Sysadmin

01

15 min read

Self-hosted family SFTP: exposing a NAS without port forwarding using Pangolin + Newt + SFTPGo

Replacing an Internet-exposed SFTP with a Pangolin + Newt + SFTPGo stack: no port open on the NAS, outbound WireGuard tunnel, raw TCP SFTP served from a €3/month VPS. Including the traps: invisible provider firewall, SFTPGo defender useless behind NAT, broken PROXY protocol.

02

13 min read

Kernel panic on a Debian NAS: recovering a truncated libc without rebooting into the void

A Debian 13 NAS that won't boot: immediate kernel panic on the first userspace exec, with libc.so.6 turned into "ISO-8859 text" instead of ELF. Diagnosis through debugfs, recovery from a live USB with the apt↔libc chicken-and-egg trap, and the APT guardrails to put in place so it never happens again.