Blog
Blog
Notes from operations, thoughts on Linux, DevOps and industrial networking. We write when we have something to say.
FEATURED
security
Hardening First-Connect SSH Trust with SSHFP Records
SSH's first-connect prompt asks you to trust a fingerprint you can't verify. SSHFP records publish it in DNS instead, so the client checks it automatically.
20.09.2026 · 4 min
DevOps
5 min
Managing DNS Zones as Code
Manual DNS edits leave no history and no easy undo. dnscontrol treats zones as code: declarative config, and a dry-run before every change. git brings the history revision.
10.09.2026
security
6 min
Why we moved our own site off the CMS
A friend's site got compromised through an unpatched plugin. We looked at our own CMS install and didn't like what we saw - so we rebuilt on Hugo in under two days.
14.08.2026