Plain-language writeups on the things I've built and hardened — with the actual configs, not just the theory.
A plain-language guide to VLAN segmentation — how to split one physical network into isolated zones, and why the one hole I deliberately left makes it stronger.
What a real backup actually looks like — three copies, two media, one offsite — and the one thing most people skip that makes the difference.
SSO with Authentik — how it works, why centralized revocation beats twelve separate admin panels, and how to set it up behind a reverse proxy.
You already use one every day without knowing it. Here's the mechanism, and how to run your own with Nginx Proxy Manager or Caddy.
What DNS actually is, why your ISP can see every domain you visit, and how Pi-hole fixes both problems at once.
The core IAM concept behind every cloud security role — explained with an analogy, then applied to a real AWS account.