Blog
2026
- NIS2 Article 21 in Azure: Implementing Network Security Controls with TerraformA technical deep-dive into the network security requirements of NIS2 Article 21 and how to implement them in Azure using Terraform — with concrete code, not legal theory.
- Zero-Trust RAG: Defeating the Shared Private Link Deadlock in Azure TerraformHow to programmatically approve Azure AI Search Shared Private Links using AzAPI, and why your AI architecture will fail an audit without proper Identity Chaining.
- Enterprise Homelab: K3s, Authelia & Longhorn on Proxmox with TerraformHow to build a production-grade Kubernetes homelab with K3s, Authelia SSO, Longhorn storage, and ArgoCD — and the five painful mistakes that will cost you hours if you don't know about them.
- Breaking the Loop: Solving Circular Dependencies in Azure Firewall RoutingHow to implement Azure Firewall Forced Tunneling in Terraform without triggering cycle errors, and why a simple 0.0.0.0/0 route will instantly break your Windows VMs.
- Architecting an Enterprise-Grade Homelab: My Ansible Master PlaybookTake a tour of a fully automated, segmented, and highly available homelab architecture orchestrated entirely via Ansible and GitOps.
- Automating MikroTik WireGuard VPN with Role-Based Access via TerraformDeploy a WireGuard VPN on MikroTik using Terraform. Learn how to implement role-based network access, isolating mobile devices from full admin laptops.
- Automating MikroTik Bridge VLAN Filtering & Proxmox Trunks with TerraformMaster MikroTik's notoriously complex Bridge VLAN Filtering. Learn how to automate dynamic VLAN matrices, Proxmox trunk ports, and edge devices using Terraform.
- Implementing a Zero-Trust MikroTik Firewall with TerraformLearn how to enforce strict VLAN isolation, fast-track traffic, and build a default-deny firewall for MikroTik RouterOS using Infrastructure as Code.
- Surviving Azure Policies: Zero-Trust Hub & Spoke with TerraformHow to build an enterprise-grade Azure network architecture that blocks internet traffic by default and survives aggressive DeployIfNotExists (DINE) policies — without breaking your CI/CD pipeline.
- Deploying Gemma 4 26B on Proxmox: IaC Setup with Terraform, Ansible & AMD iGPUA complete guide to automating a local AI stack on Proxmox LXC using Terraform and Ansible, including Open-WebUI and AMD Radeon Vega iGPU workarounds.
- Hardening Azure Acmebot for ISO 27001 & NIS2 ComplianceA deep dive into architecting a Zero-Trust Let's Encrypt automation using Terraform, Azure Private Link, and VNet Integration.