Blog

A safe, step-by-step way to get the latest OpenWrt onto the Banana Pi BPI-R4's onboard eMMC, without bricking the board.

Automating wildcard Let's Encrypt renewals on a registrar with no DNS API, using acme.sh, acme-dns, and one permanent CNAME record — no static IP, no paid API tier, no human in the loop.

Replacing the increasingly freemium Rambox with Ferdium, a fully-free messenger aggregator, self-hosting its optional sync server on a Raspberry Pi behind nginx so no chat metadata ever touches a third party.

Getting Vocalinux — a fully offline, GPU-accelerated voice dictation tool — working on Debian, past three undocumented build hurdles Ubuntu users never see.

Running two purpose-tuned Ollama instances on one GPU — one for text, one for vision — fronted by Open WebUI as an authenticated API gateway, so neither Ollama ever touches the internet directly.

Taking Pi-hole and DNSCrypt-Proxy on the road with dnsdist, nginx-terminated DoH/DoT, and EDNS Client Subnet — so remote devices get encrypted, filtered, per-client DNS anywhere in the world.

Upgrading Git-Kepo from an unreliable prototype to a production-grade NemoClaw agent: fixing Ollama context limits, splitting TOOLS.md to save tokens, and adding repo labelling and batch mode.

Building Git-Kepo, a Singlish-speaking NemoClaw specialist agent that clones repositories, runs churn/bus-factor/velocity diagnostics, and audits git history for leaked credentials using the LLM's own judgment.

Giving self-hosted OpenClaw agents real personality — building two Singlish-speaking AI characters on separate NemoClaw sandboxes that share a Matrix room and pass conversations to each other by mention.

Combining OpenClaw, NemoClaw, Ollama, and a self-hosted Matrix server into a fully private, kernel-sandboxed agentic AI stack with no third-party servers in the critical path.