Notes on code, games, and the stuff in between.
Install LuckPerms on a Minecraft proxy network, sync permissions across backends, define groups and inheritance, avoid the per-server-permission trap.
How to migrate a Minecraft proxy network from BungeeCord or Waterfall to Velocity — config translation, plugin replacements, modern IP forwarding, and the gotchas.
Practical comparison of BungeeCord and Waterfall — performance, plugin compatibility, security patches, and which one you should actually pick for a small network.
Stand up a Velocity proxy on Linux from zero — install, velocity.toml, modern IP forwarding to Paper backends, systemd unit, firewall. The clean install, no BungeeCord baggage.
Full breakdown of BungeeCord's config.yml — listeners, servers, IP forwarding, priorities, the options nobody documents and the ones that bite you.
Real backup setup with Restic — encrypted offsite to S3 or self-hosted MinIO, dedup, retention, and the restore-drill that proves your backups actually work.
df shows 100%. du takes forever. Here's the fast way to find what's killing your disk — from the usual suspects to the stuff that only shows up after you know where to look.
The GPOs every domain should have — password policy, account lockout, audit, RDP restrictions, SMBv1 / LLMNR / NTLMv1 kill, BitLocker enforcement. The defaults are not enough.
UFW makes iptables manageable. The catch is the order you run the commands matters — get it wrong and you're locked out of SSH. Here's the safe sequence.
Build a sane AD structure — OU layout, user and group provisioning via PowerShell, first GPO. The patterns that scale from 10 users to 1000.
Any public-facing server gets hit with SSH brute force attempts within minutes of going live. fail2ban bans the IPs automatically. Setup takes 10 minutes.
Stand up a new Active Directory forest from scratch. Install AD DS, promote the first DC, DNS integration, the post-promo checks. PowerShell-driven, no GUI.