Merge branch 'main' into drafts

.github/workflows/daily_build.yml

@@ -1,14 +0,0 @@
-name: Daily build
- 
-on:
-  schedule:
-    - cron: "0 13 * * *"
- 
-jobs:
-  build:
-    runs-on: ubuntu-latest
-    steps:
-      - name: Trigger build webhook on Netlify
-        run: curl -s -X POST "https://api.netlify.com/build_hooks/${TOKEN}"
-        env:
-          TOKEN: ${{ secrets.NETLIFY_CRON_BUILD_HOOK }}

.github/workflows/deploy-to-neocities.yml

@@ -0,0 +1,54 @@
+name: Deploy to neocities
+
+# only run on changes to main
+on:
+  push:
+    branches:
+      - main
+
+concurrency: # prevent concurrent deploys doing strange things
+  group: deploy-to-neocities
+  cancel-in-progress: true
+
+# Default to bash
+defaults:
+  run:
+    shell: bash
+
+jobs:
+  deploy:
+    runs-on: ubuntu-latest
+    env:
+      HUGO_VERSION: "0.121.1"
+    steps:
+      - name: Install Hugo CLI
+        run: |
+          wget -O ${{ runner.temp }}/hugo.deb https://github.com/gohugoio/hugo/releases/download/v${HUGO_VERSION}/hugo_extended_${HUGO_VERSION}_linux-amd64.deb \
+          && sudo dpkg -i ${{ runner.temp }}/hugo.deb
+      - name: Install Dart Sass
+        run: sudo snap install dart-sass
+      - name: Checkout
+        uses: actions/checkout@v4
+        with:
+          submodules: recursive
+      - name: Install Node.js dependencies
+        run: "[[ -f package-lock.json || -f npm-shrinkwrap.json ]] && npm ci || true"
+      - name: Build with Hugo
+        env:
+          # For maximum backward compatibility with Hugo modules
+          HUGO_ENVIRONMENT: production
+          HUGO_ENV: production
+        run: |
+          hugo \
+            --minify \
+            --baseURL "https://runtimeterror.dev/"
+      - name: Highlight with Torchlight
+        run: |
+          npm i @torchlight-api/torchlight-cli
+          npx torchlight
+      - name: Deploy to neocities
+        uses: bcomnes/deploy-to-neocities@v1
+        with:
+          api_token: ${{ secrets.NEOCITIES_API_TOKEN }}
+          cleanup: false
+          dist_dir: public

archetypes/default.md

@@ -7,52 +7,32 @@ description: "This is a new post about..."
 featured: false
 toc: true
 comments: true
-series: Tips # Projects, Code
+categories: Tips # Backstage, ChromeOS, Code, Self-Hosting, VMware
 tags:
-  - 3dprinting
-  - activedirectory
   - android
-  - api
-  - automation
-  - availability
   - caddy
-  - certs
-  - chat
-  - chrome
   - chromeos
-  - cloud
-  - cluster
-  - containers
   - crostini
   - docker
   - gcp
   - homeassistant
-  - homelab
   - hugo
-  - iac
   - javascript
   - kubernetes
   - linux
-  - logs
   - meta
-  - networking
-  - openssl
   - packer
   - powercli
   - powershell
   - python
   - regex
-  - rest
   - salt
-  - security
   - selfhosting
-  - serverless
   - shell
   - tailscale
   - tasker
   - terraform
   - vmware
-  - vpn
   - windows
   - wireguard
   - wsl

assets/js/back-to-top.js

@@ -0,0 +1 @@
+"use strict";function addBackToTop(){var o,t,e,n,i=arguments.length>0&&void 0!==arguments[0]?arguments[0]:{},r=i.backgroundColor,d=void 0===r?"#000":r,a=i.cornerOffset,c=void 0===a?20:a,s=i.diameter,l=void 0===s?56:s,u=i.ease,p=void 0===u?function(o){return.5*(1-Math.cos(Math.PI*o))}:u,m=i.id,h=void 0===m?"back-to-top":m,b=i.innerHTML,v=void 0===b?'<svg viewBox="0 0 24 24"><path d="M7.41 15.41L12 10.83l4.59 4.58L18 14l-6-6-6 6z"></path></svg>':b,f=i.onClickScrollTo,x=void 0===f?0:f,w=i.scrollContainer,g=void 0===w?document.body:w,k=i.scrollDuration,y=void 0===k?100:k,T=i.showWhenScrollTopIs,M=void 0===T?1:T,z=i.size,E=void 0===z?l:z,C=i.textColor,L=void 0===C?"#fff":C,N=i.zIndex,I=void 0===N?1:N,A=g===document.body,B=A&&document.documentElement;o=Math.round(.43*E),t=Math.round(.29*E),e="#"+h+"{background:"+d+";-webkit-border-radius:50%;-moz-border-radius:50%;border-radius:50%;bottom:"+c+"px;-webkit-box-shadow:0 2px 5px 0 rgba(0,0,0,.26);-moz-box-shadow:0 2px 5px 0 rgba(0,0,0,.26);box-shadow:0 2px 5px 0 rgba(0,0,0,.26);color:"+L+";cursor:pointer;display:block;height:"+E+"px;opacity:1;outline:0;position:fixed;right:"+c+"px;-webkit-tap-highlight-color:transparent;-webkit-touch-callout:none;-webkit-transition:bottom .2s,opacity .2s;-o-transition:bottom .2s,opacity .2s;-moz-transition:bottom .2s,opacity .2s;transition:bottom .2s,opacity .2s;-webkit-user-select:none;-moz-user-select:none;-ms-user-select:none;user-select:none;width:"+E+"px;z-index:"+I+"}#"+h+" svg{display:block;fill:currentColor;height:"+o+"px;margin:"+t+"px auto 0;width:"+o+"px}#"+h+".hidden{bottom:-"+E+"px;opacity:0}",(n=document.createElement("style")).appendChild(document.createTextNode(e)),document.head.insertAdjacentElement("afterbegin",n);var D=function(){var o=document.createElement("div");return o.id=h,o.className="hidden",o.innerHTML=v,o.addEventListener("click",function(o){o.preventDefault(),function(){var o="function"==typeof x?x():x,t=window,e=t.performance,n=t.requestAnimationFrame;if(y<=0||void 0===e||void 0===n)return q(o);var i=e.now(),r=j(),d=r-o;n(function o(t){var e=Math.min((t-i)/y,1);q(r-Math.round(p(e)*d)),e<1&&n(o)})}()}),document.body.appendChild(o),o}(),H=!0;function S(){j()>=M?function(){if(!H)return;D.className="",H=!1}():function(){if(H)return;D.className="hidden",H=!0}()}function j(){return g.scrollTop||B&&document.documentElement.scrollTop||0}function q(o){g.scrollTop=o,B&&(document.documentElement.scrollTop=o)}(A?window:g).addEventListener("scroll",S),S()}

assets/js/search.js

@@ -0,0 +1,45 @@
+// based on https://victoria.dev/blog/add-search-to-hugo-static-sites-with-lunr/
+function displayResults (results, store) {
+  const searchResults = document.getElementById('results');
+  if (results.length) {
+    let resultList = '';
+    for (const n in results) {
+      const item = store[results[n].ref];
+      resultList += '<li><a href="' + item.url + '">' + item.title + '</a></li>'
+      if (item.description)
+        resultList += '<p>' + item.description + '</p>'
+      else
+        resultList += '<p>' + item.content.substring(0, 150) + '...</p>'
+    }
+    searchResults.innerHTML = resultList;
+  } else {
+    searchResults.innerHTML = 'No results found.';
+  }
+}
+const params = new URLSearchParams(window.location.search);
+const query = params.get('query');
+if (query) {
+  document.getElementById('search-query').setAttribute('value', query);
+  const idx = lunr(function () {
+    this.ref('id')
+    this.field('title', {
+      boost: 15
+    })
+    this.field('tags')
+    this.field('content', {
+      boost: 10
+    })
+    for (const key in window.store) {
+      this.add({
+        id: key,
+        title: window.store[key].title,
+        tags: window.store[key].tags,
+        content: window.store[key].content
+      })
+    }
+  })
+  const results = idx.search(query);
+  displayResults(results, window.store)
+}
+
+

build.sh

@@ -1,7 +1,7 @@
 #!/usr/bin/env bash
 # Quick script to run local builds
 source .env
-hugo --minify --environment local -D
+hugo --environment local -D
 npx torchlight
 python3 -m http.server --directory public 1313
 

config/_default/hugo.toml

@@ -11,7 +11,7 @@ enableInlineShortcodes = true
 # sectionPagesMenu = "main"
 
 [outputs]
-  home = ['html', 'rss', 'json']
+  home = ['html', 'rss']
   section = ['html']
   taxonomy = ['html',]
   term = ['html', 'rss']
@@ -58,5 +58,8 @@ enableInlineShortcodes = true
 
 [taxonomies]
   tag = "tags"
-  series = "series"
+  category = "categories"
 
+[minify]
+  disableXML = true
+  minifyOutput = true

config/_default/menu.toml

@@ -5,21 +5,21 @@
 #   weight = 10
 
 [[main]]
-  identifier = "projects"
-  name = "projects"
-  url = "/series/projects/"
+  identifier = "self-hosting"
+  name = "self-hosting"
+  url = "/categories/self-hosting/"
   weight = 1
 
 [[main]]
   identifier = "tips"
   name = "tips"
-  url = "/series/tips/"
+  url = "/categories/tips/"
   weight = 1
 
 [[main]]
   identifier = "code"
   name = "code"
-  url = "/series/code/"
+  url = "/categories/code/"
   weight = 1
 
 [[main]]

config/_default/params.toml

@@ -18,7 +18,7 @@ giscusInputPosition = "bottom"
 giscusLang = "en"
 giscusLoading = "lazy"
 giscusMapping = "og:title"
-giscusReactions = "1"
+giscusReactions = "0"
 giscusRepo = "jbowdre/site-comments"
 giscusRepoId = "R_kgDOKKEGDw"
 giscusStrict = "0"
@@ -171,8 +171,8 @@ title = "hugo"
 url = "https://gohugo.io"
 
 [[powerLinks]]
-title = "netlify"
-url = "https://www.netlify.com"
+title = "neocities"
+url = "https://neocities.org/about"
 
 [[powerLinks]]
 title = "risotto"
@@ -183,8 +183,8 @@ title = "torchlight"
 url = "https://torchlight.dev"
 
 [[powerLinks]]
-title = "cabin"
-url = "https://withcabin.com/privacy/runtimeterror.dev"
+title = "tinylytics"
+url = "https://tinylytics.app/home"
 
 [[verifyLinks]]
 title = "omg.lol"

content/404.md

@@ -1,12 +1,13 @@
 +++
 title = "404'd!"
+aliases = ["not_found"]
 noindex = true
 timeless = true
 comments = true
 +++
 
 We're not sure what you were looking for but it's not here.
-![](/images/nothing-to-see-here.gif)
+![Animated GIF from the movie "The Naked Gun". A man in the foreground proclaims "Please disperse. Nothing to see here." while a building explodes in the background.](/images/nothing-to-see-here.gif)
 
 Maybe head back [home](/)?
 

content/about.md

@@ -11,11 +11,11 @@ You've (somehow) managed to stumble upon my dark corner of the internet[^1].
 
