Blog
Independent writing that cuts through the noise.
Stay in the loop
Get the latest articles delivered to your inbox. No spam, unsubscribe anytime.
Hotel wifi doesn't need to see your traffic. Setting up a Tailscale exit node so a phone or laptop routes through home instead — the two-command setup, the DNS-leak toggle most guides skip, and a real cost/speed comparison against a commercial VPN.
A subnet route sat approved in the admin console and still didn't work. The real-world install walkthrough across an Ubuntu server, a Raspberry Pi, and a Proxmox host/LXC — auth flow, MagicDNS, ACL tags, and the two gotchas (LXC's missing /dev/net/tun, the two-step route requirement) that actually cost time.
Tailscale isn't a WireGuard competitor, it's WireGuard with a coordination server, NAT traversal, ACLs, and exit nodes wrapped around it. A first-hand decision framework for when raw WireGuard is enough and when Tailscale's managed layer earns the tradeoff, with sourced pricing and performance figures.
Passkeys and hardware security keys use the same FIDO2 standard but solve different problems. What device-bound vs synced passkeys mean, where a physical key still matters, and the setup that covers both.
Every 'best security key' list names the same products in the same order. This one matches your devices, protocols, and budget to a real answer instead — including a cheaper Yubico line most guides skip.
Tailscale explained: how its WireGuard-based mesh VPN, coordination server, and NAT traversal actually work, what the free plan includes in 2026, and who it fits.
A hardware security key stops phishing in a way SMS codes and authenticator apps can't. Start here to find out if you need one, then jump straight to the guide that matches your situation.
YubiKey isn't the only hardware security key worth buying. Honest tradeoffs and real pricing for Google Titan, Nitrokey 3, Feitian ePass, OnlyKey, and Thetis Pro — and which one actually fits your setup.
Every best-router-for-security list disagrees with the next, and the models they crown go stale within a year. Four durable criteria — WPA3, firmware update cadence, VLAN support, OpenWrt/DD-WRT compatibility — for evaluating any router yourself.
Your router already has a firewall. A decision framework for whether that is enough or whether pfSense/OPNsense earns its complexity — based on what you are actually running (VLANs, self-hosted services, port forwards), with real cost detail.
Page 1 of 13
The practical guide to Tailscale — the zero-config mesh VPN built on WireGuard — how it differs from raw WireGuard, installing it across a real homelab, exit nodes, self-hosted alternatives like Headscale, and honest pricing.
4 articles
The guide to YubiKey and hardware security keys — what they are, how to set one up for 2FA/SSH/passwordless login, device comparisons, alternatives, and how they stack up against passkeys.
7 articles
The practical guide to securing a home network — router hardening, WiFi encryption, firmware updates, IoT device isolation, and firewalls, written from the author's own homelab network.
7 articles
The practical, first-hand guide to protecting your privacy online — private email, browsers, messaging apps, authenticator apps, identity theft protection, encrypted DNS, and self-hosted tools — from someone who runs a homelab and actually uses them.
8 articles
The practical guide to running real self-hosted services with Docker Compose — restart policies, networking, volumes and backups, secrets, build vs pull, debugging, and the down/stop/kill difference — grounded in the author's own homelab compose files.
8 articles
A first-hand comparison of Spotify and Apple Music — sound quality, price, the three-way matchup with Amazon Music and YouTube Music, migrating your library between them, and whether self-hosting your own music library beats both.
3 articles
The guide to replacing Big Tech apps with your own self-hosted server — LLM chat, music streaming, automation, Reddit reading, git hosting, and CI/CD, all run and benchmarked on the author's own homelab.
7 articles
The hands-on guide to turning a Raspberry Pi into a real home server — a NAS, a Minecraft server, a security-camera hub, a retro-gaming box and a headless always-on box — with real setup steps, running costs and where a Pi actually hits its limits, from a working homelab.
7 articles
An honest, first-hand guide to password managers — whether your browser's or phone's built-in manager is good enough, how Bitwarden and 1Password compare, and how to self-host your own with Vaultwarden.
6 articles
A hands-on guide to building and running a home lab: hardware, virtualization, storage, media, and self-hosted services — from someone who runs one.
7 articles
The English-language guide for internationals to Hausratversicherung (home contents insurance) in Germany: what it covers, what it costs, how to compare providers and when a renter actually needs it.
7 articles
The English-language guide to private and supplementary retirement saving in Germany for internationals — the 2027 Altersvorsorgedepot reform, Riester, Rürup (Basisrente), betriebliche Altersvorsorge, private pension insurance, and ETF vs subsidised pensions.
7 articles
The English-language guide to buying a home in Germany as an international — closing costs, property transfer tax by state, getting a Baufinanzierung mortgage, the notary-to-Grundbuch process, renting vs buying, and the home insurance you need.
8 articles
The English-language guide to installing and running a home EV charger (wallbox) in Germany — real install costs, Netzbetreiber and landlord rules, hardware comparison, and solar charging.
8 articles