Reversing the flow: from object storage back to the NAS
A free tier that makes a second copy structurally impossible, a backup that reverses direction because of it — and a sync client that had stopped working without ever saying so.
Read more →Posts
Replacing iwatch: 20,000 mails, an XML file, and a weekend of Rust
iwatch sends one mail per file during a kernel update. Its configuration is XML with exceptions whose order matters. Both are fixable — by rebuilding it in a language I did not know.
Read more →Compiling WLED Yourself: A Hidden Feature and a Partition Table OTA Can't Touch
802.1X exists in WLED only behind a compile switch. Turn it on and you get an image that no longer fits the factory partition table — and OTA can do nothing about that.
Read more →Homelab Rebuild Part 11: The Way In From Outside
WireGuard on the firewall. The question of which network a VPN client belongs to, one field with two meanings — and a service that does the same thing for every failure: nothing.
Read more →Homelab Rebuild Part 10: Turning Networks Into Boundaries
A rule pattern for devices whose job is the internet — and three cases where it doesn't fit. Plus a television where I looked for the fault in entirely the wrong place.
Read more →Homelab Rebuild Part 9: The Devices That Can't Do 802.1X
MAC Authentication Bypass with FreeRADIUS. A marker that doesn't exist, two MAC formats in the same request — and a configuration that did nothing for six weeks.
Read more →Homelab Rebuild Part 8: Running My Own Certificate Authority
HTTPS on the internal network without browser warnings. With ACME, automatic renewal — and four faults that all sat on the return path.
Read more →Homelab Rebuild Part 7: One SSID, and the Network Decides
802.1X with FreeRADIUS and dynamic VLAN assignment. Four dead ends, a config file that never gets read, and a device that should support it according to the release notes.
Read more →Homelab Rebuild Part 6: Backups That Actually Work
Proxmox Backup Server on the NAS instead of the host it's meant to protect. Why that's the whole point — and why a backup only counts once you've restored it.
Read more →Homelab Rebuild Part 5: The First VLAN
Telephony as the test case: a self-hosted phone system with two trunks, its own VLAN — and four failures that all looked the same and had entirely different causes.
Read more →Homelab Rebuild Part 4: Somewhere for Services to Live
A used mini PC instead of containers on the NAS: why the virtualisation host gets its own box, and the rule I use to decide between VM and container.
Read more →Homelab Rebuild Part 3: Sliding the Firewall In
How to put a firewall into a running network without it being down for days. With double NAT as a bridge, a MAC trap, and the day I reflashed the SD card twice.
Read more →Homelab Rebuild Part 2: Hardware for the Firewall
10 Gbit, DPI, and what was left of that plan after I asked the forum. Why I ended up building an AM5 desktop instead.
Read more →Homelab Rebuild Part 1: Where I Started
One router, one network, everything in it. Why that stops being good enough — and why the fix is the same one companies use.
Read more →Matrix on trustserv, a Data-Friendly WhatsApp Alternative
How to register on my Matrix homeserver and get a client running.
Read more →Spam Abuse of the Mail Service
Someone registered several accounts and used them to send spam. Self-registration is closed.
Read more →Moving to Hugo!
trustserv has moved from WordPress to a static site generator. Say hello to Hugo!
Read more →Spam Filtering
I had to put a filter in place that scans incoming mail. Sorry — but there was a reason for it.
Read more →New SSL Certificates for Everyone!!11
Renewing my StartCom certificate turned into a bit of trouble with the mail service.
Read more →Happy New Year...
Welcome to trustserv — or: how I reinvented the wheel. :)
Read more →