All posts

01

7 min read

Docker on NAS: network architecture and best practices

Organizing Docker services on a Debian NAS with isolated networks, a hardened daemon, and proper storage management on RAID.

02

8 min read

Telescope, Treesitter and essential coding plugins for Neovim

The plugins that turn Neovim into an IDE: Telescope for search, Treesitter for syntax, and the essentials: autopairs, surround, gitsigns and formatting.

03

6 min read

Migrating Synology data to a Debian NAS without losing anything

Recovering an existing Synology RAID on Debian: Btrfs patch, eCryptFS decryption and automatic mounting with mdadm + LVM detection.

04

7 min read

Hardening your NAS Linux kernel to CIS Level 2 standards

Over 40 sysctl parameters, module blacklisting, GRUB settings and filesystem hardening to achieve CIS Level 2 security on Debian.

05

6 min read

AI completion in Neovim: Codeium, Gemini and nvim-cmp

Setting up a three-layer completion system in Neovim: AI ghost text with Codeium, Gemini completion via Minuet, and the classic nvim-cmp.

06

7 min read

Firewall and Fail2ban: locking down NAS network access

Setting up UFW with deny-by-default and Fail2ban with progressive bans to effectively protect a Debian NAS against network intrusions.