CVE-2025-27152: Auditing and Mitigating Axios SSRF in Kubernetes
A critical SSRF vulnerability in axios affects millions of Node.js apps. Here's how I audited 28+ Kubernetes apps and used NetworkPolicies to mitigate the risk.
> Don't Follow the Trend
A critical SSRF vulnerability in axios affects millions of Node.js apps. Here's how I audited 28+ Kubernetes apps and used NetworkPolicies to mitigate the risk.
A vulnerability scanner launched 38,000 requests in 30 minutes and took down my Archy.net Ghost blog. Here's how I built a native fail2ban with HAProxy stick-tables. No external daemons, no log parsing, just real-time protection.
103 GiB of client data. Dropbox Advanced at €650/year. It was time to take back control. Here's what happened when I migrated to self-hosted Seafile.
A deep dive into building a multi-tenant Citrix monitoring stack with Python, InfluxDB and Grafana.
How I used Python, MusicBrainz, AcoustID fingerprinting, and fuzzy matching to automatically tag 28,000 metal tracks, fetch album artwork, and embed it all — starting from a messy NFS share on a Sunday morning.
How I migrated 28 services from Docker Swarm to Talos Linux Kubernetes in 2 days with zero downtime. Cilium CNI, MetalLB BGP, Flux GitOps, and all the things that went wrong along the way.
I spent weeks fighting Qwen3-TTS to get decent French voice cloning on my RTX 3090. Seed pinning, audio trimming, per-language prompts - nothing worked reliably. Then I found Chatterbox Multilingual, and everything just clicked.
Transform Authentik default UI into a cyberpunk glassmorphism portal with AI-generated backgrounds, glowing app cards, and smooth animations.
A step-by-step guide to setting up Qwen3-TTS with GPU acceleration on Ubuntu Server. Complete with FastAPI wrapper, voice cloning via x-vector embeddings, and all the troubleshooting tips I wish I had when I started.
Deploy a 1.7B parameter TTS model with interesing featyures. No cloud APIs, no surprise bills, total data privacy.
How I replaced Microsoft Entra ID with Authentik for self-hosted SSO across Grafana, GitLab, and Portainer. Full control, better latency, zero cloud dependencies.
From cutting cost-heavy Citrix nets to mastering BGP Anycast, my HAProxy journey shows how resilience, security, and automation evolve.