 I've enjoyed tinkering with computers and their code since discovering I could alter variable values in [`GORILLA.BAS`](https://en.wikipedia.org/wiki/Gorillas_%28video_game%29) on my dad's work computer to imbue the thrown bananas with enough explosive power to level the entire city. I thought, "hey, that's neat," and then spent much of my childhood free time learning how *else* I could bend computers to my will.
 
-Once I grew up[^2], I found a career in system administration, and I leveraged my passion for coding to write scripts to help manage systems more efficiently. While managing a global-scale VMware environment, I was tasked with implementing [vRealize Automation](/series/vra8) (now called "Aria Automation"). I didn't realize it at the time but that was the start of my DevOps transformation. I started thinking about infrastructure-as-code, and began using [HashiCorp Packer](https://github.com/jbowdre/packer-vsphere-templates) and a CI/CD pipeline to automatically build fully-up-to-date VM templates on a weekly cadence.
+Once I grew up[^2], I found a career in system administration, and I leveraged my passion for coding to write scripts to help manage systems more efficiently. While managing a global-scale VMware environment, I was tasked with implementing [vRealize Automation](/categories/vmware) (now called "Aria Automation"). I didn't realize it at the time but that was the start of my DevOps transformation. I started thinking about infrastructure-as-code, and began using [HashiCorp Packer](https://github.com/jbowdre/packer-vsphere-templates) and a CI/CD pipeline to automatically build fully-up-to-date VM templates on a weekly cadence.
 
 I'm now part of a small platform engineering team within that same large corporation, focused on leveraging DevOps thinking and tools to help our internal customers modernize how they operate IT, build code, and ship products, while designing solutions to help them accomplish those goals. It's a great blend of my virtual infrastructure operations background, hobbyist development experience, and hunger for solving problems, and I really enjoy applying these skills to solve interesting challenges at scale.
 
-On my off time, I tinker with new [projects](/series/projects) in my little homelab (and share some of those adventures here). I also help out on Google's product support forums as a [Product Expert](https://productexperts.withgoogle.com/what-it-is), where I support Pixel phones, earbuds, and watches, as well as Chromebooks (primarily with Linux-related queries). Helping users troubleshoot their issues scratches my problem-solving itch, and it keeps me connected with some really great like-minded tech enthusiasts.
+On my off time, I tinker with new [projects](/categories/self-hosting) in my little homelab (and share some of those adventures here). I also help out on Google's product support forums as a [Product Expert](https://productexperts.withgoogle.com/what-it-is), where I support Pixel phones, earbuds, and watches, as well as Chromebooks (primarily with Linux-related queries). Helping users troubleshoot their issues scratches my problem-solving itch, and it keeps me connected with some really great like-minded tech enthusiasts.
 
 On weekends, I race my daily-driven 2014 Subaru BRZ in local [autocross events](https://l.runtimeterror.dev/my-autox-vids) or wrench on my 1974 Volkswagen Karmann Ghia.
 

content/categories/backstage/_index.md

@@ -0,0 +1,5 @@
+---
+title: Backstage
+description: >
+  A peek behind the scenes at what it takes to run this site.
+---

content/categories/chromeos/_index.md

@@ -0,0 +1,5 @@
+---
+title: "ChromeOS"
+description: >
+  My Chromebook is a lot more than just a browser.
+---

content/categories/code/_index.md

@@ -0,0 +1,5 @@
+---
+title: Code
+description: >
+  I did a programming and I wanted you to see.
+---

content/categories/self-hosting/_index.md

@@ -0,0 +1,5 @@
+---
+title: Self-Hosting
+description: >
+  Never met an app I didn't want to deploy.
+---

content/categories/tips/_index.md

@@ -0,0 +1,5 @@
+---
+title: Tips
+description: >
+  I learned something the hard way so that you wouldn't have to.
+---

content/categories/vmware/_index.md

@@ -0,0 +1,4 @@
+---
+title: "VMware"
+description: "vSphere, vCenter, vRealize, vTanzu, vBroadcom..."
+---

content/posts/3d-modeling-and-printing-on-chrome-os/index.md

@@ -3,6 +3,7 @@ date: "2020-09-14T08:34:30Z"
 thumbnail: qDTXt1jp3.png
 featureImage: qDTXt1jp3.png
 usePageBundles: true
+categories: ChromeOS
 tags:
 - linux
 - chromeos
@@ -18,12 +19,12 @@ That's a pretty sweet setup, but I still needed a way to convert STL 3D models i
 Enter "Crostini," Chrome OS's [Linux (Beta) feature](https://chromium.googlesource.com/chromiumos/docs/+/master/containers_and_vms.md). It consists of a hardened Linux VM named `termina` which runs (by default) a Debian Buster LXD container named `penguin` (though you can spin up just about any container for which you can find an [image](https://us.images.linuxcontainers.org/)) and some fancy plumbing to let Chrome OS and Linux interact in specific clearly-defined ways. It's a brilliant balance between offering the flexibility of Linux while preserving Chrome OS's industry-leading security posture.
 
 
-![Neofetch in the Crostini terminal](lhTnVwCO3.png)
+![Screenshot of the 'neofetch' utility](lhTnVwCO3.png)
 
 There are plenty of great guides (like [this one](https://www.computerworld.com/article/3314739/linux-apps-on-chrome-os-an-easy-to-follow-guide.html)) on how to get started with Linux on Chrome OS so I won't rehash those steps here.
 
 One additional step you will probably want to take is make sure that your Chromebook is configured to enable hyperthreading, as it may have [hyperthreading disabled by default](https://support.google.com/chromebook/answer/9340236). Just plug `chrome://flags/#scheduler-configuration` into Chrome's address bar, set it to `Enables Hyper-Threading on relevant CPUs`, and then click the button to restart your Chromebook. You'll thank me later.
-![Enabling hyperthreading](LHax6lAwh.png)
+![Screenshot of ChromeOS flags page showing that '#scheduler-configuration' is set to 'Enables Hyper-Threading on relevant CPUs](LHax6lAwh.png)
 
 ### The Software
 I settled on using [FreeCAD](https://www.freecadweb.org/) for parametric modeling and [Ultimaker Cura](https://ultimaker.com/software/ultimaker-cura) for my GCODE slicer, but unfortunately getting them working cleanly wasn't entirely straightforward.
@@ -68,7 +69,7 @@ Comment[de_DE]=Feature-basierter parametrischer Modellierer
 MimeType=application/x-extension-fcstd
 ```
 That's it! Get on with your 3D-modeling bad self.
-![FreeCAD](qDTXt1jp3.png)
+![Screenshot of FreeCAD showing a 3d model being worked on](qDTXt1jp3.png)
 Now that you've got a model, be sure to [export it as an STL mesh](https://wiki.freecadweb.org/Export_to_STL_or_OBJ) so you can import it into your slicer.
 
 #### Ultimaker Cura
@@ -88,12 +89,12 @@ sudo apt update && sudo apt install menulibre # [tl! .cmd:2]
 menulibre
 ```
 Just plug in the relevant details (you can grab the appropriate icon [here](https://github.com/Ultimaker/Cura/blob/master/icons/cura-128.png)), hit the filing cabinet Save icon, and you should then be able to search for Cura from the Chrome OS launcher.
-![Using menulibre to create the launcher shortcut](VTISYOKHO.png)
+![Screenshot demoing the use of 'menulibre' to create the launcher shortcut](VTISYOKHO.png)
 
-![Ultimaker Cura](f8nRJcyI6.png)
+![Screenshot of Ultimake Cura software](f8nRJcyI6.png)
 
 From there, just import the STL mesh, configure the appropriate settings, slice, and save the resulting GCODE. You can then just upload the GCODE straight to The Spaghetti Detective and kick off the print.
 
-![Successful print, designed and sliced on Chrome OS!](2g57odtq2.jpeg)
+![A 3d-printed adapter for mounting a rear reflector on a bicycle, designed, sliced, and printed from a Chromebook](2g57odtq2.jpeg)
 
 Nice!

content/posts/abusing-chromes-custom-search-engines-for-fun-and-profit/index.md

@@ -1,5 +1,5 @@
 ---
-series: Tips
+categories: Tips
 date: "2020-09-24T08:34:30Z"
 thumbnail: fmLDUWjia.png
 usePageBundles: true
@@ -17,7 +17,7 @@ Point your browser to `chrome://settings/searchEngines` to see which sites are r
 Each of these search engine entries has three parts: a name ("Search engine"), a Keyword, and a Query URL. The "Search engine" title is just what will appear in the Omnibox when the search engine gets triggered, the Keyword is what you'll type in the Omnibox to trigger it, and the Query URL tells Chrome how to handle the search. All you have to do is type the keyword, hit your Tab key to activate the search, input your query, and hit Enter:
 ![Using a custom search engine](o_o7rt4pA.gif)
 
-For sites which register themselves automatically, the keyword is often set to something like `domain.tld` so it might make sense to assign it as something shorter or more descriptive. 
+For sites which register themselves automatically, the keyword is often set to something like `domain.tld` so it might make sense to assign it as something shorter or more descriptive.
 
