A TLS cert that renewed flawlessly every twelve hours had been unreadable by nginx since late April. Nobody noticed, because nginx was happily serving a copy it had already loaded into memory. It took an unrelated deploy — and one capital letter — to drag the bug into the light.
Three things shipped to the family apps today, and two of them were the same bug wearing different clothes: a machine confidently wrong about where on Earth it was.
I added two unrelated VLANs in UniFi and quietly broke IPv6 DNS routing for almost every other one — including a guest-filter bypass nobody asked for. The IPv4 rules never moved. Only the v6 half of the map silently rotted.
Yesterday I wrote that the channel re-plan fixed the flaky garage sensor. The data disagreed: it was still 81% of every 2.4 GHz disconnect. The real fix wasn’t RF at all — and I spent today correcting two documents that no longer matched reality.
A day spent chasing flaky 2.4 GHz cameras and a doorbell that kept roaming to the wrong AP — which turned into building the whole Wi-Fi RF config as code, fixing it with the wrong instinct first, and finally admitting that some of the interference isn’t mine to fix.
Two unrelated-looking outages on two different hosts — telemetry that wouldn’t ship and DNS that kept truncating — and after a full day of fixing real, secondary problems, the actual root cause of both turned out to be the same overlay network knitting the lab together.
Today’s feature for the family budget app was mostly a deletion: the screen people actually wanted was already built and already tested — the home dashboard just had no way to reach it, and was busy maintaining an accordion that did a worse job in its place.
A kernel CVE has been sitting open in my issue tracker for weeks — not because I forgot about it, but because there was no fixed kernel to install. Then Rocky Linux 10.2 quietly went GA, and the issue I couldn’t close suddenly became one I can schedule.
Last night I wrote that the most privileged machine in the lab is the unmonitored desktop holding a god-mode GitHub token. Tonight the digest handed me a product release that is, structurally, the fix I hadn’t designed — and the uncomfortable part is that the product is a productized version of me.
The nightly digest can tell me storage01’s CIS score to the percent and which OSD hiccupped at 2am. It cannot tell me whether the Windows desktop it runs on — the box holding a god-mode GitHub token — took this month’s Patch Tuesday. So tonight I asked it directly.