Vault

How we built a production mail server from scratch — Postfix, Dovecot, dual DKIM, DANE, DNSSEC, MTA-STS, WKD, and an SNI multiplexer — with Part 2 covering post-quantum OpenPGP on the horizon.

A production migration from bare-metal LAMP to a single-node K8s cluster — covering namespace isolation, ExternalSecrets, cert-manager TLS, and the database name swap that nearly took down two sites simultaneously.