All Categories - arleo.eu

All Categories

Infrastructure

Hugo SEO: Googlebot 404s, noindex aliases and sitemap normalization

Hugo: freezing Mermaid diagrams to static dark/light SVGs

CSP A+ on Hugo + Cloudflare: from hash-based to origin allowlist, auto-monitoring and hardening

hugo-mcp Cloudflare plugin: smart cache purge

NUC Security Audit: ModSecurity Removed, 500 MB Recovered

Post-Mortems

Post-mortem: Cloudflare Bot Management blocked MCP webhooks

Post-mortem: mcp-installer regenerated tokens on every rerun

Post-mortem: 3 MCP timeouts — IPAddressDeny + Cloudflare + NFS

Postmortem

Hugo SEO: Googlebot 404s, noindex aliases and sitemap normalization

CSP A+ on Hugo + Cloudflare: from hash-based to origin allowlist, auto-monitoring and hardening

Postmortem — CrowdSec AppSec: Heuristic False Positive on Sonarr/Radarr

Roadmap

Roadmap: should we migrate the 16 articles to content/posts/?

Roadmap: MCP Security Sprint — 4 domains, 10 chantiers (DELIVERED ✅)

Roadmap: Git webhook → automatic Hugo rebuild

Debug

Postmortem — CrowdSec AppSec: Heuristic False Positive on Sonarr/Radarr

Postmortem: TypeIt broken by Mermaid in LoveIt theme

Documentation

Infrastructure Documentation

Infrastructure Scripts

Hardening

Hugo: freezing Mermaid diagrams to static dark/light SVGs

CSP A+ on Hugo + Cloudflare: from hash-based to origin allowlist, auto-monitoring and hardening

Plugins

Grav Google Indexing Plugin: automatically submit pages to Google

Grav IndexNow Plugin: automatically submit pages to search engines

Security

CSP A+ on Hugo + Cloudflare: from hash-based to origin allowlist, auto-monitoring and hardening

SRI on Hugo: automated hashes, auto-update and BetterStack alerting

Homelab

SRI on Hugo: automated hashes, auto-update and BetterStack alerting

Incidents

Post-Mortem — Incident 522 / WAN Failover (April 8, 2026)

Web

Postmortem: TypeIt broken by Mermaid in LoveIt theme