Keeping admin surfaces private without making operations painful
Local-only panels, explicit allowlists, and boring access patterns reduce risk while keeping daily maintenance simple.
Systems lab / public notes
Infrastructure notes with a human pulse.
Birdset Works is a compact field notebook about web operations: small servers, reverse proxies, service health, backup routines, and deploys that stay boring.
Nominalpublic service state
TLSmodern protocol baseline
Docsrunbooks and references
Leanminimal moving parts
Recent field notes
Short, practical writeups focused on maintenance decisions rather than abstract architecture.
Small checks that catch real failures
HTTP probes, service status, disk pressure, certificate expiry, and log spikes — enough signal without dashboard theater.
Restore-first backup habits
A backup is useful only when the restore command is known, tested, and written down near the service.
Reverse proxy hygiene
Clear server blocks, strict TLS defaults, and fewer dynamic routing shortcuts keep web edges understandable.
Runbook map
Plain operational paths for recurring work.
1
Baseline audit
Ports, users, packages, service health, firewall policy.
2
Deploy check
Config test, reload, local probe, public browser verification.
3
Certificate review
Expiry dates, renewal hooks, nginx compatibility.
4
Recovery path
Backups, rollback files, and exact commands for restore.
Lab focus
Current topics: lightweight automation, practical security defaults, low-noise observability, and static publishing.