Engineering documentation & proofs of concept.https://punkcake.nethttps://punkcake.net/blog/rebuilding-punkcake-astro-cloudflarehttps://punkcake.net/blog/rebuilding-punkcake-astro-cloudflareHow this site went from a Lovable app on a Node server, reading posts from WordPress on every request, to static pages on Cloudflare with a git-based editor, perfect Lighthouse scores and almost nothing to maintain.Tue, 27 Oct 2026 12:00:00 GMTAstroCloudflareSveltia CMSPerformancehttps://punkcake.net/blog/vpn-port-forwarding-gluetunhttps://punkcake.net/blog/vpn-port-forwarding-gluetunHow I gave a peer-to-peer client an open port through ProtonVPN, then replaced my first working version because of a security setting I didn't like.Sun, 25 Oct 2026 12:00:00 GMTWireGuardProtonVPNDockerNetworkinghttps://punkcake.net/blog/private-music-serverhttps://punkcake.net/blog/private-music-serverHow I built a self-hosted music server on a tiny ThinkStation: Navidrome, automated tagging, Cloudflare Zero Trust for remote access, and nothing open on my router.Sat, 24 Oct 2026 12:00:00 GMTDockerNavidromeCloudflare Zero TrustSelf-hostinghttps://punkcake.net/blog/niri-noctalia-dotfiles-in-githttps://punkcake.net/blog/niri-noctalia-dotfiles-in-gitI moved my hand-built niri and Noctalia desktop into a private git repo, so any new machine can look and feel like mine. Next step: the whole system as code.Wed, 21 Oct 2026 12:00:00 GMTNiriNoctaliaLinuxDotfileshttps://punkcake.net/blog/from-ai-lab-to-sandboxed-claude-codehttps://punkcake.net/blog/from-ai-lab-to-sandboxed-claude-codeI built a self-hosted AI lab in rootless Podman, with OpenRouter models and my own Noctalia plugins. Then I right-sized it to one AI coding assistant in a sandbox designed around a threat model: my machine stays mine, and nothing goes live without my yes.Tue, 20 Oct 2026 13:00:00 GMTClaude CodePodmanSelf-hostingSecurityhttps://punkcake.net/notes/cloudflare-edge-markdown-for-ai-botshttps://punkcake.net/notes/cloudflare-edge-markdown-for-ai-botsAI crawlers fetch full HTML pages and load the origin for content they turn into text anyway. I built a Cloudflare Worker that serves them pre-rendered Markdown from KV storage at the edge, with zero origin load.Tue, 15 Sep 2026 11:45:00 GMTAICloudflareMarkdownWordPresshttps://punkcake.net/notes/replit-deploying-replit-agent-sites-to-wp-engine-headlesshttps://punkcake.net/notes/replit-deploying-replit-agent-sites-to-wp-engine-headlessHow I took a site built by the Replit AI Agent, reworked its strict pnpm monorepo for a plain Node host, and set up automated deploys to WP Engine's Headless Platform.Thu, 25 Jun 2026 11:39:00 GMTAIHeadlessReplitWP Enginehttps://punkcake.net/notes/lovable-deploying-lovable-sites-to-wp-engine-headlesshttps://punkcake.net/notes/lovable-deploying-lovable-sites-to-wp-engine-headlessAI site builders like Lovable target serverless hosts by default. How I got a Lovable app (Vite, TanStack Start, Nitro) running as a Node server on WP Engine's Headless Platform, with auto-deploys from GitHub.Tue, 23 Jun 2026 12:04:00 GMTAIGitHubLovableWordPresshttps://punkcake.net/notes/github-ci-cd-deployment-workflowhttps://punkcake.net/notes/github-ci-cd-deployment-workflowA CI/CD pipeline I designed for a sensitive WordPress site: every push deploys to staging automatically, and production only changes through a manual, configurable copy via the WP Engine API.Thu, 22 Jan 2026 11:24:00 GMTAPICi/CDGitHubWP Enginehttps://punkcake.net/notes/new-relic-suppressing-new-relic-php-warningshttps://punkcake.net/notes/new-relic-suppressing-new-relic-php-warningsHow I kept the New Relic error rate meaningful on managed WordPress hosting, where the agent's settings are locked: a small MU-plugin that logs PHP warnings locally instead of reporting them.Thu, 08 Jan 2026 11:51:00 GMTLogsNew RelicPluginWordPresshttps://punkcake.net/notes/github-semi-failoverhttps://punkcake.net/notes/github-semi-failoverA failover plan for a managed WordPress site with no built-in failover: GitHub Actions and the WP Engine API keep a backup environment in sync daily and move the domain to it in one click.Mon, 05 Jan 2026 11:15:00 GMTFailoverGitHubWordPressWP Enginehttps://punkcake.net/notes/github-executing-scheduled-actions-cronhttps://punkcake.net/notes/github-executing-scheduled-actions-cronWP-Cron only runs when someone visits the site, and managed WordPress hosting often has no real cron. How I ran scheduled server commands from GitHub Actions over SSH instead, with no extra server.Mon, 22 Dec 2025 11:06:00 GMTCronGitHubScriptsWordPresshttps://punkcake.net/notes/cloudflare-workers-cache-segmentationhttps://punkcake.net/notes/cloudflare-workers-cache-segmentationHow I served a cached bot version of pages to crawlers and the normal version to people, on managed WordPress hosting where the cache sits in front of PHP: a Cloudflare Worker that tags bot requests at the edge.Thu, 18 Dec 2025 10:57:00 GMTCachingCloudflareWordPressWorkerhttps://punkcake.net/notes/cloudflare-workers-failoverhttps://punkcake.net/notes/cloudflare-workers-failoverWhen the origin server goes down, the site usually goes with it. A Cloudflare Worker I built reroutes visitors to a failover origin on server errors or timeouts, while the address in their browser stays the same.Wed, 10 Dec 2025 10:50:00 GMTCloudflareFailoverWordPressWorkerhttps://punkcake.net/notes/goaccess-automatic-daily-log-offload-and-dashboardhttps://punkcake.net/notes/goaccess-automatic-daily-log-offload-and-dashboardA proof of concept I built to offload a site's access logs every day without an S3 bucket, and turn them into a GoAccess dashboard. The same approach works with other log tools and servers.Thu, 01 May 2025 10:41:00 GMTGoAccessLogsObservabilityWordPress