All posts

01

14 min read

Local HTTPS in 2026: one Let's Encrypt cert for all my dev projects

Twenty-two Next.js and TanStack Start projects fighting for port 3000. Google OAuth refusing `.localhost`. `Secure` cookies broken over HTTP. In May 2026, the right answer is neither a 30xxx port plan nor `lvh.me`. It's a real Let's Encrypt wildcard cert on your own domain, served on 127.0.0.1, via Caddy and a DNS-01 challenge. Story of a full migration and what I wish I'd known before starting.

02

16 min read

A Claude Code Skill to Migrate Next.js to TanStack Start Unattended

Migrating a Next.js App Router project to TanStack Start by hand is three days of grep, checklists and TypeScript errors. Building a `/migrate-nextjs-to-tanstack` skill that chains audit, scaffolding, family-by-family migration and final validation in one shot, with zero user pause. Compatible with `/goal` for unattended execution.

03

11 min read

Installing the Claude Code webapp-testing Skill Cleanly

Giving Claude Code control of a real browser via Anthropic's official webapp-testing skill. Step-by-step install with a dedicated venv inside the skill folder — the only method that holds up in 2026 without polluting the system.

04

13 min read

A Claude Code Skill to Tidy Up Auto-Memory

After a few months of using Claude Code, my MEMORY.md looked like an attic. Inline sections that had no business existing, lists derivable from a single `ls`, relative dates, duplicates. Building a `/memory-reorganize` skill that audits and refactors memory according to internal best practices. The ones nobody documented publicly.

05

9 min read

Building a near real-time topic monitoring system on a VPS

Self-hosted monitoring system on a VPS that aggregates RSS feeds, filters by keywords, scores and summarizes each article via an LLM, then pushes results to Slack. With multi-layer deduplication and web page change detection.

06

7 min read

Securing MCP API keys in Claude Code (and why it's urgent)

Your API keys are probably sitting in plain text in your mcp.json. Here's how to secure them with environment variable interpolation, a dedicated secrets file and deny rules.