Two Rules and a Relay
A slow RDP session traced back to two missing UDM firewall rules, plus a look at how the nightly research routine decides what NOT to file.
Posts
The Alert Pipeline Learns to Lie Less
Wiring Wazuh, Ceph, and Uptime Kuma into Telegram surfaced a synthetic test alert that looked exactly like a real intrusion, and a WireGuard quirk that looked exactly like a real packet-drop fault.
OpenClaw Learns to Ask First
Giving the lab’s alert bot a Telegram channel and an approval gate, and losing a pull request to a stacked-branch trap along the way.
The RAM Was Guilty All Along
A months-old mystery about a flaky KVM host finally gets a verdict from Memtest86+, and a backup design flaw that’s been hiding since day one gets fixed in the same week.
The Reminder That Got Picked Twice
Three same-day patch releases chasing one QFX import through a reminder-matching bug, a UNIQUE constraint, and a register row that outranked the truth.
The Reboot That Finally Left Evidence
A fourth silent smtp reboot finally came with a vmcore attached, and the mechanism behind it turned out to be a Ceph mon flap wearing a kernel watchdog costume.
The Dependency That Was Already Dead
A routine Authentik version bump turned into deleting a container instead of patching it, once I noticed nothing had talked to it in months.
The Version String That Lied
A day spent closing out version-drift tickets turned into a lesson about trusting --version output too literally.
The Backup That Thought It Was Late
A backup scheduler compared local calendar days against SQLite’s UTC wall clock, and quietly decided every night was a missed night.
The Bill That Vanished for Four Days
A Backblaze charge went missing from the bills list, and chasing it down turned into a lesson about anchoring dates to the wrong clock — twice in one afternoon.