IPv6 – apt-upgrade.me – Homelab, Linux & DevSecOps

Bare Metal to K3s: A Nextcloud Migration Battle Log

Mon, 21 Sep 2026 21:50:44 +0200

Today I moved a production Nextcloud from a cozy native bare-metal install to a shiny K3s/container stack. On paper: pull a backup, restore it, flip DNS, done. In practice: a series of small landmines, each invisible until you step on it. Here’s the battle log. 🪖

Step 1: shovel the data 🚚

The heavy lifting was an rsync of ~360 GB of user data plus a ~330 MB SQL dump from the backup box into the new node. Because I pre-synced earlier in the day, the final run only shipped the delta — the whole thing came down to a fast incremental copy. Lesson old as time: pre-seed, then the cutover sync is tiny.

🔒 GitHub Repo Update: Migrating from iptables to nftables — A Packet Filter Deep Dive

Tue, 16 Jun 2026 21:22:32 +0200

Quick repo update: the www_k3s GitHub repo just got a significant firewall overhaul. The old setup used classic iptables — which worked fine, but was starting to feel like driving a stick-shift with three pedals. Time to upgrade. The firewall is now fully rewritten in nftables, the modern successor that’s been shipping as the Linux default since kernel 3.13. Here’s why that’s the right call, and a full walkthrough of what the new ruleset actually does. 🧵

Adventures in IPv6, Firewalls & the “Oops-I-Forgot” Department 🚀

Mon, 25 Aug 2025 16:17:34 +0200

So, a few days ago I thought: “Hey, let’s be cool, ditch Apache, and hop onto the Nginx hype train because... HTTP/3, baby!” 🎉

Fast-forward to today, when I decided to show off and run one of those fancy SSL / web server grading tools. You know, the nerd’s equivalent of flexing in front of a mirror. 😎

...and then BAM 💥: my blog was completely invisible over IPv6. Like, gone. As if Thanos snapped half the packets away. 🫰