Skip to main content
Maciej JasiewiczPL

Engineering notes

Technical notes on production incidents, application design, deployment, K3s and DN42.

  1. Published

    Cloudflare does not protect a directly reachable origin

    A production DDoS incident in which a publicly discoverable origin accepted traffic outside Cloudflare.

    • Cloudflare
    • DDoS
    • origin isolation
    • WAF
    • rate limiting
    • incident response

  2. Published

    Device provisioning across application, identity and VPN systems

    A Laravel 11 platform coordinating device registration, Authentik, WireGuard configuration and Bash-based setup automation.

    • Laravel
    • device provisioning
    • WireGuard
    • Authentik
    • Redis
    • REST API
    • automation

  3. Published

    Import and export policy for my DN42 AS

    The import and export rules used by AS4242422169, a small non-commercial DN42 network running on MikroTik RouterOS.

    • BGP
    • DN42
    • IPv6
    • WireGuard
    • MikroTik RouterOS
    • routing policy

  4. Published

    Stable and experimental components in my K3s lab

    The maintained baseline and separate experiments in a personal three-node K3s homelab.

    • K3s
    • Kubernetes
    • Terraform
    • Helm
    • Ingress
    • homelab

  5. Published

    Session authentication for web, tokens for mobile

    Authentication choices for browser applications and an internal Ionic and Capacitor mobile client.

    • authentication
    • sessions
    • access tokens
    • refresh tokens
    • Laravel
    • mobile applications

  6. Published

    Deployment should be boring

    Problems with production git pulls and merge conflicts, and the move to version-controlled CI/CD deployments.

    • CI/CD
    • deployment
    • Git
    • Docker
    • GitHub Actions
    • GitLab CI

Related work: case studies and side projects.