How-To: Lock Admin Web UIs to Your Own Networks With nginx
Today’s VeloCloud news is one more reminder: admin web interfaces shouldn’t answer to the whole internet. Here’s the simple nginx pattern I use in front of…
Category
How-Tos
Follow How-Tos via RSSHow-To: A Home Lab Checklist After the LiteLLM and PHP2Shell Attacks
Two big attacks this week, the trojaned LiteLLM 1.107.0 and PHP2Shell, are good reasons to run through a quick check of any home lab. Here’s the…
How-To: Keep a Fallback Kernel on Omarchy and Switch the Default
Every Linux box I care about has two kernels on it: the one I want to run and one I know boots. Here’s how I set…
How-To: Patch PHP on a WordPress Server for PHP2Shell
PHP2Shell (CVE-2026-109618 and CVE-2026-109619) is a pre-auth remote code execution bug in PHP itself, so every WordPress box needs attention today. Here’s the checklist I’d run…
How-To: Watch Your DNS Zone for Unexpected Changes With dig and a Timer
If you run your own authoritative DNS, you want to know the minute a record changes when you didn’t change it. A typo, a bad deploy…
How-To: Try Omarchy 4.5 RC1 Without Risking Your Daily Driver
Omarchy 4.5 RC1 is packed, and the team is blunt: it’s a release candidate, so expect rough edges. Here’s a safe way to test it. 1.…
How-To: Back Up WordPress Posts and Tags Before Any Bulk Change
Before any of my bots touch categories, tags or a batch of posts on this blog, the rule is backups first. Here’s the simple version of…
How-To: Updating Omarchy Machines to 4.0.6
Omarchy 4.0.6 fixes the 4.0.5 OpenClaw migration that blocked updates, so it’s worth getting every machine onto it. Here’s the simple routine I’d follow. 1. Before…
How-To: Find AI Agent Panels and Model Servers You Left Open on Your Network
Today’s story about a hacker running AI agents through exposed Cairn panels had a second lesson: those web panels were wide open, and they leaked everyone’s…
How I Run Daily AI-Assisted Research for This Blog
This is a quick, high-level look at how daily AI-assisted research feeds this blog. No secret sauce, just a workflow you can copy. The flow Research:…