 The Query URL is basically just what appears in the address bar when you search the site directly, with `%s` placed where your query text would normally go. You can view these details for a given search entry by tapping the three-dot menu button and selecting "Edit", and you can manually create new entries by hitting that big friendly "Add" button:
 ![Editing a search engine](fmLDUWjia.png)
@@ -55,7 +55,7 @@ This works for pretty much any site which parses the URL to render certain conte
 Your Query URL doesn't even need to include a query at all! You can use the Custom Search Engines as a sort of hyper-fast shortcut to pages you visit frequently. If I create a new entry with the Keyword `searchax` and `abusing-chromes-custom-search-engines-for-fun-and-profit` as the query URL, I can quickly open to this page by typing `searchax[tab][enter]`:
 ![Custom search shortener](YilNCaHil.png)
 
-I use that trick pretty regularly for getting back to vCenter appliance management interfaces without having to type out the full FQDN and port number and all that. 
+I use that trick pretty regularly for getting back to vCenter appliance management interfaces without having to type out the full FQDN and port number and all that.
 
 ------
 

content/posts/adding-vm-notes-and-custom-attributes-with-vra8/index.md

@@ -1,5 +1,5 @@
 ---
-series: vRA8
+categories: VMware
 date: "2021-06-01T08:34:30Z"
 thumbnail: -Fuvz-GmF.png
 usePageBundles: true
@@ -11,7 +11,7 @@ tags:
 title: Adding VM Notes and Custom Attributes with vRA8
 ---
 
-*In [past posts](/series/vra8), I started by [creating a basic deployment infrastructure](/vra8-custom-provisioning-part-one) in Cloud Assembly and using tags to group those resources. I then [wrote an integration](/integrating-phpipam-with-vrealize-automation-8) to let vRA8 use phpIPAM for static address assignments. I [implemented a vRO workflow](/vra8-custom-provisioning-part-two) for generating unique VM names which fit an organization's established naming standard, and then [extended the workflow](/vra8-custom-provisioning-part-three) to avoid any naming conflicts in Active Directory and DNS. And, finally, I [created an intelligent provisioning request form in Service Broker](/vra8-custom-provisioning-part-four) to make it easy for users to get the servers they need. That's got the core functionality pretty well sorted, so moving forward I'll be detailing additions that enable new capabilities and enhance the experience.*
+*In [past posts](/categories/vmware), I started by [creating a basic deployment infrastructure](/vra8-custom-provisioning-part-one) in Cloud Assembly and using tags to group those resources. I then [wrote an integration](/integrating-phpipam-with-vrealize-automation-8) to let vRA8 use phpIPAM for static address assignments. I [implemented a vRO workflow](/vra8-custom-provisioning-part-two) for generating unique VM names which fit an organization's established naming standard, and then [extended the workflow](/vra8-custom-provisioning-part-three) to avoid any naming conflicts in Active Directory and DNS. And, finally, I [created an intelligent provisioning request form in Service Broker](/vra8-custom-provisioning-part-four) to make it easy for users to get the servers they need. That's got the core functionality pretty well sorted, so moving forward I'll be detailing additions that enable new capabilities and enhance the experience.*
 
 In this post, I'll describe how to get certain details from the Service Broker request form and into the VM's properties in vCenter. The obvious application of this is adding descriptive notes so I can remember what purpose a VM serves, but I will also be using [Custom Attributes](https://docs.vmware.com/en/VMware-vSphere/7.0/com.vmware.vsphere.vcenterhost.doc/GUID-73606C4C-763C-4E27-A1DA-032E4C46219D.html) to store the server's Point of Contact information and a record of which ticketing system request resulted in the server's creation.
 

content/posts/adguard-home-in-docker-on-photon-os/index.md

@@ -1,5 +1,5 @@
 ---
-series: Projects
+categories: Self-Hosting
 date: "2021-05-27T08:34:30Z"
 thumbnail: HRRpFOKuN.png
 usePageBundles: true

content/posts/auto-connect-to-protonvpn-on-untrusted-wifi-with-tasker/index.md

@@ -1,5 +1,5 @@
 ---
-series: Projects
+categories: Code
 date: "2020-11-24T08:34:30Z"
 lastmod: "2021-03-12"
 thumbnail: Ki7jo65t3.png
@@ -37,7 +37,7 @@ It's important to use the [open-source](https://github.com/schwabe/ics-openvpn)
 ### OpenVPN config file
 You can find instructions for configuring the OpenVPN client to work with ProtonVPN [here](https://protonvpn.com/support/android-vpn-setup/) but I'll go ahead and hit the highlights. You'll probably want to go ahead and do all this from your phone so you don't have to fuss with transferring files around, but hey, *you do you*.
 
-1. Log in to your ProtonVPN account (or sign up for a new free one) at https://account.protonvpn.com/login. 
+1. Log in to your ProtonVPN account (or sign up for a new free one) at https://account.protonvpn.com/login.
 2. Use the panel on the left side to navigate to **[Downloads > OpenVPN configuration files](https://account.protonvpn.com/downloads#openvpn-configuration-files)**.
 3. Select the **Android** platform and **UDP** as the protocol, unless you have a [particular reason to use TCP](https://protonvpn.com/support/udp-tcp/#:~:text=When%20to%20use%20UDP%20vs.%20TCP).
 4. Select and download the desired config file:
@@ -49,7 +49,7 @@ You can find instructions for configuring the OpenVPN client to work with Proton
 
 Feel free to download more than one if you'd like to have different profiles available within the OpenVPN app.
 
-ProtonVPN automatically generates a set of user credentials to use with a third-party VPN client so that you don't have to share your personal creds. You'll want to make a note of that randomly-generated username and password so you can plug them in to the OpenVPN app later. You can find the details at **[Account > OpenVPN / IKEv2 username](https://account.protonvpn.com/account#openvpn)**. 
+ProtonVPN automatically generates a set of user credentials to use with a third-party VPN client so that you don't have to share your personal creds. You'll want to make a note of that randomly-generated username and password so you can plug them in to the OpenVPN app later. You can find the details at **[Account > OpenVPN / IKEv2 username](https://account.protonvpn.com/account#openvpn)**.
 
 **Now that you've got the profile file, skip on down to [The Update](#update) to import it into OpenVPN Connect.**
 
@@ -67,7 +67,7 @@ Now what you've got the config file(s) and your client credentials, it's time to
 
 Success!
 
-I don't like to have a bunch of persistent notification icons hanging around (and Android already shows a persistent status icon when a VPN connection is active). If you're like me, long-press the OpenVPN notification and tap the gear icon. Then tap on the **Connection statistics** category and activate the **Minimized** slider. The notification will still appear, but it will collapse to the bottom of your notification stack and you won't get bugged by the icon. 
+I don't like to have a bunch of persistent notification icons hanging around (and Android already shows a persistent status icon when a VPN connection is active). If you're like me, long-press the OpenVPN notification and tap the gear icon. Then tap on the **Connection statistics** category and activate the **Minimized** slider. The notification will still appear, but it will collapse to the bottom of your notification stack and you won't get bugged by the icon.
 
 ![Notification settings](WWuHwVvrk.png)
 
@@ -76,21 +76,21 @@ Open up Tasker and get ready to automate! We're going to wind up with at least t
 
 Let's start with a profile to track whether or not we're connected to one of our preferred/trusted WiFi networks:
 
-#### Trusted WiFi 
+#### Trusted WiFi
 1. Tap the '+' sign to create a new profile, and add a new **State > Net > Wifi Connected** context. This profile will become active whenever your phone connects to WiFi.
 2. Tap the magnifying glass next to the **SSID** field, which will pop up a list of all detected nearby network identifiers. Tap to select whichever network(s) you'd like to be considered "safe". You can also manually enter the SSID names, separating multiple options with a `/` (ex, `FBI Surveillance Van/TellMyWifiLoveHer/Pretty fly for a WiFi`). Or, for more security, identify the networks based on the MACs instead of the SSIDs - just be sure to capture the MACs for any extenders or mesh nodes too!
-3. Once you've got your networks added, tap the back button to move *forward* to the next task (Ah, Android!): configuring the *action* which will occur when the context is satisfied. 
-4. Tap the **New Task** option and then tap the check mark to skip giving it a name (no need). 
+3. Once you've got your networks added, tap the back button to move *forward* to the next task (Ah, Android!): configuring the *action* which will occur when the context is satisfied.
+4. Tap the **New Task** option and then tap the check mark to skip giving it a name (no need).
 5. Hit the '+' button to add an action and select **Variables > Variable Set**.
-6. For **Name**, enter `%TRUSTED_WIFI` (all caps to make it a "public" variable), and for the **To** field just enter `1`. 
-7. Hit back to save the action, and back again to save the profile. 
+6. For **Name**, enter `%TRUSTED_WIFI` (all caps to make it a "public" variable), and for the **To** field just enter `1`.
+7. Hit back to save the action, and back again to save the profile.
 8. Back at the profile list, long-press on the **Variable Set...** action and then select **Add Exit Task**.
 9. We want to un-set the variable when no longer connected to a trusted WiFi network so add a new **Variables > Variable Clear** action and set the name to `%TRUSTED_WIFI`.
 10. And back back out to admire your handiwork. Here's a recap of the profile:
 ```
 Profile: Trusted Wifi
 State: Wifi Connected [ SSID:FBI Surveillance Van/TellMyWifiLoveHer/Pretty fly for a WiFi MAC:* IP:* Active:Any ]
-Enter: Anon 
+Enter: Anon
 A1: Variable Set [ Name:%TRUSTED_WIFI To:1 Recurse Variables:Off Do Maths:Off Append:Off Max Rounding Digits:0 ]
 Exit: Anon
 A1: Variable Clear [ Name:%TRUSTED_WIFI Pattern Matching:Off Local Variables Only:Off Clear All Variables:Off ]
@@ -103,7 +103,7 @@ This profile will kick in if the phone connects to a WiFi network which isn't on
 1. It starts out the same way by creating a new profile with the **State > Net > Wifi Connected** context but this time don't add any network names to the list.
 2. For the action, select **Plugin > OpenVpn Tasker Plugin**, tap the pencil icon to edit the configuration, and select your VPN profile from the list under **Connect using profile**
 3. Back at the Action Edit screen, tap the checkbox next to **If** and enter the variable name `%TRUSTED_WIFI`. Tap the '~' button to change the condition operator to **Isn't Set**. So while this profile will activate every time you connect to WiFi, the action which connects to the VPN will only fire if the WiFi isn't a trusted network.
-4. Back out to the profile list and add a new Exit Task. 
+4. Back out to the profile list and add a new Exit Task.
 5. Add another **Plugin > OpenVpn Tasker Plugin** task and this time configure it to **Disconnect VPN**.
 
 To recap:
@@ -149,7 +149,7 @@ After installing and launching the official [OpenVPN Connect app](https://play.g
 ![Creating a profile in OpenVPN Connect](KjGOX8Yiv.png)
 
 #### Tasker profiles
-Go ahead and create the [Trusted Wifi profile](#trusted-wifi) as described above. 
+Go ahead and create the [Trusted Wifi profile](#trusted-wifi) as described above.
 
 The condition for the [VPN on Strange Wifi profile](#vpn-on-strange-wifi) will be the same, but the task will be different. This time, add a **System > Send Intent** action. You'll need to enter the following details, leaving the other fields blank/default:
 
@@ -176,4 +176,4 @@ Class: net.openvpn.unified.MainActivity
 Target: Activity
 ```
 
