Rebuilding the reverse proxy
Moved everything behind a single nginx container. Fewer published ports, one place to reason about routing. The main lesson: keep the config boring, and write down why each block exists before you forget.
A small server in a closet. Mostly notes to myself about keeping it running.
Backups that actually restore
A backup you have never restored is a hypothesis. Restored the database into a scratch
container this week and found the dump was missing roles. Fixed the script to use
pg_dumpall.
Disk layout, revisited
Root filesystem was filling up with container images nobody used. Now on a monthly prune. Freed about 9 GB the first time, which was more than expected.