Production systems, infrastructure, and what actually breaks. One post a week.https://kazishiplu.com/https://kazishiplu.com/blog/case-study-blip-uptime-monitor/https://kazishiplu.com/blog/case-study-blip-uptime-monitor/Monitoring client sites, side projects and a homelab without running a server. Blip on Workers and D1, and a checking model that fits one cron execution budget.Tue, 04 Aug 2026 00:00:00 GMTcase studycloudflareserverlessbliphttps://kazishiplu.com/blog/rag-is-an-authorization-problem/https://kazishiplu.com/blog/rag-is-an-authorization-problem/The standard pipeline retrieves by similarity and checks permissions afterwards. That ordering is a data leak with a ranking function in front of it.Tue, 07 Jul 2026 00:00:00 GMTairagsecurityarchitecturedesignhttps://kazishiplu.com/blog/when-a-classifier-beats-a-prompt/https://kazishiplu.com/blog/when-a-classifier-beats-a-prompt/Routing a user to the right handler is a classification problem with seven answers. A prompt costs latency, per-token spend, and the determinism you needed.Tue, 09 Jun 2026 00:00:00 GMTaimachine learningarchitectureresearchhttps://kazishiplu.com/blog/case-study-local-llm-stack/https://kazishiplu.com/blog/case-study-local-llm-stack/A 27B model on a mini PC at 2.89 tokens per second, an iGPU that never got used, and what a local stack is good for once it stops pretending to replace an API.Tue, 21 Apr 2026 00:00:00 GMTcase studylocal llmollamahomelabaihttps://kazishiplu.com/blog/case-study-under-vehicle-scanning/https://kazishiplu.com/blog/case-study-under-vehicle-scanning/Cropping a strip from every frame and pasting them together gives a seamed, duplicated mess. The problem is geometric alignment, and blending will not fix it.Tue, 24 Mar 2026 00:00:00 GMTcase studycomputer visionopencvffmpeghttps://kazishiplu.com/blog/upload-succeeded-processing-did-not/https://kazishiplu.com/blog/upload-succeeded-processing-did-not/A 200 on a file upload means you took the bytes, not that you understood them. Designing ingestion where those are two visible events instead of one promise.Tue, 17 Feb 2026 00:00:00 GMTarchitecturebackendqueuespostgreselasticsearchhttps://kazishiplu.com/blog/two-kinds-of-oauth-token/https://kazishiplu.com/blog/two-kinds-of-oauth-token/A delegated token and an app-only token are not the same credential with different scopes. /me needs a me, which is why these errors look like permission bugs.Tue, 20 Jan 2026 00:00:00 GMToauthmicrosoft graphsecurityintegrationshttps://kazishiplu.com/blog/df-said-107gb-free/https://kazishiplu.com/blog/df-said-107gb-free/Two days of failed image pushes on a host every tool said had space. The filesystem was not full. The thin pool three layers underneath it was.Tue, 04 Nov 2025 00:00:00 GMTstoragedebuggingproxmoxdockerhttps://kazishiplu.com/blog/every-layer-gets-a-veto/https://kazishiplu.com/blog/every-layer-gets-a-veto/You raised the upload limit in the application and the upload still fails. Ingress, NGINX and PHP each have their own ceiling, and the first one to object wins.Tue, 07 Oct 2025 00:00:00 GMTdebuggingnginxkuberneteswordpressnextjshttps://kazishiplu.com/blog/it-built-fine-and-still-crashed/https://kazishiplu.com/blog/it-built-fine-and-still-crashed/The build runs as root, your container does not. A green build proves the files exist, not that the process using them can write. Same bug, four different stacks.Tue, 02 Sep 2025 00:00:00 GMTdockerkubernetescontainersdebugginghttps://kazishiplu.com/blog/read-the-error-inside-out/https://kazishiplu.com/blog/read-the-error-inside-out/The first line names the component that gave up. The last clause names what broke. Two Docker failures where reading left to right cost hours, and DNS was the cause.Tue, 08 Jul 2025 00:00:00 GMTdebuggingdockerdnslinuxhttps://kazishiplu.com/blog/connected-is-not-working/https://kazishiplu.com/blog/connected-is-not-working/A tunnel reporting connected is answering one question: can it reach its own control plane. Two outages where every green light was correct and nothing worked.Tue, 15 Apr 2025 00:00:00 GMTnetworkingdebuggingcloudflaretailscalehttps://kazishiplu.com/blog/case-study-deploying-behind-nat/https://kazishiplu.com/blog/case-study-deploying-behind-nat/No port 22 open to the internet, no source code on the production box. How the pipeline gets in over Tailscale, and the six ways it broke on the way there.Tue, 14 Jan 2025 00:00:00 GMTcase studyci-cdtailscaledockercloudflarehttps://kazishiplu.com/blog/case-study-multi-wan-homelab-network/https://kazishiplu.com/blog/case-study-multi-wan-homelab-network/The homelab grew one consumer router at a time until nothing could reach anything. Consolidating onto one MikroTik, and why overlapping subnets look like DNS bugs.Tue, 08 Oct 2024 00:00:00 GMTcase studynetworkingmikrotikhomelabhttps://kazishiplu.com/blog/why-this-site-costs-nothing/https://kazishiplu.com/blog/why-this-site-costs-nothing/This site is static HTML on Cloudflare Pages at $0/month. That is positioning, not frugality: it is the same constraint I design production systems under.Tue, 16 Jul 2024 00:00:00 GMTmetacloudflarehttps://kazishiplu.com/blog/a-map-of-everything-i-run/https://kazishiplu.com/blog/a-map-of-everything-i-run/Three ISPs, four routers nobody is in charge of, a Proxmox mini PC, and everything public sitting on a Cloudflare free tier. The map the later posts refer back to.Tue, 25 Jun 2024 00:00:00 GMTmetahomelabcloudflareproxmoxhttps://kazishiplu.com/blog/why-i-write-about-what-breaks/https://kazishiplu.com/blog/why-i-write-about-what-breaks/Six years of building backend systems and being the person who gets woken up when they fall over. What this blog is for, and the rules I hold it to.Tue, 11 Jun 2024 00:00:00 GMTmeta