https://kareemschultz.com/blogNetworks, homelabs, security and software.enhttps://kareemschultz.com/blog/the-layers-behind-a-useful-apphttps://kareemschultz.com/blog/the-layers-behind-a-useful-appWed, 28 Oct 2026 12:00:00 GMTTrace a web request through DNS, TLS, proxies, the application and its database, then follow the checks that make a release dependable. https://kareemschultz.com/blog/planning-a-homelab-that-teacheshttps://kareemschultz.com/blog/planning-a-homelab-that-teachesWed, 28 Oct 2026 12:00:00 GMTBuild a small, intentional lab with VLANs, virtualization, NAS storage and recoverable backups—and learn from each failure without risking your everyday network. https://kareemschultz.com/blog/security-and-ci-cd-are-part-of-the-buildhttps://kareemschultz.com/blog/security-and-ci-cd-are-part-of-the-buildWed, 28 Oct 2026 12:00:00 GMTA practical release pipeline: least-privilege permissions, reviewed changes, reproducible builds, deployment approvals, live checks and a way back when things fail. https://kareemschultz.com/blog/service-unreachable-first-response-sophttps://kareemschultz.com/blog/service-unreachable-first-response-sopWed, 28 Oct 2026 12:00:00 GMTA practical, copyable, read-only-first incident checklist for DNS, TLS, proxy errors, origin health and communication—without restarting services at random. https://kareemschultz.com/blog/pre-deployment-change-window-checklisthttps://kareemschultz.com/blog/pre-deployment-change-window-checklistThu, 29 Oct 2026 12:00:00 GMTA reusable go/no-go checklist for releases, with evidence, owner accountability, rollback dependencies and post-change verification. https://kareemschultz.com/blog/unifi-guest-wifi-captive-portal-troubleshootinghttps://kareemschultz.com/blog/unifi-guest-wifi-captive-portal-troubleshootingThu, 29 Oct 2026 12:00:00 GMTA field guide for guest SSIDs, VLAN isolation, DNS, redirects, vouchers, captive portal authorizations and the symptoms users actually report. https://kareemschultz.com/blog/homelab-restore-drill-sophttps://kareemschultz.com/blog/homelab-restore-drill-sopThu, 29 Oct 2026 12:00:00 GMTVerify that a backup can actually restore a VM, application data and credentials—with a repeatable, documented recovery exercise. https://kareemschultz.com/blog/reviewing-ansible-terraform-opentofu-changeshttps://kareemschultz.com/blog/reviewing-ansible-terraform-opentofu-changesThu, 29 Oct 2026 12:00:00 GMTHow to inspect Ansible plans, Terraform/OpenTofu state and diffs, secrets, blast radius and drift before approving an infrastructure change. https://kareemschultz.com/blog/vpns-remote-access-and-zero-trust-explainedhttps://kareemschultz.com/blog/vpns-remote-access-and-zero-trust-explainedThu, 29 Oct 2026 12:00:00 GMTWireGuard, IPsec/IKEv2, OpenVPN, legacy L2TP, overlays and zero-trust application access compared by architecture, use case and operational trade-offs. https://kareemschultz.com/blog/web-content-compression-and-bundle-optimizationhttps://kareemschultz.com/blog/web-content-compression-and-bundle-optimizationThu, 29 Oct 2026 12:00:00 GMTUnderstand gzip, Brotli, Zstandard, modern image formats, delivery hints and realistic bundle-size measurements. https://kareemschultz.com/blog/from-alert-to-action-visual-automation-workflowhttps://kareemschultz.com/blog/from-alert-to-action-visual-automation-workflowWed, 28 Oct 2026 12:00:00 GMTA visual, interactive example of how triggers, checks, approvals, Python, Ansible and infrastructure as code can fit together without giving an automation unnecessary power. https://kareemschultz.com/blog/php2shell-explained-php-runtime-securityhttps://kareemschultz.com/blog/php2shell-explained-php-runtime-securityWed, 28 Oct 2026 12:00:00 GMTA practical, sourced explanation of CVE-2026-109618 and CVE-2026-109619: how PHP request cleanup became dangerous, which versions are fixed, and how operators can inventory, patch and investigate exposed servers. https://kareemschultz.com/blog/ubuntu-linux-vps-hardening-guidehttps://kareemschultz.com/blog/ubuntu-linux-vps-hardening-guideWed, 28 Oct 2026 12:00:00 GMTA step-by-step security baseline for Ubuntu servers: SSH access, sudo, UFW, updates, AppArmor, Fail2ban, logs, backups and recovery—with safe, copyable example commands.