My Ghost/Cloudflare Setup

Want to self-host a blog using Ghost, run it on hardware in your basement, and hide it behind Cloudflare? Here is how I did it.

New Domain & New Software

I have a confession. Like many geeks, I've struggled with Sudden Domain Acquisition Disorder (SDAD) for years.

Multitenancy Example for Phoenix

This post describes my efforts and approach to multi-tenancy for a couple of Elixir/Phoenix/Ecto B2B applications I'm working on.

Publishing Documents to Snowflake

In my day job, I work on workflow/data management-type software (B2B). Our software captures data (via. fancy workflow tooling) in a structure we creatively call "Documents". A "Document" is just a big collection of fields (text, integer, dates, tables, references to other documents, etc.). Our

GPG/SSH with the Yubikey 5

Yubico just announced the new YubiKey 5 and of course I needed to buy one! This gave me a great opportunity to update my somewhat popular GPG/SSH with YubiKey guide. The YubiKey 5 includes support for: * Universal Second Factor (U2F) - FIDO & FIDO 2! (nothing uses FIDO 2

OpenBSD Yubikey Authentication with PIN

I think that using the Yubikey for authentication is worthwhile. OpenBSD's current implementation of login_yubikey.c, however, relies entirely on the one-time password. I think the system would be stronger combining the Yubikey with an additional PIN so that a compromise of the physical security of the

OpenBSD Yubikey Authentication

OpenBSD includes out-of-the-box support for login via. YubiKey. Yay! OpenBSD doesn't authenticate against a central server (such as the service offered by Yubico) to verify a YubiKey. This is good because I don't have to trust a 3rd party with my credentials. Unfortunately, this also means