-All set! You can pop back up to the [Epilogue](#epilogue-working-with-googles-vpn) section to continue tweaking to avoid conflicts with Google's auto-connect VPN if you'd like. 
+All set! You can pop back up to the [Epilogue](#epilogue-working-with-googles-vpn) section to continue tweaking to avoid conflicts with Google's auto-connect VPN if you'd like.

content/posts/automatic-unattended-expansion-of-linux-root-lvm-volume-to-fill-disk/index.md

@@ -1,5 +1,5 @@
 ---
-series: Code
+categories: Code
 date: "2021-04-29T08:34:30Z"
 usePageBundles: true
 thumbnail: 20210723-script.png
@@ -11,7 +11,7 @@ title: Automatic unattended expansion of Linux root LVM volume to fill disk
 toc: false
 ---
 
-While working on my [vRealize Automation 8 project](/series/vra8), I wanted to let users specify how large a VM's system drive should be and have vRA apply that without any further user intervention. For instance, if the template has a 60GB C: drive and the user specifies that they want it to be 80GB, vRA will embiggen the new VM's VMDK to 80GB and then expand the guest file system to fill up the new free space.
+While working on my [vRealize Automation 8 project](/categories/vmware), I wanted to let users specify how large a VM's system drive should be and have vRA apply that without any further user intervention. For instance, if the template has a 60GB C: drive and the user specifies that they want it to be 80GB, vRA will embiggen the new VM's VMDK to 80GB and then expand the guest file system to fill up the new free space.
 
 I'll get into the details of how that's implemented from the vRA side #soon, but first I needed to come up with simple scripts to extend the guest file system to fill the disk.
 

content/posts/automating-camera-notifications-home-assistant-ntfy/index.md

@@ -1,14 +1,14 @@
 ---
 title: "Automating Security Camera Notifications With Home Assistant and Ntfy"
 date: 2023-11-25
-lastmod: 2023-11-27
+lastmod: 2024-01-15
 description: "Using the power of Home Assistant automations and Ntfy push notifications to level-up security camera motion detections."
 featured: true
 alias: automating-security-camera-notifications-with-home-assistant-and-ntfy
 toc: true
 comments: true
 thumbnail: thumbnail.png
-series: Projects
+categories: Self-Hosting
 tags:
   - api
   - automation
@@ -25,7 +25,7 @@ I figured I could combine the excellent [Reolink integration for Home Assistant]
 
 ### Alert on motion detection
 {{% notice note "Ntfy Integration" %}}
-Since manually configuring ntfy in Home Assistant via the [RESTful Notifications integration](easy-push-notifications-with-ntfy/#notify-configuration), I found that a [ntfy-specific integration](https://github.com/ivanmihov/homeassistant-ntfy.sh) was available through the [Home Assistant Community Store](https://hacs.xyz/) addon. That setup is a bit more flexible so I've switched my setup to use it instead:
+Since manually configuring ntfy in Home Assistant via the [RESTful Notifications integration](/easy-push-notifications-with-ntfy#notify-configuration), I found that a [ntfy-specific integration](https://github.com/ivanmihov/homeassistant-ntfy.sh) was available through the [Home Assistant Community Store](https://hacs.xyz/) addon. That setup is a bit more flexible so I've switched my setup to use it instead:
 ```yaml
 # configuration.yaml
 notify:

content/posts/bitwarden-password-manager-self-hosted-on-free-google-cloud-instance/index.md

@@ -1,5 +1,5 @@
 ---
-series: Projects
+categories: Self-Hosting
 date: "2018-09-26T08:34:30Z"
 lastmod: "2022-03-06"
 thumbnail: i0UKdXleC.png

content/posts/bulk-import-vsphere-dvportgroups-to-phpipam/index.md

@@ -14,7 +14,7 @@ usePageBundles: true
 thumbnail: "code.png" # Sets thumbnail image appearing inside card on homepage.
 # shareImage: "share.png" # Designate a separate image for social media sharing.
 codeLineNumbers: false # Override global value for showing of line numbers within code block.
-series: Code
+categories: Code
 tags:
   - vmware
   - powercli

content/posts/burn-an-iso-to-usb-with-the-chromebook-recovery-utility/index.md

@@ -1,5 +1,5 @@
 ---
-series: Tips
+categories: ChromeOS
 date: "2020-12-23T08:34:30Z"
 thumbnail: -lp1-DGiM.png
 usePageBundles: true

content/posts/cat-file-without-comments/index.md

@@ -14,7 +14,7 @@ usePageBundles: true
 # thumbnail: "thumbnail.png" # Sets thumbnail image appearing inside card on homepage.
 # shareImage: "share.png" # Designate a separate image for social media sharing.
 codeLineNumbers: false # Override global value for showing of line numbers within code block.
-series: Tips # Projects, Code, vRA8, K8s on vSphere
+categories: Tips # Projects, Code, vRA8, K8s on vSphere
 tags:
   - linux
   - shell

content/posts/cloud-based-wireguard-vpn-remote-homelab-access/index.md

@@ -1,5 +1,5 @@
 ---
-series: Projects
+categories: Self-Hosting
 date: "2021-10-28T00:00:00Z"
 thumbnail: 20211028_wireguard_in_the_cloud.jpg
 usePageBundles: true

content/posts/create-vms-chromebook-hashicorp-vagrant/index.md

@@ -1,7 +1,7 @@
 ---
 title: "Create Virtual Machines on a Chromebook with HashiCorp Vagrant" # Title of the blog post.
 date: 2023-02-20 # Date of post creation.
-lastmod: 2023-02-25
+lastmod: 2024-01-17
 description: "Pairing the powerful Linux Development Environment on modern Chromebooks with HashiCorp Vagrant to create and manage local virtual machines for development and testing" # Description used for search engine.
 featured: true # Sets if post is a featured post, making appear on the home page side bar.
 draft: false # Sets whether to render this page. Draft of true will not be rendered.
@@ -14,7 +14,7 @@ usePageBundles: true
 thumbnail: "thumbnail.png" # Sets thumbnail image appearing inside card on homepage.
 # shareImage: "share.png" # Designate a separate image for social media sharing.
 codeLineNumbers: false # Override global value for showing of line numbers within code block.
-series: Projects
+categories: ChromeOS
 tags:
   - linux
   - chromeos
@@ -57,6 +57,16 @@ echo "remember_owner = 0" | sudo tee -a /etc/libvirt/qemu.conf # [tl! .cmd:1]
 sudo systemctl restart libvirtd
 ```
 
