pfSense 26.03 System Patches: Auto-Apply Does Not Update The Package
A documentation-backed, testable runbook for pfSense 26.03 System Patches: Auto-Apply Does Not Update The Package, with safe defaults, validation evidence, failure modes, rollback, and publication-day checks.
Recyclarr 8.7 Security Response: Treat Template Sources as a Write Boundary
A Recyclarr security-response guide for template-provider path traversal: upgrade, inventory providers, protect secrets, compare generated files, and test safely.
Authentik 2026 Security Response
A documentation-backed, testable runbook for Authentik 2026 Security Response, with safe defaults, validation evidence, failure modes, rollback, and publication-day checks.
Build a Private RAG Box for Network Docs
A private RAG guide for network documentation, configs, diagrams, NetBox exports, runbooks, embeddings, vector search, citations, and evals.
Jellyfin 10.11.10+ Security: Treat Media as Untrusted Input
Contain untrusted Jellyfin media, preserve evidence, patch to the current stable release, restrict writable paths, validate clients, and recover without returning to a vulnerable version.
Patch Tailscale 1.98.9: Audit SSH, Serve, Funnel, And Services
A documentation-backed, testable runbook for Patch Tailscale 1.98.9: Audit SSH, Serve, Funnel, And Services, with safe defaults, validation evidence, failure modes, rollback, and publication-day checks.
Adding RAG: Chat with Documents Locally
A beginner-friendly guide to local document chat, embeddings, vector databases, Open WebUI knowledge bases, privacy, and common RAG mistakes.
Open WebUI Deep Dive: Users, Models, Documents, Prompts, and Safe Sharing
A noob-friendly tour of Open WebUI after installation: user accounts, model switching, documents, prompt shortcuts, admin settings, OpenAI-compatible endpoints, backups, updates, reverse proxy basics, and LAN/VPN security.
OpenWrt 24.10.8 and 25.12 Migration Runbook: Patch, Backup, Sysupgrade, and Recovery
An OpenWrt router upgrade runbook for patching exposed services, preserving config, checking device support, testing DHCP, Wi-Fi, DNS, and keeping recovery ready.
Keycloak 26.7.1 Security Response: Map the Fixes to the Features You Actually Use
Keycloak 26.7.1 includes many security fixes. This guide maps them to OIDC, SAML, FGAP, DCR, LDAP, metrics, and upgrade validation.