How-to guides from running Terraform providers, a Dokploy server, and a NixOS machine.https://wihan.devenhttps://wihan.dev/writing/using-ai-agents-safely-with-1password-and-devenvhttps://wihan.dev/writing/using-ai-agents-safely-with-1password-and-devenvClaude Code, Cursor, and Codex all work by running shell commands, and your shell can read every secret on your machine. Here is how to give an agent the credentials it needs, and nothing else.Tue, 01 Sep 2026 00:00:00 GMTaiagentssecurity1passworddevenvhttps://wihan.dev/writing/factorio-server-manager-dockerhttps://wihan.dev/writing/factorio-server-manager-dockerOne container, one compose file, and a web UI for mods, saves, and restarts. From a box that has Docker to a factory your friends can join.Sun, 30 Aug 2026 00:00:00 GMTfactoriodockercomposehttps://wihan.dev/writing/managing-dokploy-with-terraformhttps://wihan.dev/writing/managing-dokploy-with-terraformThe whole stack behind this site is one Terraform repo - project, environments, apps, domains, DNS - and the goal state is an empty plan.Sun, 30 Aug 2026 00:00:00 GMTterraformdokployinfrahttps://wihan.dev/writing/creating-a-dokploy-terraform-providerhttps://wihan.dev/writing/creating-a-dokploy-terraform-providerWhat it takes to write a Terraform provider in Go for a young API - and why the acceptance tests talk to a real server.Sat, 22 Aug 2026 00:00:00 GMTgoterraformdokployhttps://wihan.dev/writing/securing-your-linux-vps-with-tailscalehttps://wihan.dev/writing/securing-your-linux-vps-with-tailscaleTake SSH off the public internet entirely - go from a fresh Ubuntu box to one you can only reach over your private tailnet.Sat, 27 Jun 2026 00:00:00 GMTlinuxsecuritytailscalesshvps