Articles

Tutorials and incident write-ups from a self-hosted homelab.

• Replacing a droplet without downtimeBuild the new box beside the old one, verify it by IP, issue the cert before DNS moves, then flip. The old server never goes away until the new one has proven itself.ansibletls2026-10-02
• Wildcard certs with Traefik and DNS-01One cert, 23 services, no per-host issuance race. What the first migration got wrong and the second one fixed.tlsnetworking2026-09-01