Daniel Thiele IT - daniel@dproject.de

I don't have much to say. I don't have much time. Exam was yesterday. Today started my internship at Kreis Gütersloh IT department.

How I Used ChatGPT and Codex to Build a Monitored Backup Workflow — and What That Taught Me About Automation   What started as a simple backup task turned into something much more interesting. Yes, the technical goal mattered: I wanted my always-on Windows system Aether to run a daily backup of my local Google Drive mirror to Athena , my always-on server, and I wanted LibreNMS to send me an email if that backup failed. The final design ended up being a clean daily 22:00 FreeFileSync Update job, wrapped in PowerShell, logged into the Windows Application log, forwarded through NXLog, and monitored by LibreNMS with a critical alert rule called Aether Backup Failed . But the real story was not just the backup.  The real story and experiment was what happened when I tried to build that workflow with AI automation! This project became a very practical lesson in what AI is already good at, what it is bad at, and what “computer use” actually means once you leave neat terminal comman...

From Firewall to Mini-SOC   How I Used ChatGPT and Codex to Add a New Security Layer to My Homelab I already had a structured lab with segmentation, remote access, and a clear network design. What I wanted next was to add another layer of security : not another layer of blocking, but another layer of visibility . I am also heading toward the Security+ exam , so this project fit perfectly into what I want to learn anyway: not just how to install tools, but how to think about monitoring, visibility, architecture, and controlled rollout.  The target was a small but real detection pipeline: OPNsense firewall → Suricata intrusion detection → Syslog forwarding → Wazuh SIEM → searchable alerts in a dashboard This is the kind of chain you would find, in much larger form, in a Security Operations Center , usually shortened to SOC . A Security Operations Center is the part of an organization that watches security events, reviews alerts, and investigates suspicious activity. In a larg...

A troubleshooting tour through Linux bridges, Proxmox vmbr interfaces, and the moment “drops” stopped meaning “packet loss”.   This post is a real troubleshooting walkthrough from my homelab. I’m running Proxmox on a host called Athena and noticed scary-looking dropped packet counters on a Linux bridge ( vmbr0 ). What followed was a surprisingly deep dive into how Proxmox networking works under the hood: Linux bridges, bridge netfilter, per-interface counters, and a set of proprietary Layer-2 frames emitted by my FritzBox that Linux mostly ignores (but still counts as “dropped”). I’m keeping this conversational and command-heavy, because this got solved the only way these things get solved: one fact at a time, measured on the system. The scene: Proxmox bridges in plain terms On Proxmox, a vmbrX interface is usually a Linux bridge : A physical NIC (for example enp1s0 ) can be a port on that bridge. VM interfaces show up as tap… devices and are also ports on tha...

    So, that means I am now a certified Linux Administrator... I need to rest now. My brain is braining.... Honestly, I can say: with Codex installed recently, coding is now vibe coding . I also can say I understand what the AI does—well, at least 80% of it—which is great actually, but I want to do more with it. What we need is a secure, compliant, and stable “coworker” who can do useful stuff. So when I find the time, I will step away from OpenAI and see what I can do locally, without relying on megacorps, and what agents can do that would help me organize my paperwork, not hallucinate, and all that stuff. As someone who worked in the design field and got replaced by ai that was trained on all the images anyone ever posted on the internet, I can tell you the big tech companies steal all your data. You cannot trust them. So if you don't care, fine. If you have to work with lots of personal data, need to fulfill compliance rules and regulations, and want to make sure it does wh...

We get plenty of cyber news in Germany. That’s why I focus on my area. Still, afaik we don’t get everything covered — or at least I don’t see everything all the time. But since the big blackout in Berlin a few weeks ago, I expect everyone to know that our infrastructure is built on thin ice. Cyberattacks, on the other hand, are still somewhat more niche, I feel. However, we do get frequent news and official warnings about ransomware attacks, like this one from earlier this month: https://www1.wdr.de/nachrichten/westfalen-lippe/cybersicherheit-handwerk-owl-100.html#:~:text=Der%20deutsche%20Mittelstand%20ist%20nur%20schlecht%20auf,kann%20den%20Weg%20f%C3%BCr%20Hacker%20in%20jeden In other news, something I see personally on my Google News feed is trading and investment ads about AI and other trading apps. As a 40-year-old who grew up with IT and who is “in the market” (financial markets), I see these ads regularly and I know how much fake stuff is going on. I mean, I even get emails fr...

The certificates I get are actually very theoretical. They are just to put them in a pdf and send that out along with my other references from school, uni and work. You can — and I did — install VMs and simulate stuff in Packet Tracer and the like for learning and practice, but a lot of it is just memorization of commands, terminology, and workflow steps on top of everything else. However, in order to memorize, learn, and demonstrate things better, I do have my homelab, documentation, Anki cards (flashcards), and whiteboards filled with notes and graphic-facilitation-style images. These are basically visual anchors and memory palaces that use the Loci and Major methods in ways I haven’t seen before.  For example I create a memorable image for rsyslog (the new rocket fast syslog)....  Syslog comes with priorities. I then create images that combine the Major method with Loci. For 0 I often use "sea". Syslog prio 0 is "emergency". So I combine the two and turn it into...