Personal home page of Levente Csikor, PhD.https://cslev.vip/https://cslev.vip/blog/adding-a-zigbee-infrared-blaster-to-home-assistant-using-nothing-but-zha/https://cslev.vip/blog/adding-a-zigbee-infrared-blaster-to-home-assistant-using-nothing-but-zha/A video tutorial on pairing a Moes/Tuya Zigbee IR blaster with Home Assistant using only the built-in ZHA integration and a custom quirk — no Zigbee2MQTT or cloud apps required.Sat, 07 Sep 2024 00:00:00 GMThttps://cslev.vip/blog/adding-ikea-tradfri-zigbee-light-bulb-806-to-home-assistant-via-zha/https://cslev.vip/blog/adding-ikea-tradfri-zigbee-light-bulb-806-to-home-assistant-via-zha/A short video tutorial on pairing the cheap IKEA Tradfri Zigbee light bulb 806 with Home Assistant using nothing but the built-in Zigbee Home Automation (ZHA) integration — no IKEA gateway or app required.Mon, 22 Jul 2024 00:00:00 GMThttps://cslev.vip/blog/agentic-ai-foundation-is-leaking/https://cslev.vip/blog/agentic-ai-foundation-is-leaking/Combining OpenClaw, NemoClaw, Ollama, and a self-hosted Matrix server into a fully private, kernel-sandboxed agentic AI stack with no third-party servers in the critical path.Fri, 10 Apr 2026 05:20:24 GMThttps://cslev.vip/blog/containerizing-the-edge-llama-cpp/https://cslev.vip/blog/containerizing-the-edge-llama-cpp/Building a custom two-stage Dockerfile to run llama.cpp with CUDA on the NVIDIA Spark (ARM64/Blackwell), since the official images only target x86_64, plus multimodal model routing with a models.ini catalog.Wed, 31 Dec 2025 04:20:56 GMThttps://cslev.vip/blog/docker-registry-part-1/https://cslev.vip/blog/docker-registry-part-1/Running Harbor as a private Docker registry behind NGINX, with Keycloak SSO for the dashboard and a CLI secret for docker login/push.Wed, 20 Aug 2025 11:08:08 GMThttps://cslev.vip/blog/docker-registry-part-2/https://cslev.vip/blog/docker-registry-part-2/Federating multiple Keycloak realms through a users-less hub realm, so Harbor (or any single-OIDC-client app) can offer sign-in across separate teams without a shared realm.Wed, 20 Aug 2025 11:56:12 GMThttps://cslev.vip/blog/git-kepo-part-1/https://cslev.vip/blog/git-kepo-part-1/Building Git-Kepo, a Singlish-speaking NemoClaw specialist agent that clones repositories, runs churn/bus-factor/velocity diagnostics, and audits git history for leaked credentials using the LLM's own judgment.Mon, 20 Apr 2026 14:01:03 GMThttps://cslev.vip/blog/git-kepo-part-2/https://cslev.vip/blog/git-kepo-part-2/Upgrading Git-Kepo from an unreliable prototype to a production-grade NemoClaw agent: fixing Ollama context limits, splitting TOOLS.md to save tokens, and adding repo labelling and batch mode.Fri, 24 Apr 2026 15:46:01 GMThttps://cslev.vip/blog/how-to-configure-containerized-pgadmin-nginx-reverse-proxy/https://cslev.vip/blog/how-to-configure-containerized-pgadmin-nginx-reverse-proxy/Two real-world gotchas from putting PgAdmin behind the same NGINX reverse proxy as everything else: an SPA-sized rate limit, and the X-Frame-Options header that blocks its own embedded iframe.Thu, 07 Aug 2025 10:19:00 GMThttps://cslev.vip/blog/https-api-nuxt-fastapi-nginx/https://cslev.vip/blog/https-api-nuxt-fastapi-nginx/Debugging a mixed-content HTTPS error between a Dockerized Nuxt frontend and FastAPI backend behind Nginx, fixed with relative API paths and proper proxy headers.Fri, 17 Oct 2025 12:56:57 GMThttps://cslev.vip/blog/install-nvidia-drivers-cuda-on-debian-12-bookworm-nvidia-smi/https://cslev.vip/blog/install-nvidia-drivers-cuda-on-debian-12-bookworm-nvidia-smi/Pinning NVIDIA driver, CUDA, and nvidia-smi