Autostarting WSL the Right Way

This is a compact troubleshooting post: if WSL complains about an unknown wsl2.autostart key, the fix is not another config flag. The practical answer is to use Task Scheduler or the Startup folder instead.

Improving Send-Only SMTP Deliverability with SPF and DKIM

This draft rewrites a real mail operations note into a cleaner guide for improving send-only SMTP deliverability by wiring Postfix to OpenDKIM, generating per-domain keys, and publishing the required DNS records.

Moving GitLab to a New Server with Backup and Restore

This draft keeps the useful migration flow from a sensitive work log: prepare storage, install the package, preserve the SSH host identity, move the backups and secrets, restore GitLab cleanly, and validate the instance before you start trusting it again.

Installing Terraform on Ubuntu 24.04 LTS

This draft captures the exact repository and package commands I used to install a pinned Terraform version on Ubuntu 24.04 LTS.

Certbot Renewal with a Docker Compose Nginx Reload Hook

This draft captures a small but useful operational pattern: run certbot renew from cron and reload the Nginx container afterward so the renewed certificates are actually picked up.

Upgrading GitLab from 16.10 to 17.0 Without Skipping the Required Step

This draft turns a real GitLab upgrade note into a cleaner walkthrough focused on the upgrade path, the intermediate required version, and the service checks I used after each step.

Wiping or Formatting a USB Disk from WSL 2

This draft shows how I used WSL 2 to attach a physical Windows disk, inspect it from Linux, wipe it with shred, and cleanly unmount it afterward.

Fixing a Cloudflared Tunnel by Reauthenticating and Recreating Credentials

This draft captures a common cloudflared repair pattern: upgrade the binary, refresh the login material, and recreate the tunnel credentials rather than guessing at partially broken state.

Fixing Thumbor SSL Renewal on an Aging Certbot Install

This draft captures a practical SSL troubleshooting case where renewals looked broken on an older Thumbor host, with the key details coming from the renewal logs and a manual run.

Restarting a Vault Container in a Staging Environment

This draft preserves a practical staging note for restarting a Vault service, checking logs, and bouncing a dependent infrastructure container when secrets-related plumbing gets out of sync.