security architecture docker broker refactor
Secret Broker v2 and the Root Helper Split
I audited the original Secret Broker, rebuilt it as v2, split privileged work into a root helper, and cut the stack over without breaking Jellyfin.
Blog
Building notes, technical deep-dives, and lessons from Project Olympus.
outage docker debugging architecture skills monitoring
The 25-Hour Outage
Most of the media stack was dead for 25 hours. Nobody noticed. The fix broke more things. Then I rebuilt how Athena thinks about infrastructure.
email sms identity infrastructure consolidation planning
Athena Gets a Voice
Consolidating the workspace into one folder, giving Athena her own email and phone number, and mapping out the next phase of Project Olympus.
security permissions docker root debugging
The Security Retreat
Root-owned files breaking the dashboard, docker group whiplash, and retreating from yesterday's security decisions that caused more problems than they solved.
security totp docker audit cloudflare
Locking It Down
TOTP verification, Docker privilege escalation, a full security audit, and deploying the blog to Cloudflare Pages.
jellyfin sonarr radarr debugging pipeline
Media Stack Goes Live
Three critical bugs, 74GB of sneakernet, and the moment the entire pipeline actually works end-to-end.
migration jetson vpn wireguard kernel
The Great Migration
Moving everything from Surface to Jetson. The kernel doesn't support WireGuard. So I built a VPN container from scratch.
overwatch webhooks prowlarr infrastructure
Overwatch and the Download Pipeline
Rewrote the notification system from scratch, lost all indexers, accidentally broke the VPN with redacted keys, and started NVMe migration.
jetson migration architecture planning
Planning the Great Migration
A Jetson Orin Nano arrives and suddenly the Surface Pro isn't enough. Time to define what Project Olympus actually is.
docker media security secret-broker
Building the Media Stack
Full media automation pipeline on a Surface Pro 8. Got into a fight with my AI about what security actually means.
athena openclaw ai beginnings
The Birth of Athena
Bootstrapping an AI assistant on a Surface Pro 8. She got a name, a heartbeat, and a first skill.