BLOG

Notes from the build.

The engineering behind our products: decisions, implementation details and what we actually verify.

ENGINEERING · AI VM SETUP BLUEPRINT

Inside the ingress split: two Traefik controllers and a WireGuard tunnel

A detailed look at the blueprint’s k3s ingress setup: Helm configuration, explicit classes, tunnel-address routing, NetworkPolicies and external verification.

Read the article

ENGINEERING · AI VM SETUP BLUEPRINT

Private apps, public certificates: two Traefik controllers and two ways to issue TLS

How separate ingress controllers keep internal apps private while HTTP-01 or DNS-01 provides trusted certificates.

Read the article

ENGINEERING · AI VM SETUP BLUEPRINT

How skills turn an AI agent into a structured server setup workflow

Inside the VM Blueprint: staged instructions, environment-specific adaptations, persistent run state and evidence-based recovery checks.

Read the article