Holy shit, trying to find information is _awful_ right now I'm trying to find good info on which weed killers are ok to use on concrete sidewalks, ideally something not long term biotoxic like Roundup But some of the common diy mixtures are not great to use on concrete, like certain acid/salt […]

Cis dudes are sleeping on flowers tbh

Ok, I've dropped adguard-dns in favor of just running the blocklists on the Mikrotik now that I have it doing DHCP/DNS. That is one fewer thing mantained in Kubernetes and simplifies the configs nicely If I get a Mikrotik external-dnsnplugin working I can simplify config even more I think

it has been zero days since I found a link on a government website whose domain expired and has been taken over by an online casino

oops ​:neocat_chew_wire:​ ​:neocat_chew_wire_bzzt:​ ​:neocat_floof_explode:​

One of these days I will finish a project without getting

Ok I really need to get a proper CI runner operational. Either Forgejo actions or Woodpecker-CI

New GitHub/Forgejo "vulnerability": https://codeberg.org/forgejo/website/issues/839 Arguably a documentation/UI issue tbh Unless necessary, defaults should be set to private for personal deployments anyway. repository: DEFAULT_PRIVATE: private […]

One "fun" finding in this firewall project: Somehow the admin passwords to two cameras have gone missing? ​:neocat_facepalm:​ I have absolutely no idea how that is even possible, and even an older password DB has those entries missing, and I was good and didn't share admin passwords apparently […]

I got the router firewall logs sending to Loki, now to fill in some stragglers and monitor for a while before turning on default-drop ​:neocat_floof:​

There is a Gitlab 'App" listed in the Mikrotik app store ​:neocat_googly_woozy:​ you absolutely will not regret running Gitlab on your router ​:neocat_floof_explode:​

Turtle. #photography

Turtle. #photography

LMFAO: https://forum.mikrotik.com/t/v7-23rc-testing-is-released/269915 > dhcpv4-server - added "add-dns-entries" and "add-dns-entries-suffix" properties for creating local DNS entries After I just spent an evening working with a dhcp-> dns script ​:neocat_laugh_tears:​ #homelab #mikrotik

Somehow, the fops has returned ​:neofox_notice:​ (Fox spotting for the first time in a few weeks!)

https://youtu.be/UTetQhGyUVg This is a very nicely explained video on linear power supplies, and a really nice channel on power electronics

Ok yeah I think I'll be able to switch from dnsmasq to running dhcp+dns on the mikrotik.... it'll let me use firewall address-lists populated by static leases, which should let me build better rules I think I should also be able to create a script that populates ipv6 addresses via mac lookups […]

I am once again considering rebuilding DHCP/DNS for this network

Network Security Project: Complete: * Detailed ingress/egress network policies for all container traffic (including domain-name specific allow-lists for outbound internet traffic) * Lockdown of containers including minimum required linux capabilities, dropped privileges, rootless containers […]

Firewall rules half-ish complete, IPv4 filter rules complete..... except local->internet traffic rules. There is a random service at my parent's house that is sending DNS requests to an address that doesn't exist???? It is over the site-to-site VPN and the src address is getting NATed by […]

Bike Path Flora and Fauna Report: Two fluffballs (baby Canadian Geese) with their demonic guardians (Canadian Geese) Also a bunch of pink flowers

Ok monitoring traffic flow via netflow->opentelemetry -> parsing script really wasn't the right idea, without a significant amount of effort to track connection status, too many return flows get tracked. The right idea is to just put a log statement at the end of the firewall chains to see what […]

I just did a rough calc on the current sale price of my ddr4 stash ​:neocat_think_woozy:​

wake up -> commit horrible dns crimes to workaround shortsighted assumptions

Ongoing selfhosted/homelab task: 1. Create admin user in authentik (with MFA, etc as always), this is not an authentik admin however. 2. Add admin user to services 3. Remove regular user from admin rolls 4. Modify ingress and traefik middleware if needed to service, to prohibit […]

So I had finally looked at why the rear brake on the road bike was... Weak Huh ok yeah I'm not a professional bike mechanic but Ibthink there is supposed to be some sorta pad material on these. Last night the new pads came in and I was able to spread the calipers enough (​:neocat_blush_hide:​) […]

Bird. (aka: Common Grackle) #photography

https://inspektor-gadget.io/docs/latest/gadgets/advise_networkpolicy Well forking heck, the looks exactly what I spent a bunch of effort replicating myself

I spent an hour petting a cat ​:neocat_floof__w_:​

A few more random thoughts, plug-in-solar edition * a solar pergola would be neat! and I could build something flexible and have non-solar sections if I need the space, it would let me sit outside and not roast in the back yard * I'd be able to either adjust the panel angle, or set it to a more […]

Posting some photos~ #photography

Ok I got the road bike in good shape, nice crisp shifting once again..... ..... thanks to the SRAM app, via Bluetooth shifting adjustment ​:neocat_googly_woozy:​

Bad idea time! Ok so my Homelab has a mix of devices that are powered by 12v (Kubernetes nodes, modem) and 48v (router and switch) And off-grid solar can be setup to run at 48v........

Ok I have a new rabbit hole to fall down

The backyard camera caught a grackle courtship dance ​:neocat_blush_hide:​

somehow I went down a train of thought that started with migrating a photo library and ended up with me considering just running my workstation itself inside the kubernetes cluster via kubevirt

🚨 BREAKING FOX NEWS UPDATE 🚨 Fox detected!! ​:neofox_notice:​ After almost three weeks, the fox has been spotted!

Oop, I was waiting for Talos 1.13 so I could create ram-backed disks, with the idea of booting from an SD card and having the live image+ephemeral all in a ramdisk for a single node cluster Except, yeah there is no way the 4gb pi4 would handle that anyway Also 1.13 didn't ship the ramdisk […]

Bike path wildlife report: I am sitting alongside the river watching baby geese through a big zoom lens ​:neocat_floof__w_:​

Bike path wildlife report: * 2 big honks * 3+ smol honks ​:neocat_aww:​

I rode the single speed* bike to the market ​:neocat_floof:​ * I do not actually own a single speed bike, I just forgot to put the battery back in the derailer ​:neocat_facepalm:​

The ground ivy is blooming ​:neocat_aww:​ I'm mowing the lawn with the mower at the highest setting to appease the neighbors and save maximum amounts of little blue flowers I think the ivy is beating out the miniclover seeds that I put down, ah well If my neighbors had fences or if this house […]

ok but what if the headseat bearings were called a top-braccket to match with the bottom bracket?

Road bike is functioning again ​:neocat_floof:​

Toxic trait: when an issue hits 6+ years old I start getting slightly passive-agressive on issue trackers

Weekend goals: - [ ] Find a bird and/or turtle and take a photo of it - [ ] Find the dead thing that is causing the godawful smell in the garage - [ ] spend time at the cute coffee shop downtown - [ ] Fix the road bike

Lmaooooooo docker hardened images put fips/stig images behind a paid tier, I'm pretty sure they didn't start behind a paid tier, I wonder how long till the rest follows?

Ooh nice! Thanks to the newer MutatingAdmissionPolicy in Kubernetes I've been able to cleanup a bunch of the apps running in the cluster without layering more kustomize onto things, and by keying the application of the policies off of labels I can see at a glance the list of overrides in play […]

Ya know people have complained a bunch about lack of flying cars and other things but at this point I'd rather have the promised smell-o-vision

I updated this for 2026.