Renovate at scale: a self-hosted dependency bot for fifty repositories

July 10, 2026 in Tech

Most teams either ignore dependency drift or hand a SaaS bot org-wide write access and automerge everything. There is a middle path: run the bot yourself, make automerge a graded-trust decision, and treat the update pipeline as attack surface. Here is the whole setup, from one public repository.

Data residency is not sovereignty

June 29, 2026 in Tech

A data-residency badge tells you where your bytes sit. It says nothing about who can actually compel them. For anyone keeping data under GDPR, the AI layer is where it gets hard: the models you can reach and trust are fewer than the marketing suggests, and the field is consolidating away.

Sovereign cloud is becoming a governance choice

May 20, 2025 in Tech

A short look at Infomaniak’s foundation-backed governance model and why European cloud sovereignty matters for privacy, control, and reducing dependency on US infrastructure.

Traefik, OpenVPN and Direct Container Connections on Docker Swarm

September 19, 2020 in Tech, Linux

This How-To will show you how to launch an OpenVPN Server on Docker Swarm, to connect to your running services

OpenVPN Server on Docker Swarm

February 22, 2020 in Tech, Linux

This How-To will show you how to launch an OpenVPN Server in Docker Swarm, running in dual (TCP/UDP) mode. It will use swarm-launcher to start the processes in privileged mode and Nginx as a loadbalancer/proxy for allowing connections to the VPN server.

Deploy traefik, prometheus, grafana, portainer and oauth2_proxy with docker-compose

January 12, 2020 in Tech, Linux

Use docker-compose to deploy Prometheus, Grafana, Portainer behind Traefik cloud native edge router, all protected by oauth2_proxy

Protect your websites with oauth2_proxy behind traefik (docker stack edition)

October 20, 2019 in Tech, Linux

This is how to protect your website with Google’s OAuth 2.0, using pusher/oauth2_proxy behind a containous/traefik cloud native edge router.

Delete Time Series from Prometheus 2.0

December 3, 2017 in Tech

Since the update to Prometheus 2.0, the documentation still has to catch up. Because I’ve been debugging a custom written exporter, some unwanted metrics landed in my Prometheus. This is how to delete those series.

Deploy Proxmox with KVM on a Hetzner server

July 25, 2017 in Tech

This guide will show you how to deploy Proxmox VE 5 with KVM Routing and NAT on a Hetzner server with focus on networking and DHCP/DHCPv6.

Website Provisioning – Automate Apache with SaltStack

May 26, 2016 in Tech

Ever since I’ve started hosting my own domains, I’ve searched for ways to automate the website provisioning. Normally, the documentation includes the information on configuring your infrastructure based on roles. But if you have a webserver role for all your minions it doesn’t help with the individual provisioning I am aiming at.

Alex Thomae