mizuchi@labs:~$git log --oneline

Blog

What broke, what annoyed me, and what I wrote instead.

A Seal for Every Key

inkan issues signed license keys that apps verify offline, and turns Stripe subscriptions into keys.

fuu keeps a repository's secrets in one TPM-sealed file and loads them into your shell like direnv.

How I built a stateless, event-driven mesh to route Traefik across multiple Proxmox nodes and servers.

Automating external DNS records from Traefik labels in Docker using Go and libdns.

Declarative schema diffing tool for SQLite, inspired by Stripe's pg-schema-diff.

A container update daemon for Docker and Swarm that sends no notifications.