package versions on Debian 12 to avoid mismatches, then wiring up the NVIDIA Container Toolkit for GPU access in Docker and a self-hosted Ollama + Open WebUI stack.Tue, 08 Apr 2025 00:00:00 GMThttps://cslev.vip/blog/mellanox-bluefield-2-smartnic-part-1/https://cslev.vip/blog/mellanox-bluefield-2-smartnic-part-1/Installing Mellanox drivers, configuring rshim, and getting SSH access to an NVIDIA BlueField-2 DPU deployed at Cloudlab's Clemson cluster.Mon, 12 Apr 2021 00:00:00 GMThttps://cslev.vip/blog/mellanox-bluefield-2-smartnic-part-2/https://cslev.vip/blog/mellanox-bluefield-2-smartnic-part-2/Switching an NVIDIA BlueField-2 DPU from Separated Host to Embedded Function (SmartNIC) mode, enabling RDMA, and compiling DPDK 20.11.1 from source with Meson and Ninja.Wed, 14 Apr 2021 00:00:00 GMThttps://cslev.vip/blog/mellanox-bluefield-2-smartnic-part-3/https://cslev.vip/blog/mellanox-bluefield-2-smartnic-part-3/Building and troubleshooting a two-node, back-to-back Bluefield-2 SmartNIC topology on Cloudlab's Clemson cluster, from profile design and Geni-lib scripting to bandwidth, reservation, and connectivity errors.Thu, 15 Apr 2021 00:00:00 GMThttps://cslev.vip/blog/mellanox-bluefield-2-smartnic-part-4/https://cslev.vip/blog/mellanox-bluefield-2-smartnic-part-4/Baseline TCP throughput testing of the NVIDIA BlueField-2 DPU with iperf3 — comparing host vs. DPU-side performance and single- vs. multi-threaded results on Cloudlab.Mon, 19 Apr 2021 07:20:39 GMThttps://cslev.vip/blog/mellanox-bluefield-2-smartnic-part-5/https://cslev.vip/blog/mellanox-bluefield-2-smartnic-part-5/Reinstalling BlueField OS from scratch on a Cloudlab-hosted BlueField-2 DPU after losing SSH access, ending up with a fresh Ubuntu 20.04 image with DPDK and DOCA pre-installed.Mon, 19 Apr 2021 07:28:24 GMThttps://cslev.vip/blog/mellanox-bluefield-2-smartnic-part-6/https://cslev.vip/blog/mellanox-bluefield-2-smartnic-part-6/Benchmarking DPDK-based packet generation and forwarding performance on the NVIDIA BlueField-2 DPU, comparing single- and multi-core throughput against the earlier baseline iperf3 results.Wed, 21 Apr 2021 00:00:00 GMThttps://cslev.vip/blog/mellanox-bluefield-2-smartnic-part-7/https://cslev.vip/blog/mellanox-bluefield-2-smartnic-part-7/Comparing OvS hardware-offload strategies on the BlueField-2 DPU — no offload, TC flower-based offload, and DPDK datapath offload — with iperf3 throughput measurements for each.Mon, 03 May 2021 00:00:00 GMThttps://cslev.vip/blog/mellanox-bluefield-2-smartnic-part-7b/https://cslev.vip/blog/mellanox-bluefield-2-smartnic-part-7b/Continuing the OvS offload investigation with pktgen instead of iperf3 — measuring no-offload, TC flower, and DPDK offload throughput on the BlueField-2 DPU, including RSS scaling across multiple RX queues.Fri, 07 May 2021 00:00:00 GMThttps://cslev.vip/blog/mellanox-bluefield-2-smartnic-part-8/https://cslev.vip/blog/mellanox-bluefield-2-smartnic-part-8/Compiling DPDK from source for the BlueField-2 DPU with the correct meson platform setting, and reconfiguring pkg-config and ld.so.conf.d so system-wide builds actually link against it instead of the vendor-supplied version.Tue, 19 Mar 2024 00:00:00 GMThttps://cslev.vip/blog/mtls-vip-club-network-security/https://cslev.vip/blog/mtls-vip-club-network-security/A field guide to mutual TLS — Root CAs, client certificates, revocation, and NGINX enforcement — plus CertWiz-mTLS, a toolkit that automates the whole certificate lifecycle.Sun, 08 Feb 2026 04:59:27 GMThttps://cslev.vip/blog/one-ollama-is-not-enough/https://cslev.vip/blog/one-ollama-is-not-enough/Running