+{{% notice note "Update 2024-01-17" %}}
+There seems to be an [issue with libvirt in LXC containers on Debian Bookworm](https://gitlab.com/libvirt/libvirt/-/issues/556), which explains why I was getting errors on `vagrant up` after updating my Crostini environment.
+
+The workaround is to add another line to `qemu.conf`:
+```shell
+echo "namespaces = []" | sudo tee -a /etc/libvirt/qemu.conf # [tl! .cmd:1]
+sudo systemctl restart libvirtd
+```
+{{% /notice %}}
+
 I'm also going to use `rsync` to share a [synced folder](https://developer.hashicorp.com/vagrant/docs/synced-folders/basic_usage) between the host and the VM guest so I'll need to make sure that's installed too:
 ```shell
 sudo apt install rsync # [tl! .cmd]

content/posts/creating-static-records-in-microsoft-dns-from-vrealize-automation/index.md

@@ -1,5 +1,5 @@
 ---
-series: vRA8
+categories: VMware
 date: "2021-08-13T00:00:00Z"
 lastmod: "2022-01-18"
 usePageBundles: true

content/posts/ditching-vsphere-for-proxmox/index.md

@@ -5,7 +5,7 @@ description: "I moved my homelab from VMware vSphere to Proxmox VE, and my only
 featured: false
 toc: true
 comments: true
-series: Tips # Projects, Code
+categories: Tips # Projects, Code
 tags:
   - homelab
   - linux

content/posts/docker-on-windows-10-with-wsl2/index.md

@@ -2,6 +2,7 @@
 date: "2020-09-22T08:34:30Z"
 thumbnail: 8p-PSHx1R.png
 usePageBundles: true
+categories: Tips
 tags:
 - docker
 - windows

content/posts/easy-push-notifications-with-ntfy/index.md

@@ -6,7 +6,7 @@ description: "Deploying and configuring a self-hosted pub-sub notification handl
 featured: false
 toc: true
 comments: true
-series: Projects
+categories: Self-Hosting
 tags:
   - android
   - api

content/posts/enable-fips-fix-aria-lifecycle/index.md

@@ -0,0 +1,46 @@
+---
+title: "Enabling FIPS Compliance Fixes Aria Lifecycle 8.14"
+date: 2024-01-19
+# lastmod: 2024-01-19
+description: "Never in my life have I seen enabling FIPS *fix* a problem - until now."
+featured: false
+comments: true
+categories: VMware
+tags:
+  - vmware
+---
+This week, VMware posted [VMSA-2024-0001](https://www.vmware.com/security/advisories/VMSA-2024-0001.html) which details a critical (9.9/10) vulnerability in <s>vRealize</s> *Aria* Automation. While working to get our environment patched, I ran into an interesting error on our Aria Lifecycle appliance:
+
+```log
+Error Code: LCMVRAVACONFIG590024
+VMware Aria Automation hostname is not valid or unable to run the product specific commands via SSH on the host. Check if VMware Aria Automation is up and running.
+VMware Aria Automation hostname is not valid or unable to run the product specific commands via SSH on the host. Check if VMware Aria Automation is up and running.
+com.vmware.vrealize.lcm.drivers.vra80.exception.VraVaProductNotFoundException: Either provided hostname: <VMwareAriaAutomationFQDN> is not a valid VMware Aria Automation hostname or unable to run the product specific commands via SSH on the host.
+  at com.vmware.vrealize.lcm.drivers.vra80.helpers.VraPreludeInstallHelper.getVraFullVersion(VraPreludeInstallHelper.java:970)
+  at com.vmware.vrealize.lcm.drivers.vra80.helpers.VraPreludeInstallHelper.checkVraApplianceAndVersion(VraPreludeInstallHelper.java:978)
+  at com.vmware.vrealize.lcm.drivers.vra80.helpers.VraPreludeInstallHelper.getVraProductDetails(VraPreludeInstallHelper.java:754)
+  at com.vmware.vrealize.lcm.plugin.core.vra80.task.VraVaImportEnvironmentTask.execute(VraVaImportEnvironmentTask.java:145)
+  at com.vmware.vrealize.lcm.platform.automata.service.Task.retry(Task.java:158)
+  at com.vmware.vrealize.lcm.automata.core.TaskThread.run(TaskThread.java:60)
+  at java.base/java.util.concurrent.ThreadPoolExecutor.runWorker(Unknown Source)
+  at java.base/java.util.concurrent.ThreadPoolExecutor$Worker.run(Unknown Source)
+  at java.base/java.lang.Thread.run(Unknown Source)
+```
+
+Digging further into the appliance logs revealed some more details:
+```log
+Session.connect: java.security.spec.InvalidKeySpecException: key spec not recognized
+```
+
+That seems like a much more insightful error than "the hostname is not valid, dummy."
+
+Anyhoo, searching for the error took me to a VMware KB on the subject:
+- [VMware Aria Suite Lifecycle 8.14 Patch 1 Day 2 operations fail for VMware Aria Automation with error code LCMVRAVACONFIG590024 (96243)](https://kb.vmware.com/s/article/96243)
+
+> After applying VMware Aria Suite Lifecycle 8.14 Patch 1, you may encounter deployment and day-2 operation failures, attributed to the elimination of weak algorithms in Suite Lifecycle. To prevent such issues, it is recommended to either turn on FIPS in VMware Aria Suite Lifecycle or implement the specified workarounds on other VMware Aria Products, as outlined in the article Steps for Removing SHA1 weak Algorithms/Ciphers from all VMware Aria Products.
+
+That's right. According to the KB, the solution for the untrusted encryption algorithms is to *enable* FIPS compliance. I was skeptical: I've never seen FIPS enforcement fix problems, it always causes them.
+
+But I gave it a shot, and *holy crap it actually worked!* Enabling FIPS compliance on the Aria Lifecycle appliance got things going again.
+
+I feel like I've seen everything now.

content/posts/enable-tanzu-cli-auto-completion-bash-zsh/index.md

@@ -14,7 +14,7 @@ usePageBundles: true
 thumbnail: "tanzu-completion.png" # Sets thumbnail image appearing inside card on homepage.
 # shareImage: "share.png" # Designate a separate image for social media sharing.
 codeLineNumbers: false # Override global value for showing of line numbers within code block.
-series: Tips
+categories: VMware
 tags:
   - vmware
   - linux

content/posts/esxi-arm-on-quartz64/index.md

@@ -14,7 +14,7 @@ featureImage: "quartz64.jpg" # Sets featured image on blog post.
 thumbnail: "quartz64.jpg" # Sets thumbnail image appearing inside card on homepage.
 # shareImage: "share.png" # Designate a separate image for social media sharing.
 codeLineNumbers: false # Override global value for showing of line numbers within code block.
-series: Projects
+categories: VMware
 tags:
   - vmware
   - linux

content/posts/federated-matrix-server-synapse-on-oracle-clouds-free-tier/index.md

@@ -1,5 +1,5 @@
 ---
-series: Projects
+categories: Self-Hosting
 date: "2021-06-28T00:00:00Z"
 thumbnail: 2xe34VJym.png
 usePageBundles: true

content/posts/finding-the-most-popular-ips-in-a-log-file/index.md

@@ -1,5 +1,5 @@
 ---
-series: Tips
+categories: Tips
 date: "2020-09-13T08:34:30Z"
 usePageBundles: true
 tags:

content/posts/fixing-403-error-ssc-8-6-vra-idm/index.md

@@ -1,5 +1,5 @@
 ---
-series: vRA8
+categories: VMware
 date: "2021-11-05T00:00:00Z"
 thumbnail: 20211105_ssc_403.png
 usePageBundles: true

content/posts/fixing-wsl2-connectivity-when-connected-to-a-vpn-with-wsl-vpnkit/index.md

@@ -2,6 +2,7 @@
 date: "2020-10-07T08:34:30Z"
 thumbnail: MnmMuA0HC.png
 usePageBundles: true
+categories: Tips
 tags:
 - windows
 - linux
@@ -11,15 +12,15 @@ title: Fixing WSL2 connectivity when connected to a VPN with wsl-vpnkit
 toc: false
 ---
 
-I was pretty excited to get [WSL2 and Docker working on my Windows 10 1909](/docker-on-windows-10-with-wsl2) laptop a few weeks ago, but I quickly encountered a problem: WSL2 had no network connectivity when connected to my work VPN. 
+I was pretty excited to get [WSL2 and Docker working on my Windows 10 1909](/docker-on-windows-10-with-wsl2) laptop a few weeks ago, but I quickly encountered a problem: WSL2 had no network connectivity when connected to my work VPN.
 
 Well, that's not *entirely* true; Docker worked just fine, but nothing else could talk to anything outside of the WSL environment. I found a few open issues for this problem in the [WSL2 Github](https://github.com/microsoft/WSL/issues?q=is%3Aissue+is%3Aopen+VPN) with suggested workarounds including modifying Windows registry entries, adjusting the metrics assigned to various virtual network interfaces within Windows, and manually setting DNS servers in `/etc/resolv.conf`. None of these worked for me.
 
 I eventually came across a solution [here](https://github.com/sakai135/wsl-vpnkit) which did the trick. This takes advantage of the fact that Docker for Windows is already utilizing `vpnkit` for connectivity - so you may also want to be sure Docker Desktop is configured to start at login.
 
-The instructions worked well for me so I won't rehash them all here. When it came time to modify my `/etc/resolv.conf` file, I added in two of the internal DNS servers followed by the IP for my home router's DNS service. This allows me to use WSL2 both on and off the corporate network without having to reconfigure things. 
+The instructions worked well for me so I won't rehash them all here. When it came time to modify my `/etc/resolv.conf` file, I added in two of the internal DNS servers followed by the IP for my home router's DNS service. This allows me to use WSL2 both on and off the corporate network without having to reconfigure things.
 
-All I need to do now is execute `sudo ./wsl-vpnkit` and leave that running in the background when I need to use WSL while connected to the corporate VPN. 
+All I need to do now is execute `sudo ./wsl-vpnkit` and leave that running in the background when I need to use WSL while connected to the corporate VPN.
 
 
 ![Successful connection via wsl-vpnkit](MnmMuA0HC.png)

content/posts/free-serverless-url-shortener-google-cloud-run/index.md

@@ -1,5 +1,5 @@
 ---
-series: Projects
+categories: Self-Hosting
 date: "2021-08-20T00:00:00Z"
 lastmod: 2022-02-03
 usePageBundles: true

content/posts/getting-started-vra-rest-api/index.md

@@ -14,7 +14,7 @@ usePageBundles: true
 thumbnail: "thumbnail.png" # Sets thumbnail image appearing inside card on homepage.
 # shareImage: "share.png" # Designate a separate image for social media sharing.
 codeLineNumbers: false # Override global value for showing of line numbers within code block.
-series: vRA8 # Projects, Code, vRA8
+categories: VMware # Projects, Code, vRA8
 tags:
   - vmware
   - vra
@@ -312,7 +312,7 @@ This doesn't give me the *name* of the regions, but I could use the `_links.regi
 You'll notice that HTTPie also prettifies the JSON response to make it easy for humans to parse. This is great for experimenting with requests against different API endpoints and getting a feel for what data can be found where. And firing off tests in HTTPie can be a lot quicker (and easier to format) than with other tools.
 
 Now let's take what we've learned and see about implementing it as vRO actions.
