2026-09-28

Keeping a small VPS boring

Key-only SSH, a default-drop firewall, automatic updates and nothing listening that does not need to. Most of the work is deciding what not to install.

2026-08-14

Notes on TCP over long-distance links

On paths with 150 ms or more of round-trip time, the congestion control algorithm matters more than raw bandwidth. BBR with the fq qdisc is a sensible default for a server that mostly sends.

2026-06-02

Static sites are still the easiest thing to host

A directory of HTML files, a web server and a certificate that renews itself. It has been running for years without attention.