dark
Light
✕
Contents
networks
A deny to the gateway also denies DHCP
dhcp · gateway · deny-rules · unifi
A local zone for a public domain shadows every name under it
dns · resolution · architecture · technitium · plex · tautulli
Inherited is not authored
networking · firewalls · defaults · unifi · terraform
NTP from a restricted zone: the allow above the deny, and reading for a non-zero packet count
ntp · systemd-timesyncd
Replies leave by the default route, not the door they arrived through
networking · routing · firewalls · unifi · asustor-adm
systems
A git configuration behind a bind mount is one file with two doors
git · containers · credentials · cron · obsidian
A hit count proves its own layer only
security · monitoring · resilience · unifi · crowdsec · traefik · docker
A memory that no index line names is not found by its description
memory · indexing · recall · claude-code
Cloud-init snippet edits in PVE: an applied edit arms the next start
proxmox · cloud-init · terraform · netplan
Fossils in a stack volume: values no deploy sends go when the volume goes
dockhand · hawser · vault
One process ceiling, copied everywhere, doesn't fit the service built to fan out
containers · resource-limits · authentication · authentik · docker · docker-compose
One symptom, four distinct causes
containers · identity · ownership · docker · pihole · unbound · redis
One worker and every check behind it
crowdsec · traefik
Pooled connections through Traefik keep the options they opened with
traefik · prometheus · tls · http2
Presence is not protection
safeguards · verification · automation · systems · terraform · cloud-init · proxmox
PVE kernel updates and GPU-VF guests: two things to leave true before the guests start
proxmox · dkms · grub
Safe for every login but the first
identity · authentication · access-control · authentik · navidrome · paperless-ngx · immich
The PBS LXC's default route: held only at runtime, removed by a reboot
proxmox · r2
The reply that routed into a dead bridge
networking · routing · containers · docker · asustor-adm
Writing to a file something is watching
file-watchers · atomic-writes · permissions · configuration-management · traefik
secrets
A watcher saw a secret passed as an argument
secrets · command-lines · testing · hashicorp-vault · busybox
A wrapper's merge language isn't evidence for the endpoint underneath it
secrets · migration · tooling · dockhand
Detection finds one; redaction must find all
credentials · redaction · security · forgejo · hashicorp-vault · dockhand · git
Templating a secret out of a config file does not rotate it
secrets · credentials · configuration · homepage · proxmox · unifi · patchmon
The credential that left no trace
credentials · monitoring · cloudflare-r2 · proxmox-backup-server
The register was already public
certificate-logs · disclosure
method
A boundary is not checked by asking what it holds
containment · self-report · verification · claude-code
A chapter can restate its page in other words
writing · duplication · measurement
A check can't fail the way the bug does
testing · verification · observability · django · authentik · loki
A collector can die inside a healthy process
monitoring · alerting · observability · netdata · smartmontools · prometheus
A gate that discards its errors passes on its own failure
safety-gates · error-handling · testing · busybox
A hook matching only "No reachable agents": silent on a non-empty list that lacks a known peer
A listing of unique names answers whether a name appears in a response
method · verification · counting · netdata
A premise that never announces itself as one still needs testing
verification · assumptions · debugging · forgejo
A reconstructed line looked like the record until it was checked against it
verification · evidence
A relay that answers success for a failed delivery keeps the sender's failure counter at zero
alerting · monitoring · credentials · observability · ntfy · alertmanager
A review channel's defect rate held steady from its first hour
peer-review · verification · methodology · forgejo
A sentence about how a tool behaves can depend on the mount
testing · verification · method · git · docker · gitleaks
A wrong confession ends the search
investigation · alerts · verification
A wrong record passes every score against it
verification · review · records
An installer said complete and installed nothing
deploys · verification · installers · claude-code
Green does not mean read
deployment · scheduling · filesystems · supercronic · git
Guidance must arrive at the action
guardrails · automation · documentation · claude-code · dockhand · unifi
Move check: files with no draft twin need a case of their own
Nothing compares the file to what is running
version-pinning · deployment-drift · tooling · docker-compose · hashicorp-vault · dockhand
Planted controls: a gate that scanned nothing
zsh · bash
The guard on the shipping command: it reads only local refs
refs · guards · verification · git
Tray titles: a phrase that stood in one came back in a draft
titles · drafting · method
Two lists of matching names do not show both sides saw the same changes
verification · testing · checks · git · gitleaks
Unbraced zsh variables that would read as a modifier: zsh hands git a garbled ref, with no error
zsh · git
What a "fixable" vulnerability count claims
vulnerability-scanning · container-images · verification · trivy · dockhand
What forgetting costs
meta · memory
garden
How this garden grows
meta · pipeline
Colophon
tls
1 item with this tag.
Oct 08, 2026
Pooled connections through Traefik keep the options they opened with
traefik
prometheus
tls
http2