two purpose-tuned Ollama instances on one GPU — one for text, one for vision — fronted by Open WebUI as an authenticated API gateway, so neither Ollama ever touches the internet directly.Mon, 11 May 2026 15:51:00 GMThttps://cslev.vip/blog/private-matrix-server-debian-13/https://cslev.vip/blog/private-matrix-server-debian-13/A step-by-step guide to running a private, federation-disabled Matrix homeserver (Synapse + PostgreSQL) natively on Debian 13, with token-gated registration behind an nginx reverse proxy.Wed, 08 Apr 2026 11:31:01 GMThttps://cslev.vip/blog/raspberry-pi-self-hosting-part-1/https://cslev.vip/blog/raspberry-pi-self-hosting-part-1/Kicking off a self-hosting series by building the hardware foundation for a Raspberry Pi 5 home server — NVMe SSD HAT, cooling, full-disk LUKS encryption with USB-key auto-decryption, and moving swap off the SD card.Mon, 19 May 2025 00:00:00 GMThttps://cslev.vip/blog/raspberry-pi-self-hosting-part-10/https://cslev.vip/blog/raspberry-pi-self-hosting-part-10/Building a Grafana + Prometheus + Node Exporter + Smartctl Exporter monitoring stack, gated behind Cloudflare Zero Trust, with an alert rule wired through to Gotify.Wed, 28 May 2025 15:09:03 GMThttps://cslev.vip/blog/raspberry-pi-self-hosting-part-11/https://cslev.vip/blog/raspberry-pi-self-hosting-part-11/Automating Docker image updates with Watchtower, wired to Gotify for notifications, plus the IP-pinning gotcha that leaves Watchtower stuck mid self-update.Thu, 29 May 2025 14:56:43 GMThttps://cslev.vip/blog/raspberry-pi-self-hosting-part-12/https://cslev.vip/blog/raspberry-pi-self-hosting-part-12/Setting up Keycloak for unified single sign-on across the stack, then wiring Grafana and Portainer to it via OpenID Connect, with an NGINX config for rate-limited remote access.Tue, 03 Jun 2025 16:56:39 GMThttps://cslev.vip/blog/raspberry-pi-self-hosting-part-13/https://cslev.vip/blog/raspberry-pi-self-hosting-part-13/Self-hosting Outline as a private Notion alternative, backed by Postgres and a shared Redis instance, with Keycloak SSO and an NGINX config tuned for a React SPA's burst of parallel requests.Sat, 07 Jun 2025 15:14:20 GMThttps://cslev.vip/blog/raspberry-pi-self-hosting-part-14/https://cslev.vip/blog/raspberry-pi-self-hosting-part-14/Self-hosting a federated Matrix homeserver with Keycloak SSO, a Cloudflare Worker for the well-known federation lookup, and the DNS and memory gotchas that came with running it long-term.Thu, 12 Jun 2025 14:43:13 GMThttps://cslev.vip/blog/raspberry-pi-self-hosting-part-15/https://cslev.vip/blog/raspberry-pi-self-hosting-part-15/Adding cAdvisor to watch per-container CPU, memory, and disk usage on the Pi, plus why Graylog is a heavier lift than the monitoring itself.Sun, 29 Jun 2025 06:39:54 GMThttps://cslev.vip/blog/raspberry-pi-self-hosting-part-16/https://cslev.vip/blog/raspberry-pi-self-hosting-part-16/Dropping Cloudflare Tunnel for a self-hosted NGINX reverse proxy with a Namecheap DDNS wildcard certificate, UFW firewall blocklists, and mutual TLS as an extra zero-trust layer.Sat, 02 Aug 2025 07:51:12 GMThttps://cslev.vip/blog/raspberry-pi-self-hosting-part-17/https://cslev.vip/blog/raspberry-pi-self-hosting-part-17/Taking Pi-hole and DNSCrypt-Proxy on the road with dnsdist, nginx-terminated DoH/DoT, and EDNS Client Subnet — so remote devices get encrypted, filtered, per-client DNS anywhere in the world.Mon, 04 May 2026 14:11:01 GMThttps://cslev.vip/blog/raspberry-pi-self-hosting-part-18/https://cslev.vip/blog/raspberry-pi-self-hosting-part-18/Replacing the increasingly freemium Rambox with