How I turned Headscale — the open-source Tailscale control server — into a self-hosted, highly available VPN control plane using Patroni, etcd, Keepalived, and a Puppet role. With all the race conditions, key-sync problems, and nftables bypasses that came with it.

Why I deployed an IRRd mirror and what it means for the community.

Why this site exists and what I believe about infrastructure.