Writing

Forseti: the Web UI Ory Doesn't Ship

Every self-service identity flow for Ory Kratos and Ory Hydra — login, registration, recovery, MFA, OAuth2 consent — plus an admin console, in a single server-rendered Rust binary.

Liwan: a Lightweight Matomo Replacement

A privacy-first, self-hosted analytics tool that dropped in where my Matomo instance used to be. One Rust binary, no database to babysit, and I imported all the old data.

TKU: Claude Code on Steroids

A single Rust binary that tracks token usage and cost across every AI coding tool, and lets me swap between my work and personal Claude subscriptions with one command.

Keycloak Multi-Tenancy: Realms vs Organizations

I'd heard Keycloak gets weird with many realms. So I benchmarked it. It does.

podman-healthcheckd: Container Healthchecks Without systemd

A small Rust daemon that runs Podman's container healthchecks on systems that don't have systemd to schedule them, like Guix, Alpine, or Void.

ISO 27001, ISO 42001, and What 'Aligned' Actually Means

A plain-English read on the two ISO standards that come up when customers ask about security and AI governance, and the honest difference between following them and being certified.

A Tiny Guix Build Farm on a ThinkPad

Offloading Guix builds to a LAN ThinkPad, then serving the substitutes from a static file host.

OpenPGP Web Key Directory on S3 and CloudFront

Setting up WKD so email clients can automatically find your PGP key — hosted on S3 with CloudFront.

Screen Sharing on Niri (Wayland)

Get screen sharing working on Niri (Wayland): the xdg-desktop-portal and PipeWire setup that actually works, including the fix for the Chrome/WebRTC black screen.

Web Rendering in Iced: What Actually Works

I tried four different rendering engines for web content in Iced. Here's what I learned.

Run an IOTA Node on Guix

How to run an IOTA full node on Guix System.

Build React Native Android Apps on Guix in 5 Minutes

No Docker, no Android Studio. Just Guix and a few commands.

The Perfect Linux Setup: Guix on a Framework Laptop

How I configured my Framework laptop with Guix for fingerprint login, YubiKey sudo, automatic theme switching, and more.

Jail Claude Code with Guix Shell Containers

How to run Claude Code in an isolated container on Guix, protecting your system from unintended changes.

Supercharge Guix Shell with direnv

How to automatically activate Guix shell environments when entering a project directory using direnv.

Automatic Dark/Light Theme Switching with darkman on Wayland

Automatic dark/light theme switching on Wayland with darkman: GTK apps, the foot terminal, and notifications, switched at sunrise and sunset.

Screen Sharing on Sway/Wayland with Guix

How to enable screen sharing on Sway/Wayland using Guix

LLM models that run well on your laptop

A quick overview of some interesting LLM models that run well on modest hardware

From Docker to Podman on Guix

A guide on transitioning from Docker to Podman using Guix.

Load Testing and Scaling (Formshive with Apache Bench)

Architecture analysis for a web application: Exploring performance bottlenecks and scaling strategies.