Networknet notebook
Field notes
Practical notes about building, securing and operating real systems.
Learning the network by denying it first
Applying default-deny NetworkPolicies per use case to segment Kubernetes traffic and turn application data flows into explicit rules.
DNS visibility starts on the LAN
Using Pi-hole to make local DNS behavior visible, introduce basic filtering and move upstream resolution towards encrypted DNS.
Giving home systems a common metrics language
Exporting solar, climate, smart-device and energy-meter signals from GoodWe, Daikin, Shelly and DSMR P1 into Prometheus—and making them useful in Grafana.