Blog

Thoughts on technology, software development, and the journey of building things that matter.

2026-07-26

Your reverse proxy is an SSRF cannon by default

Every reverse proxy tutorial resolves the upstream address from the Host header. That single line is the vulnerability. Here are the three layers I ended up needing to make preview URLs safe.

2026-07-08

Keeping Supabase Alive on the Free Tier With a Simple Cron Job

Supabase pauses free projects after a week of no activity. Here's the small GitHub Actions workflow I built to keep mine running, for free, forever.