Technical notes for systems that have to keep working.
Practical notes by Tudor Shandrov on Linux, Proxmox, networking, observability, storage, security and production operations. Focused on decisions, validation and failure modes rather than copy-paste recipes.
Featured notes
All notes →PostgreSQL 17 Maintenance for 1C: XID Age, VACUUM, and Autovacuum
Production case study: Postgres Pro 1C 17.10, XID age warnings, targeted maintenance of 18 databases, and database-level freeze statistics.
Correlating Windows DNS and MikroTik IPFIX: domains and traffic volume in Grafana
A practical monitoring architecture where Windows AD DNS provides domain context, MikroTik IPFIX provides traffic volume, Loki stores events, and Grafana brings the data together.
Renaming an Active Directory domain in production: a practical case
A production-oriented Active Directory domain rename case using rendom and gpfixup, covering DNS, SYSVOL, GPOs, SPNs, certificates, NAS integration and post-migration validation.
Latest
Picasso Viewer and Ez3D2009 on TrueNAS: centralized CBCT storage pilot (Part 1)
Field report: CBCT/DICOM on ZFS and SMB, SHA-256 verification of 1,939 files, three Windows 11 clients, and intermittent Ez3D2009 ProjectFile errors investigated with Process Monitor.
Veyon and unstable RDP: troubleshooting Interception, UpperFilters and GPO deployment
A Windows Veyon 4.11.3–4.11.4 case study: intermittent RDP black screens, Interception filter drivers, UpperFilters, safe removal and a controlled GPO deployment pilot.
Safe production rollout of an IPAM auditor: pinned release, systemd rollback and next-day verification
A practical RouterOS–NetBox IPAM auditor migration without interrupting monitoring: pinned GitHub commit, 121 offline tests, shadow metrics, systemd drop-in and scheduled-run validation.
RouterOS and NetBox: read-only IPAM drift detection with SSH and API
A practical RouterOS 7 versus NetBox 4.7 IPAM audit: exact VLAN, prefix and interface/IP comparison, least-privilege SSH, read-only API access and reviewed IPsec exceptions.
Monitoring a RouterOS–NetBox IPAM audit with systemd and Prometheus
A production-focused pattern for IPAM drift monitoring: atomic Node Exporter textfile metrics, systemd timers, PromQL alerts and Alertmanager routing verification.
Proxmox QEMU/LXC inventory in NetBox: vNIC import and daily drift monitoring
A production case study of QEMU/LXC discovery with Python, guarded NetBox 4.7 VMInterface/MAC import, systemd scheduling and Zabbix 7.0 guest drift monitoring.