~/if.codes$ls posts/

Notes on building AI that actually works.

RAG and semantic search, LLM integrations, agent pipelines and the backends underneath — practical posts written while shipping.

⌘K

Work with meTaking projects

I build what I write about — RAG and semantic search, AI integrations and agent pipelines, on backends in Go and Python.

Free · no commitment · I read every request myself

Latest · InfrastructureOct 25, 2026 · 6 min read

Take your VPS off the public internet: SSH over Tailscale, the site behind a Cloudflare Tunnel, and a firewall with zero inbound ports

A lockout-safe order for a small VPS: Tailscale SSH first, then serve the site through cloudflared, then deny every inbound port. Copy-pasteable commands for Ubuntu, and the checks that prove nothing listens publicly.

#security#vps#tailscale#cloudflareRead the post

Infrastructure

Oct 25, 2026 · 5 min readPHP2Shell on your own server: reaching PHP 8.2.35+ on php-fpm, mod_php and FrankenPHP, and the stopgap when you're stuck on 8.1php.net's 21 October release fixes two unauthenticated RCEs that hit every PHP web SAPI. Version checks that prove the running worker is patched, upgrade paths for distro packages, Docker images and FrankenPHP, and php.net's interim mitigations for 8.1 and older.#php#security#self-hosting#docker

AI integrations

Oct 23, 2026 · 6 min readHetzner tripled some new-instance prices: keep, rescale or move — a decision sheet for a small self-hosted stackHetzner's June 2026 prices hit new orders and rescales; old servers keep their rate. Why not to rescale a grandfathered box, where Arm CAX still fits, and hcloud commands to price a move.#hetzner#self-hosting#cloud-costs#hcloud

RAG & search

Oct 20, 2026 · 6 min readGPT-4o and GPT-4.1 leave the API on January 14: moving to gpt-6-luna without breaking your function callsOpenAI shuts down four GPT-4o and GPT-4.1 snapshots, and their fine-tunes, on January 14, 2027. Its named replacement, gpt-6-luna, is a reasoning model with one function-calling catch in Chat Completions. Here are two migration paths, a replay test and a token-bill check.#openai#migration#llm-api#function-calling

Infrastructure

Oct 19, 2026 · 5 min readSwapping Docker Desktop for Apple's container: one VM per container on your Mac, what runs unchanged from Docker Hub, and where you still need DockerApple's container CLI has been stable since 1.0 in June and is at 1.5.0. A hands-on swap: install, build, run Postgres from Docker Hub, reach it by name, and the gaps (no Compose, slower cold starts, memory that is not handed back) that decide whether Docker stays.#docker#macos#containers#devtools

Infrastructure

Oct 19, 2026 · 5 min readGitHub's agentic autofix is GA: batching 25 CodeQL alerts into one draft PR, what it bills, and how to review the fixesAgentic autofix for code-scanning alerts went GA on October 15: Copilot explores the repo, fixes, re-runs CodeQL and opens a draft PR for up to 25 alerts at once. Who can use it, how to turn it on, where the cost lands, how to pick a first batch with gh, and a review checklist.#github#codeql#security#code-review

All posts

// what I write about — and build

Three topics. Also three things I build for clients.

Every topic has posts to read and a free quote if you want it built for your data and systems.

RAG & semantic search

Search and assistants that answer from your own documents — with sources, and a handoff when they’re not sure.

Embeddings & vector search
Hybrid keyword + meaning search
Assistants with citations

AI integrations

LLMs wired into the systems you already run — tickets, CRM, catalog, inbox — with costs and quality you can see.

Summaries, drafts, classification
Translations and content generation
APIs, webhooks, your own model

Agent pipelines

Multi-step agents as inspectable workflows — they plan, act and check, and a person approves anything that matters.

Workflows you can open and trace
Human approval steps
Event-driven, retry-safe backends

New posts by RSSOne entry per post, no tracking — works with any feed reader.Subscribe to the feed

// about

One engineer. I write about what I build.

Software engineer working on RAG, AI integrations and agent pipelines on Go and Python backends. Author of the Redelay framework and the FlowDSL workflow engine. Remote, EU time zones.

GoPythonRAGembeddingsLLM APIsagentsKafka / NATSMongoDB

RSS feed

// free quote

Read something you need? I’ll quote it for free.

RAG, AI integrations, agents or the backend underneath — tell me what you have and what should change. I read every request myself.

Free · no commitment

Tell me what you have. I’ll tell you what it takes.

1Describe the projectA few sentences is enough — about two minutes.

2I review itI read it myself and may ask a follow-up question.

3You get a free quoteScope, approach and estimate — yours to keep, no strings.