https://matijazezelj.github.io/packets-and-regrets/Field notes from a SecOps engineer running production habits at home — architecture, incidents, security trade-offs, and the occasional regrettable shortcut.Hugo 0.164.0en-USFri, 31 Jul 2026 22:00:00 +0200https://matijazezelj.github.io/packets-and-regrets/posts/the-website-was-new-the-css-was-four-months-old/Fri, 31 Jul 2026 22:00:00 +0200https://matijazezelj.github.io/packets-and-regrets/posts/the-website-was-new-the-css-was-four-months-old/A production site passed its build, origin, route, header, and preview checks—then looked broken on mobile because immutable CDN caching preserved the previous stylesheet.https://matijazezelj.github.io/packets-and-regrets/posts/what-runs-in-the-home-lab/Sun, 19 Jul 2026 20:20:00 +0200https://matijazezelj.github.io/packets-and-regrets/posts/what-runs-in-the-home-lab/A curated inventory of the services behind 76 running containers—what each group does, why it exists, and which pieces are temporary.https://matijazezelj.github.io/packets-and-regrets/posts/why-the-lab-is-boring-on-purpose/Sun, 19 Jul 2026 20:10:00 +0200https://matijazezelj.github.io/packets-and-regrets/posts/why-the-lab-is-boring-on-purpose/The design choices behind a two-host Docker home lab: leaving Kubernetes, centralizing ingress, separating state, treating sockets as root, and applying before committing.https://matijazezelj.github.io/packets-and-regrets/posts/prometheus-on-nfs-healthy-until-it-wasnt/Sun, 19 Jul 2026 19:30:00 +0200https://matijazezelj.github.io/packets-and-regrets/posts/prometheus-on-nfs-healthy-until-it-wasnt/A network filesystem stall blocked shutdown, corrupted the Prometheus WAL, and demonstrated why a green health check is not a storage architecture.