Blog

The Blog

Practical notes on Azure, identity, automation and AI — written from real projects, not press releases.

Latest postSeptember 25, 2026 9 min

Azure service enablement: why and how

Learn how to assess an Azure service, map security controls to enforceable policy, and give workload teams the guidance they need to deploy it.

Read the post

Jul 5, 2026EN 5 min

The Command Deck Redesign: Turning My Blog Into a Portfolio

My blog got a complete visual overhaul, designed together with AI. Why I went portfolio-first, how a Mass Effect vibe stays professional, and what I said no to along the way.

#Nuxt #VibeCoding #AI #WebDev #Design

Jun 4, 2026EN 2 min

Intune & Ubuntu 26.04

Testing out the Intune Portal installer script from Microsoft on Ubuntu 26.04

#Linux #Ubuntu #Software #Intune

May 26, 2026EN 6 min

Restore access to Unifi OS Server

Locked out after a cross-instance backup restore? Here's how UniFi OS Server actually stores passwords — across MongoDB, PostgreSQL, and a file cache — and how to reset them when everything is inconsistent.

#UniFi #SelfHosting #Proxmox #Networking #Linux

Apr 22, 2026EN 3 min

Intune & Ubuntu 24.04 revisited in 2026

Two years later, Intune onboarding on a fresh Ubuntu 24.04.4 install is finally simple: official script, quick compliance, and no workaround repos needed.

#Linux #Ubuntu #Software #Intune

Apr 14, 2026EN 9 min

Why I Built a Shelly MCP Server (So I Could Migrate to Home Assistant)

I wanted a practical way to migrate Shelly settings into Home Assistant workflows through MCP. I found a Home Assistant MCP server, but no reliable Shelly MCP server, so I built one.

#Shelly #Home Assistant #MCP #SelfHosting #VibeCoding

Apr 2, 2026EN 15 min

My Ultimate Self-Hosted AI Chat Stack

One Docker Compose stack to rule them all: private chat, local and cloud LLMs, image generation, voice input, web search, document research, and full observability — all on your own hardware.

#AI #SelfHosting #Docker #OpenWebUI #LiteLLM

Mar 5, 2026EN 8 min

Branch Manager: A Web UI for Cleaning Up Stale Azure DevOps Branches

I built a self-hosted web tool to filter, review, and bulk-delete stale branches across all repositories in an Azure DevOps project, because the portal was never designed for this.

#Azure DevOps #Azure #Tools #VibeCoding #Git

Mar 3, 2026EN 7 min

From Hugo to Nuxt: Why I Switched to Vibe Code My Blog

How switching from Hugo to Nuxt opened the door to vibe coding with GenAI and why a mature framework makes all the difference when you want to build, explore, and experiment fast.

#Nuxt #Hugo #AI #VibeCoding #WebDev

Jul 8, 2025EN 3 min

PIM + Conditional Role Assignments: Secure Autonomy for Azure Landing Zones

Combine PIM eligible roles with conditional role assignments to give teams just-in-time Owner access while preventing privilege escalation.

#Azure #RBAC #PIM #Security #IAM

Jul 1, 2025EN 5 min

Azure Conditional Role Assignments with Bicep!

Implement secure workload autonomy using Azure conditional role assignments with Bicep and Azure Verified Modules.

#Azure #RBAC #Security #IAM #Identity

Dec 16, 2024EN 6 min

Centralizing Password Policy Management in Multi-Tenant Entra ID Environments

Automate banned password list management across multiple Entra ID tenants using Microsoft Graph API, PowerShell and Azure DevOps.

#Entra #Authentication #PowerShell #Graph #Identity

May 1, 2024EN 6 min

Azure Privileged Identity Management as code

Configure PIM Eligible Role Assignments on Azure subscriptions using the ARM API in PowerShell, including role policies, approvers, and eligible role creation.

#PIM #Azure #PowerShell #IAM #Identity

Apr 22, 2024EN 5 min

Intune & Ubuntu 24.04

A complete guide to setting up Ubuntu 24.04 LTS with Intune, including the Intune Portal, Microsoft Edge, development tools, and more.

#Linux #Ubuntu #Software #Intune