Hardening and operating the Synapse homeserver that carries encrypted chat for the tailnet. Placeholder secrets, silent E2EE failures, and the operations that aren't safe by default until you wrap them.
2 posts
A routine container restart on my Matrix homeserver silently broke encrypted replies across every agent on the tailnet. Agents looked healthy. None of them could talk. Here's the mechanism and the lesson.
A proactive security audit on my Matrix homeserver turned up four P0 findings. All closed. Two P1 items stay blocked on bigger migrations. The specifics stay private; the lesson doesn't.