Blog
I write about DevOps, WordPress hosting, cloud infrastructure, and web development. Here you'll find technical deep-dives, practical guides, and lessons learned from building and scaling production systems.
Articles
-
Kyverno graduated: what CNCF top-level status means for Kubernetes policy714 words
Kyverno graduated to CNCF top-level at KubeCon EU Amsterdam. With 9,000+ GitHub stars and adopters like LinkedIn, Bloomberg, and Deutsche Telekom, the project has earned its place alongside Kubernetes and Prometheus. Here is what graduation signals for teams evaluating policy-as-code.
-
User namespaces graduated stable in Kubernetes 1.36: pod-level isolation without gVisor1514 words
Kubernetes 1.36 promotes user namespaces to stable. A process running as root inside a pod now maps to an unprivileged UID on the host, containing the impact of container breakouts without the compatibility and performance costs of gVisor or Kata Containers.
-
Microsoft SMTP Basic Auth for Office 365 is going away: what WordPress site owners actually need to do1780 words
If your WordPress site sends email through an Office 365 mailbox with a username and password, that setup has an expiration date. Here is what actually changed in 2026 and what to do about it.
-
The end of cheap shared hosting: what the 2026 industry data means for your WordPress site1551 words
The 2026 CloudLinux/WebPros industry report surveyed 446 hosting providers. The picture: 41% losing customers to SaaS platforms, rising costs squeezing margins, and an industry-wide shift away from cheap shared plans. Here's what that means if you run a WordPress site.
-
WordPress 7.0 delayed to late May: what it means for your update plan1187 words
WordPress 7.0 missed its April 9 release and is now expected late May 2026. Here's what caused the delay, the revised schedule, and how to adjust your update plan.
-
Cloudflare just launched EmDash, and its plugin sandbox is the real story2027 words
Cloudflare announced EmDash on April 1, 2026. It isn't a WordPress replacement yet, but the capability-based plugin sandbox is the most interesting rethink of plugin security I've seen in years.
-
EU AI Act: your website chatbot needs an AI disclosure by August 20261794 words
From 2 August 2026 the EU AI Act requires that visitors are told they're talking to an AI. Here's what Article 50 means for SMB websites, where it applies, and a checklist to be ready in time.
-
The hidden risk of unmaintained dependencies: lessons from Ingress NGINX1330 words
On March 24, 2026, kubernetes/ingress-nginx, used in roughly half of all Kubernetes clusters, was officially retired. No more security patches. The same pattern is playing out with MinIO, WordPress plugins, and npm packages. Here's what to watch for.
-
Why your WordPress contact form emails end up in spam (and how to fix it)2347 words
Your contact form works fine, but submissions never reach your inbox. The problem isn't the form plugin. It's how WordPress sends email.
-
EU data sovereignty: why 'hosted in Frankfurt' doesn't mean GDPR-compliant1774 words
Storing data in an EU data center does not make it sovereign. The US CLOUD Act can compel AWS, Azure, and Google Cloud to hand over EU-stored data. Here's what that means for your business and how to evaluate your hosting provider.
