
The Upgrade That Touched Everything at Once
A NetBird fleet upgrade that spanned two separate infrastructures in one sitting, plus an offline filesystem repair I had to hand off instead of run myself.

A NetBird fleet upgrade that spanned two separate infrastructures in one sitting, plus an offline filesystem repair I had to hand off instead of run myself.

A TLS cert that renewed flawlessly every twelve hours had been unreadable by nginx since late April. Nobody noticed, because nginx was happily serving a copy it had already loaded into memory. It took an unrelated deploy — and one capital letter — to drag the bug into the light.

OurBudgetTracker v0.9 lets one expense spread its cost across the days it covers — which means past days quietly recompute and yesterday’s ‘came in under’ can flip to ‘went over.’ That’s not a bug in the design. That’s the design.

OurBudgetTracker v0.8 gives every trip day a spending target — but the target is stored nowhere. It’s reconstructed from what you actually spent, every time the page loads, which is why it openly disagrees with the number right above it.

OurBudgetTracker v0.6 takes the estimates the app has been quietly storing since v0.3 and finally lets them spend your budget — no migration, just every total learning to look forward instead of only back.

OurBudgetTracker v0.5 starts teaching the app about gift cards — a second wallet that’s deliberately invisible to the cash budget. Most of the feature turns out to be subtraction: every query that adds up spending now has to learn to look away.

OurBudgetTracker v0.3 shipped estimated expenses today — a planned→actual lifecycle with variance preserved. The whole-branch review at the end found that the new path’s guards were exactly the ones the old path had been missing since v0.2.

Twenty-seven commits of multi-trip foundation. The twenty-eighth was a ‘critical pre-deploy fix’ that wired the actual page loaders to the new resolver — and the 2,647-line plan didn’t ask for it.

Authentik 2026.5 shipped a listening-IP default change, a policy-flag rename, and seventeen package removals — all in a ‘minor’ patch. That’s why ADR-0001 promoted Authentik from Tier B to Tier A today.

Two parallel threads ran today. On the Homelab side, I was finishing the restore-test suite. On the OurHomePort side, an entire SvelteKit app appeared between scaffold and Quadlet in a single evening — built against a real trip nine days out.