-[^pie]: ![](pie.gif)
+[^pie]: ![GIF from Supernatural wherein Dean ogles some delicious pie.](pie.gif)
 [^token]: Well, most of it.
 [^foreshadowing]: That knowledge will come in handy later.
 ### vRealize Orchestrator actions

content/posts/gitea-self-hosted-git-server/index.md

@@ -14,7 +14,7 @@ usePageBundles: true
 thumbnail: "gitea-logo.png" # Sets thumbnail image appearing inside card on homepage.
 # shareImage: "share.png" # Designate a separate image for social media sharing.
 codeLineNumbers: false # Override global value for showing of line numbers within code block.
-series: Projects
+categories: Self-Hosting
 tags:
   - caddy
   - linux

content/posts/hello-hugo/index.md

@@ -16,6 +16,7 @@ shareImage: "/hugo-logo-wide.png"
 # shareImage: "/images/path/share.png" # Designate a separate image for social media sharing.
 codeMaxLines: 10 # Override global value for how many lines within a code block before auto-collapsing.
 codeLineNumbers: false # Override global value for showing of line numbers within code block.
+categories: Backstage
 tags:
   - meta
   - hugo

content/posts/how-to-ask-for-help/index.md

@@ -6,7 +6,7 @@ timeless: true
 description: There are no dumb questions - but there are smarter (and dumber) ways to ask them.
 featured: true
 aliases: ["how2ask"]
-series: Tips
+categories: Tips
 ---
 I spend a lot of my time and energy answering technical questions, both professionally and "for fun" as a way to scratch that troubleshooting itch. How a question is asked plays a big factor in how effectively I'll be able to answer it.
 

content/posts/integrating-phpipam-with-vrealize-automation-8/index.md

@@ -1,5 +1,5 @@
 ---
-series: vRA8
+categories: VMware
 date: "2021-02-22T08:34:30Z"
 lastmod: 2022-07-25
 thumbnail: 7_QI-Ti8g.png

content/posts/joining-vms-to-active-directory-in-site-specific-ous-with-vra8/index.md

@@ -1,5 +1,5 @@
 ---
-series: vRA8
+categories: VMware
 date: "2021-07-21T00:00:00Z"
 thumbnail: 20210721-successful-ad_machine.png
 usePageBundles: true

content/posts/k8s-on-vsphere-node-template-with-packer/index.md

@@ -14,7 +14,7 @@ usePageBundles: true
 thumbnail: "thumbnail.jpg" # Sets thumbnail image appearing inside card on homepage.
 # shareImage: "share.png" # Designate a separate image for social media sharing.
 codeLineNumbers: false # Override global value for showing of line numbers within code block.
-series: K8s on vSphere
+categories: VMware
 tags:
   - vmware
   - linux

content/posts/ldaps-authentication-tanzu-community-edition/index.md

@@ -14,7 +14,7 @@ usePageBundles: true
 thumbnail: "ldaps_test.png" # Sets thumbnail image appearing inside card on homepage.
 shareImage: "ldaps_test.png" # Designate a separate image for social media sharing.
 codeLineNumbers: false # Override global value for showing of line numbers within code block.
-series: K8s on vSphere
+categories: VMware
 tags:
   - vmware
   - kubernetes

content/posts/logging-in-tce-cluster-from-new-device/index.md

@@ -14,7 +14,7 @@ featureImage: "tanzu.png" # Sets featured image on blog post.
 thumbnail: "tanzu.png" # Sets thumbnail image appearing inside card on homepage.
 # shareImage: "share.png" # Designate a separate image for social media sharing.
 codeLineNumbers: false # Override global value for showing of line numbers within code block.
-series: Tips
+categories: VMware
 tags:
   - vmware
   - kubernetes

content/posts/logging-in-to-multiple-vcenter-servers-at-once-with-powercli/index.md

@@ -1,5 +1,5 @@
 ---
-series: Code
+categories: Code
 date: "2020-09-16T08:34:30Z"
 thumbnail: LJOcy2oqc.png
 usePageBundles: true

content/posts/nessus-essentials-on-tanzu-community-edition/index.md

@@ -14,7 +14,7 @@ usePageBundles: true
 thumbnail: "nessus_login.png" # Sets thumbnail image appearing inside card on homepage.
 # shareImage: "share.png" # Designate a separate image for social media sharing.
 codeLineNumbers: false # Override global value for showing of line numbers within code block.
-series: Tips # Projects, Code, vRA8
+categories: Self-Hosting
 tags:
   - vmware
   - kubernetes

content/posts/notes-on-vra-ha-with-nsx-alb/index.md

@@ -1,5 +1,5 @@
 ---
-series: vRA8
+categories: VMware
 date: "2021-08-25T00:00:00Z"
 usePageBundles: true
 tags:
@@ -13,7 +13,7 @@ title: Notes on vRA HA with NSX-ALB
 This is going to be a pretty quick recap of the steps I recently took to convert a single-node instance of vRealize Automation 8.4.2 into a 3-node High-Availability vRA cluster behind a standalone NSX Advanced Load Balancer (without NSX being deployed in the environment). No screenshots or specific details since I ran through this in the lab at work and didn't capture anything along the way, and my poor NUC homelab struggles enough to run a single instance of memory-hogging vRA.
 
 ### Getting started with NSX-ALB
-I found a lot of information on how to use NSX-ALB as a component of a broader NSX-equipped environment, but not a lot of detail on how to use the ALB *without* NSX - until I found [Rudi Martinsen's blog on the subject](https://rudimartinsen.com/2021/06/25/load-balancing-with-nsx-alb/). That turned out to be a great reference for the ALB configuration so be sure to check it out if you need more details than what I provide in this section. 
+I found a lot of information on how to use NSX-ALB as a component of a broader NSX-equipped environment, but not a lot of detail on how to use the ALB *without* NSX - until I found [Rudi Martinsen's blog on the subject](https://rudimartinsen.com/2021/06/25/load-balancing-with-nsx-alb/). That turned out to be a great reference for the ALB configuration so be sure to check it out if you need more details than what I provide in this section.
 
 #### Download
 NSX-ALB is/was formerly known as the Avi Vantage Controller, and downloads are available [here](https://portal.avipulse.vmware.com/software/vantage). You'll need to log in with your VMware Customer Connect account to access the download, and then grab the latest VMware Controller OVA. Be sure to make a note of the default password listed on the right-hand side since you'll need that to log in post-deployment.
@@ -45,7 +45,7 @@ Then go back to **Infastructure > Clouds**, edit the Cloud, and select the IPAM
 Navigate to **Infrastructure > Cloud Resources > Service Engine Group** and edit the *Default-Group*. I left everything on the *Basic Settings* tab at the defaults. On the *Advanced* tab, I specified which vSphere cluster the Service Engines should be deployed to. And I left everything else with the default settings.
 
 #### SSL Certificate
-Hop over to **Templates > Security > SSL/TLS Certificates** and click **Create > Application Certificate**. Give the new cert a name and change the **Type** to `CSR` to generate a new signing request. Enter the **Common Name** you're going to want to use for the load balancer VIP (something like `vra`, perhaps?) and all the usual cert fields. Use the **Subject Alternate Name (SAN)** section at the bottom to add all the other components, like the individual vRA cluster members by both hostname and FQDN. I went ahead and included those IPs as well for good measure. 
+Hop over to **Templates > Security > SSL/TLS Certificates** and click **Create > Application Certificate**. Give the new cert a name and change the **Type** to `CSR` to generate a new signing request. Enter the **Common Name** you're going to want to use for the load balancer VIP (something like `vra`, perhaps?) and all the usual cert fields. Use the **Subject Alternate Name (SAN)** section at the bottom to add all the other components, like the individual vRA cluster members by both hostname and FQDN. I went ahead and included those IPs as well for good measure.
 
 | Name                 |
 |----------------------|
@@ -60,14 +60,14 @@ Hop over to **Templates > Security > SSL/TLS Certificates** and click **Create >
 | `vra03`              |
 | `192.168.1.43`       |
 
-Click **Save**. 
+Click **Save**.
 
 Click **Create** again, but this time select **Root/Intermediate CA Certificate** and upload/paste your CA's cert so it can be trusted. Save your work.
 
 Back at the cert list, find your new application cert and click the pencil icon to edit it. Copy the **Certificate Signing Request** field and go get it signed by your CA. Be sure to grab the certificate chain (base64-encoded) as well if you can. Come back and paste in / upload your shiny new CA-signed certificate file.
 
 #### Virtual Service
-Now it's finally time to create the Virtual Service that will function as the load balancer front-end. Pop over to **Applications > Virtual Services** and click **Create Virtual Service > Basic Setup**. Give it a name and set the **Application Type** to `HTTPS`, which will automatically set the port and bind a default self-signed certificate. 
+Now it's finally time to create the Virtual Service that will function as the load balancer front-end. Pop over to **Applications > Virtual Services** and click **Create Virtual Service > Basic Setup**. Give it a name and set the **Application Type** to `HTTPS`, which will automatically set the port and bind a default self-signed certificate.
 
 Click on the **Certificate** field and select the new cert you created above. Be sure to remove the default cert.
 
@@ -81,12 +81,12 @@ Now that the Virtual Service is created, make a note of the IP address assigned
 Log into LifeCycle Manager in a new browser tab/window. Make sure that you've mapped an *Install* product binary for your current version of vRA; the upgrade binary that you probably used to do your last update won't cut it. It's probably also a good idea to go make a snapshot of your vRA and IDM instances just in case.
 
 #### Adding new certificate
-In LCM, go to **Locker > Certificates** and select the option to **Import**. Switch back to the NSX-ALB tab and go to **Templates > Security > SSL/TLS Certificates**. Click the little down-arrow-in-a-circle "Export" icon next to the application certificate you created earlier. Copy the key section and paste that into LCM. Then open the file containing the certificate chain you got from your CA, copy its contents, and paste it into LCM as well. Do *not* try to upload a certificate file directly to LCM; that will fail unless the file includes both the cert and the private key and that's silly. 
