Writing
Blog
Notes on engineering, design, and process.
Securely Hosting Apps on a VPS: Hardening, a VPN Perimeter, and Cloudflare Tunnel
/1 min readA fresh VPS is a public target within minutes. Here's how I take one from default install to a locked-down box: SSH hardening, a NetBird VPN perimeter that hides every admin port, and a Cloudflare Tunnel that exposes only the app — with the database reachable on the VPN alone.
securitydevopsnetworkingcloudflareReadSuperpowers: The Plugin That Teaches Your AI Agent How to Think
/1 min readAI agents are great at writing code. They're bad at knowing when not to. Superpowers fixes that by installing a structured development methodology directly into your agent.
toolingclaudeopencodeaiproductivityReadHello World
/1 min readFirst post on this blog. A note on why I built this site and what I plan to write about.
metaengineeringRead