Articles
Guides, reviews, and notes
Ledger CLI: Plain Text Accounting
Published: at 05:18 PMWhy I log every transaction in one plain text file with Ledger CLI: double-entry basics, the account tree, multi-currency metals and stocks, daily queries.
A NixOS Control Plane and OpenBao in HA
Updated: at 02:00 AMBuild a declarative NixOS control plane that deploys a fleet over SSH, then run OpenBao on it - single node first, then a raft HA cluster.
HashiCorp Vault Lab: Auto-unseal, LDAP Auth, and Team Policies
Published: at 03:00 PMHashiCorp Vault auto-unseal (Azure HSM + Transit), LDAP auth mapped to team policies, and a KV v2 ACL design - a hands-on three-VM lab.
Secret Management with OpenBao and GitLab CI/CD
Published: at 02:08 PMFive ways to get secrets into a deployed app with GitLab CI and OpenBao (Vault), from plain .env files to JWT/AppRole auth, a Vault Agent on the host, and live SDK fetches, plus the full self-hosted GitLab and OpenBao setup.