Tags: #devops

Network blips are brief and self-healing. They are also the reason a backup job can run cleanly, log no errors, and leave you with nothing to restore from.

You hardened your systemd service with ProtectHome=yes. Your Go service spawns a subprocess. It crashes with EACCES on a path you never touched.

The systemd options that actually matter for a Go backend and Node.js frontend: unit file anatomy, hardening directives, and the gotchas that burn you.

I traced a growing journal to SSH brute-force bots, found a cloud-init misconfiguration hiding in plain sight, and cleaned it all up. Here's the investigation.

How I run Claude Code directly on my VPS, why CLAUDE.md is the most important file in the repo, and the memory setup that makes it work across sessions.

How I moved my Go + Astro site off a managed static host onto a bare VPS using git, systemd, and nginx. No Docker, no pipeline.