Notes on Linux, networking and homelab — written while learning, kept for reference.
WireGuard is the simplest way I have found to link two small VPS instances. This post walks through key generation, a minimal peer config, and the firewall rules I use to keep the tunnel up after reboots.
Most of my static sites need the same five things: gzip, caching headers, a 404 page, HTTPS redirect and a health endpoint. Here is the server block I copy-paste, with notes on what each line does.
Uptime checks, disk alerts and a single status page. I compared a few lightweight agents and settled on a setup that sends me a message only when something actually breaks.
DNS-only records keep things simple: the domain points straight at the server, no proxy in the middle, and TLS is terminated where I control it. A short note on when I would turn the orange cloud back on.