In the technology sector, there are two separate yet equally important groups: the engineers, who build things held together with Docker and denial, and the security folks, who enumerate exactly what's held together with Docker and denial. Some belong to both groups.
How I manage five-plus domains with a single git push — per-site Docker containers, a private registry, HAProxy for routing, and GitHub Actions pipelines that gate on a Semgrep scan before deploying.
A man-in-the-middle proxy that intercepts Claude Code's outbound API calls and scans every prompt for leaked credentials before they leave your machine — built with mitmproxy, TruffleHog, and FastAPI.
How I replaced a bookmark folder full of raw IP:port entries with real hostnames, wildcard HTTPS, and Tailscale remote access — and what broke along the way.