Colophon

How this site runs.

An SRE's CV should practise what it preaches: small, fast, boring to operate, and running on hardware I own.

Request path

visitor
  └─▶ Cloudflare edge        TLS, HTTP/3, caching
        └─▶ Cloudflare Tunnel   outbound-only, no open ports at home
              └─▶ cloudflared   TrueNAS app
                    └─▶ nginx:alpine  TrueNAS custom app, read-only, static files

The stack

ContentHand-written HTML pages and one layout, assembled by a tiny Python build script. No framework, no node_modules.
StylingOne CSS file. Inter and Geist Mono, self-hosted, with a metric-matched fallback so nothing jumps when fonts load.
SpeedSpeculation Rules prerender pages on hover; cross-document View Transitions make navigation feel like an app. ~1 KB of JavaScript, only for keyboard shortcuts.
Deploysgit push to a self-hosted Gitea. A sidecar polls the branch, builds the new commit into its own release folder, and swaps a symlink — atomic, zero-downtime, and a broken build never goes live. /version.txt shows the commit being served.
Servernginx in a container on TrueNAS, read-only filesystem, gzip, long-lived cache headers on versioned assets.
EdgeCloudflare Tunnel — the box only makes outbound connections; TLS and caching happen at the edge.
PrivacyNo analytics, no cookies, no trackers.
DesignInspired by Raycast's marketing site: a near-black canvas, generous tracking, red used as punctuation.