Paul Rosham
Notes and writing.
New here? Start with the series intro: building a multi-site estate from open source and second-hand hardware, and what that really costs.
Latest posts
An el-cheapo blog on Cloudflare: static Next.js, TinaCMS in local mode, no monthly billThis site costs a domain registration and nothing else. Posts are Markdown in a Git repository, edited in a local CMS, built to static files and served from Cloudflare Workers. Here is the design and the three things that were decided on purpose.
Announce your own /24 from an OPNsense pair: BGP without a router budgetProvider-assigned addresses lock you to a contract and turn every service IP into a migration project. A portable prefix, an ASN and FRR on OPNsense are enough. The decisions that made the first announcement boring.
Self-hosted NetBird as the operator plane: firewalls as routing peers, policies as transportOne small VM runs the control plane, with its database shipped to a warm standby every thirty seconds. The firewalls are the routing peers. NetBird policies are treated as transport; real authorisation lives at the service.