Self-hosted Tailscale, Part 3: Syncthing over Tailscale

Posted on 2026-05-18 in Software • Tagged with howto , linux , security , syncthing , tailscale , vpn

I've been using Syncthing for years to keep files in sync between my laptop, desktop, phone, tablet and home server. It is an amazing piece of software and has been very reliable, with only the occasional conflict, but I have never lost any data. On the contrary, Syncthing file versioning …


Continue reading

How I Sandbox my AI Agents

Posted on 2026-05-14 in Software • Tagged with ai , firejail , linux , security

I've been using Opencode as my AI coding agent. Very unlike me, I don't have a long list of reasons why I picked it among the many alternatives. I just wanted to get started with an agent system that checked my main requirements:

  • Must be fully open-source.
  • Popular, meaning it's …

Continue reading

Self-hosted Tailscale, Part 2: Ad-blocking DNS

Posted on 2026-05-11 in Software • Tagged with dns , howto , linux , security , tailscale , vpn

In Part 1 I set up Headscale and had every tailnet client use Cloudflare DNS. That works, but it's leaving value on the table: every device that connects to my Tailscale gets whatever DNS servers I set, so I might as well run my own DNS server inside the private …


Continue reading

Self-hosted Tailscale, Part 1: Headscale and clients

Posted on 2026-05-05 in Software • Tagged with howto , linux , security , tailscale , vpn

I had been hearing a lot of people raving about Tailscale as a solution for interconnecting devices, or in other words for creating your own mesh VPN. It does seem great on paper: easy to set up, fast and lightweight, based on an open protocol (WireGuard), works everywhere, solves the …


Continue reading

Pre-establishing SSH master connections for Ansible, or using OnlyKey with Ansible without losing your mind

Posted on 2026-04-07 in Software • Tagged with ansible , automation , howto , linux , security

I use an OnlyKey as a hardware security device for a variety of purposes:

  • Common passwords are one keypress away, they get typed automatically.
  • As 2FA in my password manager (KeepassXC), by applying HMAC on the password.
  • SSH connections.
  • GPG encryption and signing.

OnlyKey

SSH connections are handled through the …


Continue reading

Web browser add-ons I use

Posted on 2022-02-23 in Software • Tagged with browser , firefox , web , addons , privacy , security , cryptocurrency

This article lists the web browser extensions I use and why. I will keep it updated from time to time.

Currently I use Brave as my main web browser, and is the one I recommend to everyone. It offers a great experience by default, with features such as a built-in …


Continue reading

Unlocking a LUKS-encrypted partition on boot with an USB drive

Posted on 2019-10-13 in Software • Tagged with linux , encryption , security , howto

The use case I wanted to solve was this: I have a headless server with a LUKS software-encrypted hard drive, and I want to be able to reboot it without having to input the password on a keyboard. The solution I implemented is to create a LUKS keyfile on a …


Continue reading