+In LCM, go to **Locker > Certificates** and select the option to **Import**. Switch back to the NSX-ALB tab and go to **Templates > Security > SSL/TLS Certificates**. Click the little down-arrow-in-a-circle "Export" icon next to the application certificate you created earlier. Copy the key section and paste that into LCM. Then open the file containing the certificate chain you got from your CA, copy its contents, and paste it into LCM as well. Do *not* try to upload a certificate file directly to LCM; that will fail unless the file includes both the cert and the private key and that's silly.
 
 Once the cert is successfully imported, go to the **Lifecycle Operations** component of LCM and navigate to the environment containing your vRA instance. Select the vRA product, hit the three-dot menu, and use the **Replace Certificate** option to replace the old and busted cert with the new HA-ready one. It will take a little bit for this to get applied. Don't move on until vRA services are back up.
 
 #### Scale out vRA
-Still on the vRA product page, click on the **+ Add Components** button. 
+Still on the vRA product page, click on the **+ Add Components** button.
 
 On the **Infrastructure** page, tell LCM where to put the new VRA VMs.
 

content/posts/powercli-list-linux-vms-and-datacenter-locations/index.md

@@ -14,7 +14,7 @@ usePageBundles: true
 thumbnail: "PowerCLI.png" # Sets thumbnail image appearing inside card on homepage.
 # shareImage: "share.png" # Designate a separate image for social media sharing.
 codeLineNumbers: false # Override global value for showing of line numbers within code block.
-series: Code
+categories: Code
 tags:
   - vmware
   - powercli

content/posts/powershell-download-web-folder-contents/index.md

@@ -14,7 +14,7 @@ usePageBundles: true
 # thumbnail: "thumbnail.png" # Sets thumbnail image appearing inside card on homepage.
 # shareImage: "share.png" # Designate a separate image for social media sharing.
 codeLineNumbers: false # Override global value for showing of line numbers within code block.
-series: Code
+categories: Code
 tags:
   - powershell
   - windows

content/posts/psa-halt-replication-before-snapshotting-linked-vcenters/index.md

@@ -1,5 +1,5 @@
 ---
-series: Tips
+categories: VMware
 date: "2021-01-30T08:34:30Z"
 thumbnail: XTaU9VDy8.png
 usePageBundles: true

content/posts/psa-microsoft-kb5022842-breaks-ws2022-secure-boot/index.md

@@ -14,7 +14,7 @@ usePageBundles: true
 # thumbnail: "thumbnail.png" # Sets thumbnail image appearing inside card on homepage.
 # shareImage: "share.png" # Designate a separate image for social media sharing.
 codeLineNumbers: false # Override global value for showing of line numbers within code block.
-series: Tips # Projects, Code, vRA8, K8s on vSphere
+categories: VMware # Projects, Code, vRA8, K8s on vSphere
 tags:
   - vmware
   - powershell

content/posts/publish-services-cloudflare-tunnel/index.md

@@ -0,0 +1,182 @@
+---
+title: "Publish Services with Cloudflare Tunnel"
+date: 2024-01-15
+# lastmod: 2024-01-13
+description: "Exploring Cloudflare Tunnel as an alternative to Tailscale Funnel for secure public access to internal resources."
+featured: false
+toc: true
+comments: true
+categories: Self-Hosting
+tags:
+  - cloud
+  - containers
+  - docker
+  - networking
+  - selfhosting
+---
+I've written a bit lately about how handy [Tailscale Serve and Funnel](/tailscale-ssh-serve-funnel/) can be, and I continue to get a lot of great use out of those features. But not *every* networking nail is best handled with a Tailscale-shaped hammer. Funnel has two limitations that might make it less than ideal for certain situations.
+
+First, sites served with Funnel can only have a hostname in the form of `server.tailnet-name.ts.net`. You can't use a custom domain for this, but you might not always want to advertise that a service is shared via Tailscale. Second, Funnel connections have an undisclosed bandwidth limit, which could cause problems if you're hoping to serve media through the Funnel.
+
+For instance, I've started using [Immich](https://immich.app/) as a self-hosted alternative to Google Photos. Using Tailscale Serve to make my Immich server available on my Tailnet works beautifully, and I initially set up a Funnel connection to use for when I wanted to share certain photos, videos, and albums externally. I quickly realized that it took *f o r e v e r* to load the page when those links were shared publicly. I probably won't share a lot of those public links but I'd like them to be a bit more responsive when I do.
+
+I went looking for another solution, and I found one in a suite of products I already use.
+
+### Overview
+I've been using [Cloudflare's generious free plan](https://www.cloudflare.com/plans/free/) for DNS, content caching, page/domain redirects, email forwarding, and DDoS mitigation[^more] across my dozen or so domains. In addition to these "basic" services and features, Cloudflare also offers a selection of [Zero Trust Network Access](https://www.cloudflare.com/products/zero-trust/zero-trust-network-access/) products, and one of those is [Cloudflare Tunnel](https://www.cloudflare.com/products/tunnel/) - also available with a generous free plan.
+
+[^more]: And a ton of other things I'm forgetting right now.
+
+In some ways, Cloudflare Tunnel is quite similar to Tailscale Funnel. Both provide a secure way to publish a resource on the internet without requiring a public IP address, port forwarding, or firewall configuration. Both use a lightweight agent on your server to establish an encrypted outbound tunnel, and inbound traffic gets routed into that tunnel through the provider's network. And both solutions automatically provision trusted SSL certificates to keep traffic safe and browsers happy.
+
+Tailscale Funnel is very easy to set up, and it doesn't require any additional infrastructure, not even a domain name. There aren't a lot of controls available with Funnel - it's basically on or off, and bound to one of three port numbers. You don't get to pick the domain name where it's served, just the hostname of the Tailscale node - and if you want to share multiple resources on the same host you'll [need to get creative](/tailscale-serve-docker-compose-sidecar/). I think this approach is really ideal for quick development and testing scenarios.
+
+For longer-term, more production-like use, Cloudflare Tunnels is a pretty great fit. It ties in well with existing Cloudflare services, doesn't enforce a reduced bandwidth limit, and provides a bit more flexibility for how your resource will be presented to the web. It can also integrate tightly with the rest of Cloudflare's Zero Trust offerings to easily provide access controls to further protect your resource. It does, however, require a custom domain managed with Cloudflare DNS in order to work[^dns].
+
+[^dns]: Cloudflare Tunnel lets you choose what hostname and domain name should be used for fronting your tunnel, and it even takes care of configuring the required DNS record automagically.
+
+For my specific Immich use case, I decided to share my instance via Tailscale Serve for internal access and Cloudflare Tunnel for public shares, and I used a similar sidecar approach to make it work without too much fuss. For the purposes of this blog post, though, I'm going to run through a less complicated example[^complexity].
+
+[^complexity]: My Immich stack is using ~10 containers and I don't really feel like documenting that all here - not yet, at least.
+
+### Speedtest Demo
+I'm going to deploy a quick [SpeedTest by OpenSpeedTest](https://github.com/openspeedtest/Speed-Test) container, and proxy it with both Tailscale Funnel and Cloudflare Tunnel so that I can compare the bandwidth of the two tunnel solutions directly.
+
+I'll start with a *very* basic Docker Compose definition for just the Speedtest container:
+
+```yaml
+# torchlight! {"lineNumbers":true}
+# docker-compose.yml
+services:
+  speedtest:
+    image: openspeedtest/latest
+    container_name: speedtest
+    restart: unless-stopped
+```
+
+#### Tailscale Funnel
+And, as in [my last post](/tailscale-serve-docker-compose-sidecar/) I'll add in my Tailscale sidecar to enable funnel:
+
+```yaml
+# torchlight! {"lineNumbers":true}
+# docker-compose.yml
+services:
+  speedtest:
+    image: openspeedtest/latest
+    container_name: speedtest
+    restart: unless-stopped
+    network_mode: service:tailscale # [tl! ++:start focus:start]
+  tailscale:
+    image: ghcr.io/jbowdre/tailscale-docker:latest
+    container_name: speedtest-tailscaled
+    restart: unless-stopped
+    environment:
+      TS_AUTHKEY: ${TS_AUTHKEY:?err}
+      TS_HOSTNAME: ${TS_HOSTNAME:-tailscale-sidecar}
+      TS_STATE_DIR: "/var/lib/tailscale/"
+      TS_EXTRA_ARGS: ${TS_EXTRA_ARGS:-}
+      TS_SERVE_PORT: ${TS_SERVE_PORT:-}
+      TS_FUNNEL: ${TS_FUNNEL:-} # [tl! ++:end focus:end]
+```
+
+{{% notice note "Network Mode" %}}
+I set `network_mode: service:tailscale` on the `speedtest` container so that it will share its network interface with the `tailscale` container. This allows Tailscale Serve/Funnel to proxy `speedtest` at `http://localhost:3000`, which is nice since Tailscale doesn't currently/officially support proxying remote hosts.
+{{% /notice %}}
+
+I'll set up a new auth key in the [Tailscale Admin Portal](https://login.tailscale.com/admin/settings/keys), and insert that (along with hostname, port, and funnel configs) into my `.env` file:
+
+```shell
+# torchlight! {"lineNumbers":true}
+# .env
+TS_AUTHKEY=tskey-auth-somestring-somelongerstring
+TS_HOSTNAME=speedtest
+TS_EXTRA_ARGS=--ssh
+TS_SERVE_PORT=3000 # the port the speedtest runs on by default
+TS_FUNNEL=true
+```
+
+A quick `docker compose up -d` and my new speedtest is alive!
+
+First I'll hit it at `http://speedtest.tailnet-name.ts.net:3000` to access it purely inside of my Tailnet:
+![Speedtest from within the tailnet](speedtest-tailnet.png)
+
+Not bad! Now let's see what happens when I disable Tailscale on my laptop and hit the public Funnel endpoint at `https://speedtest.tailnet-name.ts.net`:
+![Speedtest from funnel](speedtest-funnel.png)
+
+Oof. Routing traffic through the Funnel dropped the download by ~25% and the upload by **~90%**, not to mention the significant ping increase.
+
+#### Cloudflare Tunnel
+Alright, let's throw a Cloudflare Tunnel on there and see what happens.
+
+To start that process, I'll log into my [Cloudflare dashboard](https://dash.cloudflare.com) and then use the side navigation to make my way to the **Zero Trust** (AKA "Cloudflare One") area. From there, I'll drill down through **Access -> Tunnels** and click on **+ Create a tunnel**. I'll give it an appropriate name like `speedtest` and then click **Save tunnel**.
