My home network is probably more than it needs to be. Multiple VLANs, 802.1x authentication, encrypted DNS, segmented IoT, Cloudflare tunnels in front of anything exposed externally. I do it because I find it interesting — but there's a reasonable philosophy underneath it: things I trust and things I don't shouldn't share the same network, and if something does go wrong, I want the blast radius to be limited. This post covers the hardware, the segmentation, the wireless setup, and some of the rougher edges.

How I built a fully automated, price-aware EV charging system using Home Assistant, Octopus Agile, Agile Predict, and PyScripts and why the obvious solution wasn't good enough.

Developing a Webfinger Responder plugin for WordPress to support Tailscale OIDC.

2021 Volkswagen Golf GTI Clubsport (Mk8) – EO21 BGX

2017 Volkswagen Arteon Mk1 (3H) – WJ67 DDN

A gallery showcase of the 2022 Volkswagen Arteon R.