Thoughts, tutorials, and engineering notes.
Real projects, AI-assisted drafting. I document my actual experiments and code, using AI tools to structure and polish the final write-ups.
Learn how to configure WireGuard VPN on MikroTik RouterOS with full IPv4 and IPv6 dual-stack support. Access your home network and browse with native IPv6 even from networks without IPv6 connectivity.
Configure PPPoE with dynamic IPv4 and DHCPv6 Prefix Delegation on MikroTik RouterOS for DIGI Spain ISP. Includes VLAN tagging, SLAAC, automatic prefix change handling, and production-ready firewall rules.
Learn how to configure your MikroTik router as a low-interaction honeypot to detect port scanners, log malicious activity, and automatically block attackers using firewall address lists and the RAW table.
Learn how to implement a tarpit in Nginx to slow down and trap malicious bots, vulnerability scanners, and brute-force attackers. Complete guide with integration to CrowdSec for automatic banning.
A comprehensive deep-dive into the QUIC protocol and HTTP/3. Learn the technical architecture, security features, and step-by-step Nginx configuration for production deployment.
Master Content Security Policy from zero to A+. Learn CSP progressively—from your first header to strict nonces, hashes, strict-dynamic, and Trusted Types. Includes bypass prevention, debugging techniques, and production-ready Nginx configurations.
Learn advanced Nginx techniques to serve files that don't physically exist on disk. Covers location matching, root vs alias vs try_files, named locations, health endpoints for Kubernetes, and performance optimization for containerized deployments.
A comprehensive guide to implementing Mutual TLS (mTLS) with Nginx. Learn how to create your own Certificate Authority, generate client certificates, configure certificate revocation with CRL and OCSP, and implement Zero Trust authentication.