Ferdium, a fully-free messenger aggregator, self-hosting its optional sync server on a Raspberry Pi behind nginx so no chat metadata ever touches a third party.Sat, 27 Jun 2026 09:10:39 GMThttps://cslev.vip/blog/raspberry-pi-self-hosting-part-19/https://cslev.vip/blog/raspberry-pi-self-hosting-part-19/Automating wildcard Let's Encrypt renewals on a registrar with no DNS API, using acme.sh, acme-dns, and one permanent CNAME record — no static IP, no paid API tier, no human in the loop.Sat, 15 Aug 2026 07:17:12 GMThttps://cslev.vip/blog/raspberry-pi-self-hosting-part-2/https://cslev.vip/blog/raspberry-pi-self-hosting-part-2/Installing Docker on a Raspberry Pi, enabling cgroup memory accounting, moving container storage onto the encrypted SSD, and managing everything through a self-hosted Portainer instance.Tue, 20 May 2025 00:00:00 GMThttps://cslev.vip/blog/raspberry-pi-self-hosting-part-3/https://cslev.vip/blog/raspberry-pi-self-hosting-part-3/Combining Pi-hole and dnscrypt-proxy in Docker for network-wide, encrypted DNS — plus the NULL-blocking-mode default that quietly breaks your own reverse proxy.Thu, 22 May 2025 00:00:00 GMThttps://cslev.vip/blog/raspberry-pi-self-hosting-part-4/https://cslev.vip/blog/raspberry-pi-self-hosting-part-4/Setting up remote access with Cloudflare Tunnel via Docker Compose and Portainer — dealing with CG-NAT, and enabling SSH access to the Pi through the tunnel.Sat, 24 May 2025 09:08:00 GMThttps://cslev.vip/blog/raspberry-pi-self-hosting-part-5/https://cslev.vip/blog/raspberry-pi-self-hosting-part-5/Self-hosting Vaultwarden as a Bitwarden-compatible password vault, exposed remotely via Cloudflare Tunnel, with a hardened NGINX config as the alternative reverse-proxy path.Sat, 24 May 2025 10:29:11 GMThttps://cslev.vip/blog/raspberry-pi-self-hosting-part-6/https://cslev.vip/blog/raspberry-pi-self-hosting-part-6/Self-hosting Nextcloud on a Raspberry Pi with MariaDB and Redis, exposed via Cloudflare Tunnel or NGINX, plus the occ commands and cron job that keep it healthy long-term.Sat, 24 May 2025 12:29:56 GMThttps://cslev.vip/blog/raspberry-pi-self-hosting-part-7/https://cslev.vip/blog/raspberry-pi-self-hosting-part-7/Running Transmission behind an always-on OpenVPN tunnel in Docker, exposing it remotely via Cloudflare Tunnel or NGINX, and sharing the download directory back to the LAN over NFS.Sun, 25 May 2025 10:57:59 GMThttps://cslev.vip/blog/raspberry-pi-self-hosting-part-8/https://cslev.vip/blog/raspberry-pi-self-hosting-part-8/Running Home Assistant on the Pi with a Zigbee USB stick, exposing it via Cloudflare Tunnel or NGINX, and turning a touchscreen into a motion-aware kiosk dashboard.Sun, 25 May 2025 14:55:52 GMThttps://cslev.vip/blog/raspberry-pi-self-hosting-part-9/https://cslev.vip/blog/raspberry-pi-self-hosting-part-9/Self-hosting Gotify as a push-notification server, exposed via Cloudflare Tunnel, with a curl and Python example for sending alerts to it.Mon, 26 May 2025 13:01:26 GMThttps://cslev.vip/blog/singaporean-grandparents-ai-food-court/https://cslev.vip/blog/singaporean-grandparents-ai-food-court/Giving self-hosted OpenClaw agents real personality — building two Singlish-speaking AI characters on separate NemoClaw sandboxes that share a Matrix room and pass conversations to each other by mention.Thu, 16 Apr 2026 15:11:01 GMThttps://cslev.vip/blog/vocalinux-on-debian/https://cslev.vip/blog/vocalinux-on-debian/Getting Vocalinux — a fully offline, GPU-accelerated voice dictation tool — working on Debian, past three undocumented build hurdles Ubuntu users never see.Fri, 22 May 2026 22:06:00 GMT