Notes
Unsorted technical notes. Useful-to-me, possibly useful-to-you.
TCP BBR — Quick Field Notes
Switching from CUBIC to BBR on a remote VPS. Measured differences and one edge case with fq_codel defaults.
Vendoring vs Module Proxy — When Each Makes Sense
Practical breakdown of when you actually want -mod=vendor and when the proxy wins.
Caddy Under systemd — Hardening Checklist
Walking through ProtectSystem, CapabilityBoundingSet, and why MemoryDenyWriteExecute breaks Go.
ufw Gotchas — What the Docs Don't Say
Three things I had to learn the hard way about ufw ordering, conntrack, and IPv6 defaults.