? What to ask me about
- How a Raspberry Pi serves three public sites with zero inbound ports.
- What broke in the fleet and what changed afterwards: five postmortems.
- The OIDC deploy pipeline: why no long-lived keys, where the approval gate sits, how the smoke test can fail.
- DNS, from Pi-hole → Unbound with DNSSEC at home to county AD-integrated zones at work.