A few days ago I built Onionservatory, because apparently Onion Services also deserve to be judged by automated security tools.

It answers questions like:

1
2

There are plenty of tools that will happily tell you that your normal website is terrible.

MDN HTTP Observatory will inspect your HTTP security configuration. SecurityHeaders will judge your headers.

This article could also have title: how we discovered automation for the fifteenth time, renamed it AI, panicked, bought six dashboards and forgot about the Windows 2008 server in the basement.

I’ve been running this blog for quite a while, and most of what I publish here is technical: guides, projects, reviews, vulnerabilities, things I

In the previous episode, I replaced Discord webhooks with Gotify.

That solved where my infrastructure notifications should go. It did not solve who was supposed to notice that a VPS was running out of disk space, waiting for a reboot or quietly collecting failed systemd units like

Because apparently I needed an app for changing app icons.

I have a growing collection of small tools that were originally created only for myself. Usually something annoys me just enough that I start thinking about automating it, and these days AI makes it dangerously easy to turn such thoughts into actual applications. A few years ago

Some time ago I wrote a small script for myself because I wanted an answer to one very simple question:

Did I accidentally do something stupid on this VPS?

Which, to be fair, is a question worth asking from time to time. I run different things on my servers. Websites, databases, Tor services, monitoring, random

For a long time I used Discord webhooks for notifications from my services. It was easy, it worked and almost every application knew how to send something to Discord. Create a private channel, copy a webhook URL, paste it into a service and wait until something breaks. Very advanced engineering.

The more services I added, however, the