From firmware to full stack.
Building neural interfaces, real-time sensing systems, and open-source embedded firmware. I write about the tools, languages, and infrastructure that hold it all together.
Recent Posts
Dotfiles, Part 6: Ephemeral and Declarative Edge Access
Two new modes for the cf CLI: throwaway tunnels that gate a local port behind a login and clean up after themselves, and a declarative reconciler that keeps self-hosted Cloudflare Access apps in sync from Nix.
8020: Bridging the 80/20 Endurance Library to intervals.icu
A Rust CLI that scrapes the 80/20 Endurance workout library, converts 621 FIT files to intervals.icu DSL text, and uploads them. Born from sixteen months of Ironman training.
Dotfiles, Part 5: Custom Tooling and the Platform Edges
A Cloudflare CLI with a tunnel state machine, GNU Stow inside Nix, triple-platform service modules, secure credential hashing, declarative ZFS, and dev shell bootstrapping.
Dotfiles, Part 4: Network-Aware Services — From Split Tunneling to Topology-Driven DNS
ProtonVPN with network namespace split tunneling, ad-blocking derived from VLAN topology, DHCP-to-DNS sync, and dynamic WireGuard peer onboarding — all as composable NixOS modules.
Dotfiles, Part 3: Secrets, Fleet Management, and the User Bridge
How I bootstrap 9 machines with sops-nix, clan-core, and a user module pattern that solves the secrets chicken-and-egg problem — plus service exposure via Caddy and Cloudflare Tunnel.