Interested in Linux, self-hosted services, and software development, with occasional posts about games. This blog documents problems I run into, solutions that work, and tools or projects worth sharing.
A self-hosted Gitea was flooded by scrapers, draining the monthly traffic allowance quickly. A Caddy UA blacklist, rate limiting on heavy pages, and Gitea origin gzip brought the traffic down noticeably.
A step-by-step guide on applying the Goldberg/GSE patch to Steam games manually — DLL replacement, interface generation, exe DRM removal, and common pitfalls.
vnStat continuously records traffic per network interface, while picosnitch attributes it to processes; together they narrow an anomaly to its time window and the service responsible.
Configure Fail2Ban on an Arch Linux host with a rootless Podman mail server, then use UFW to manage bans for SSH, Postfix, and SASL brute-force sources.
Enabling mihomo TUN mode causes a total network outage because system ip_forward is disabled, UFW’s forward policy is DROP, and kernel rp_filter drops TCP handshake packets returning from the TUN interface. Three steps to fix.