💬 Micro: 2026-09

Tim Hårek really sent me down a rabbit hole with all the self-hosted services he lists on his latest blog post. There are some interesting links I put on my reading list. The first one I actually looked into, though, was Pocket ID. It’s a nice little OpenID Connect provider. A great homelab alternative to Keycloak, which I have to deal with at work sometimes.

It supports login with passkeys and can be configured with many other self-hosted services like Paperless-ngx, Forgejo, Nextcloud, KitchenOwl, and, since today, also GoBlog. Basically one passkey to rule them all. And it enables passkey support for the apps that don’t support them yet.

But it was also interesting implementing OIDC client support in GoBlog. It gave me the chance to fix a few bugs and recover my knowledge about OIDC in general.

Not too long ago, I switched from two Hetzner Cloud VPS to one netcup VPS, with integrating my mailserver setup into my hosting setup. It works fine so far. To keep things simple and because I’m back on Ubuntu on my laptop, I decided to just go with Ubuntu on the VPS as well.

But stumbling over bootc, I can’t stop the thinking of whether I should switch to a bootc setup. The whole OS is configured via a Containerfile, automatically rebuilt and updated with continuous integration. Using tools like Docker or Podman, I’m already familiar with.

It’s quite appealing to me and might be one of my next weekend projects…

My sites had a few TLS problems during the last few days. It was due to some Actalis certificates being revoked and OCSP failing for them. I don’t really know why Caddy wasn’t able to renew all of them correctly, but it should be fixed now.

While I like Actalis for being the only real European free TLS certificate provider, they bother me a lot by sending hundreds of emails all the time (like for every single cert when it is expiring), so I need mail rules to mass delete them. Maybe I missed some important mail in-between.