+
+Now Cloudflare helpfully provides installation instructions for a variety of different platforms. I'm doing that Docker thing so I'll click the appropriate button and review that command snippet:
+![Tunnel installation instructions](install-connector.png)
+
+I can easily adapt that and add it to my Docker Compose setup[^network-mode]:
+```yaml
+# torchlight! {"lineNumbers":true}
+# docker-compose.yml
+services:
+  speedtest:
+    image: openspeedtest/latest
+    container_name: speedtest
+    restart: unless-stopped
+    network_mode: service:tailscale
+  tailscale: # [tl! collapse:start]
+    image: ghcr.io/jbowdre/tailscale-docker:latest
+    container_name: speedtest-tailscaled
+    restart: unless-stopped
+    environment:
+      TS_AUTHKEY: ${TS_AUTHKEY:?err}
+      TS_HOSTNAME: ${TS_HOSTNAME:-tailscale}
+      TS_STATE_DIR: "/var/lib/tailscale/"
+      TS_EXTRA_ARGS: ${TS_EXTRA_ARGS:-}
+      TS_SERVE_PORT: ${TS_SERVE_PORT:-}
+      TS_FUNNEL: ${TS_FUNNEL:-} # [tl! collapse:end]
+  cloudflared: # [tl! ++:start focus:start]
+    image: cloudflare/cloudflared
+    container_name: speedtest-cloudflared
+    restart: unless-stopped
+    command:
+      - tunnel
+      - --no-autoupdate
+      - run
+      - --token
+      - ${CLOUDFLARED_TOKEN}
+    network_mode: service:tailscale # [tl! ++:end focus:end]
+```
+
+[^network-mode]: Setting the `network_mode` isn't strictly necessary for the `cloudflared` container since Cloudflare Tunnel *does* support proxying remote hosts, but I'll just stick with it here for consistency.
+
+After dropping the value for `CLOUDFLARED_TOKEN` into my `.env` file, I can do another `docker compose up -d` to bring this online - and that status will be reflected back on the config page as well:
+![Connector is alive!](connector-online.png)
+
+I'll click **Next** and proceed with the rest of the configuration, which consists of picking a public hostname for the frontend and defining the private service for the backend:
+![Tunnel configuration](tunnel-configuration.png)
+
+I can click **Save tunnel** and... that's it. My tunnel is live, and I can now reach my speedtest at `https://speedtest.runtimeterror.dev`. Let's see how it does:
+![Cloudflare Tunnel speedtest](speedtest-cloudflared.png)
+
+So that's *much* faster than Tailscale Funnel, and even faster than a direct transfer within the Tailnet. Cloudflare Tunnel should work quite nicely for sharing photos publicly from my Immich instance.
+
+#### Bonus: Access Control
+But what if I don't want *just anyone* to be able to use my new speedtest (or access my Immich instance)? Defining an application in Cloudflare One will let me set some limits.
+
+So I'll go to **Access -> Applications** and select that I'm adding a **Self-hosted** application. I can then do the basic configuration, basically just telling Cloudflare that I'd like to protect the `https://speedtest.runtimeterror.dev` app:
+![Defining the application](define-application.png)
+
+I can leave the rest of that page with the default selections so I'll scroll down and click **Next**.
+
+Now I need to create a policy to apply to this application. I'm going to be simple and just say that anyone with an `@runtimeterror.dev` email address should be able to use my speedtest:
+![Creating a policy](create-policy.png)
+
+Without any external identity providers connected, Cloudflare will default to requiring authentication via a one-time PIN sent to an input email address. That's pretty easy, and it pairs well with allowing access based on email address attributes. There are a bunch of other options I could configure if I wanted... but my needs are simple so I'll just click through and save this new application config.
+
+Now, if I try to visit my speedtest with a new session I'll get automatically routed to the Cloudflare Access challenge which will prompt for my email address.
+![Access challenge](access-challenge.png)
+
+If my email is on the approved list (that is, if it ends with `@runtimeterror.dev`), I'll get emailed a code which I can then use to log in and access the speedtest. If not, I won't get in. And since this thing is served through a Cloudflare Tunnel (rather than a public IP address merely advertised via DNS) there isn't any way to bypass Cloudflare's authentication challenge.
+
+### Conclusion
+This has been a quick demo of how easy it is to configure a Cloudflare Tunnel to securely publish resources on the web. I really like being able to share a service publicly without having to manage DNS, port-forwarding, or firewall configurations, and the ability to offload authentication and authorization to Cloudflare is a big plus. I still don't think Tailscale can be beat for sharing stuff internally, but I think Cloudflare Tunnels make more sense for long-term public sharing. And it's awesome that I can run both solutions side-by-side to really get the best of both when I need it.

content/posts/recreating-hashnode-series-categories-in-jekyll-on-github-pages/index.md

@@ -1,5 +1,5 @@
 ---
-series: Tips
+categories: Backstage
 date: "2021-07-24T16:46:00Z"
 thumbnail: 20210724-series-navigation.png
 usePageBundles: true
@@ -9,12 +9,12 @@ tags:
 title: Recreating Hashnode Series (Categories) in Jekyll on GitHub Pages
 ---
 
-I recently [migrated this site](/virtually-potato-migrated-to-github-pages) from Hashnode to GitHub Pages, and I'm really getting into the flexibility and control that managing the content through Jekyll provides. So, naturally, after finalizing the move I got to work recreating Hashnode's "Series" feature, which lets you group posts together and highlight them as a collection. One of the things I liked about the Series setup was that I could control the order of the collected posts: my posts about [building out the vRA environment in my homelab](/series/vra8) are probably best consumed in chronological order (oldest to newest) since the newer posts build upon the groundwork laid by the older ones, while posts about my [other one-off projects](/series/projects) could really be enjoyed in any order.
+I recently [migrated this site](/virtually-potato-migrated-to-github-pages) from Hashnode to GitHub Pages, and I'm really getting into the flexibility and control that managing the content through Jekyll provides. So, naturally, after finalizing the move I got to work recreating Hashnode's "Series" feature, which lets you group posts together and highlight them as a collection. One of the things I liked about the Series setup was that I could control the order of the collected posts: my posts about [building out the vRA environment in my homelab](/categories/vmware) are probably best consumed in chronological order (oldest to newest) since the newer posts build upon the groundwork laid by the older ones, while posts about my [other one-off projects](/categories/self-hosting) could really be enjoyed in any order.
 
 I quickly realized that if I were hosting this pretty much anywhere *other* than GitHub Pages I could simply leverage the [`jekyll-archives`](https://github.com/jekyll/jekyll-archives) plugin to manage this for me - but, alas, that's not one of the [plugins supported by the platform](https://pages.github.com/versions/). I needed to come up with my own solution, and being still quite new to Jekyll (and this whole website design thing in general) it took me a bit of fumbling to get it right.
 
 ### Reviewing the theme-provided option
-The Jekyll theme I'm using ([Minimal Mistakes](https://github.com/mmistakes/minimal-mistakes)) comes with [built-in support](https://mmistakes.github.io/mm-github-pages-starter/categories/) for a [category archive page](/series), which (like the [tags page](/tags)) displays all the categorized posts on a single page. Links at the top will let you jump to an appropriate anchor to start viewing the selected category, but it's not really an elegant way to display a single category.
+The Jekyll theme I'm using ([Minimal Mistakes](https://github.com/mmistakes/minimal-mistakes)) comes with [built-in support](https://mmistakes.github.io/mm-github-pages-starter/categories/) for a [category archive page](/categories), which (like the [tags page](/tags)) displays all the categorized posts on a single page. Links at the top will let you jump to an appropriate anchor to start viewing the selected category, but it's not really an elegant way to display a single category.
 ![Posts by category](20210724-posts-by-category.png)
 
 It's a start, though, so I took a few minutes to check out how it's being generated. The category archive page lives at [`_pages/category-archive.md`](https://raw.githubusercontent.com/mmistakes/mm-github-pages-starter/master/_pages/category-archive.md):
@@ -144,7 +144,7 @@ Since I can't use a plugin to automatically generate pages for each series, I'll
 ---
 title: "Adventures in vRealize Automation 8"
 layout: series
-permalink: "/series/vra8"
+permalink: "/categories/vmware"
 tag: vRA8
 sort_order: reverse
 author_profile: true
@@ -155,9 +155,9 @@ header:
 *Follow along as I create a flexible VMware vRealize Automation 8 environment for provisioning virtual machines - all from the comfort of my Intel NUC homelab.*
 ```
 
-You can see that this page is referencing the series layout I just created, and it's going to live at `http://localhost/series/vra8` - precisely where this series was on Hashnode. I've tagged it with the category I want to feature on this page, and specified that the posts will be sorted in reverse order so that anyone reading through the series will start at the beginning (I hear it's a very good place to start). I also added a teaser image which will be displayed when I link to the series from elsewhere. And I included a quick little italicized blurb to tell readers what the series is about.
+You can see that this page is referencing the series layout I just created, and it's going to live at `http://localhost/categories/vmware` - precisely where this series was on Hashnode. I've tagged it with the category I want to feature on this page, and specified that the posts will be sorted in reverse order so that anyone reading through the series will start at the beginning (I hear it's a very good place to start). I also added a teaser image which will be displayed when I link to the series from elsewhere. And I included a quick little italicized blurb to tell readers what the series is about.
 
-Check it out [here](/series/vra8):
+Check it out [here](/categories/vmware):
 ![vRA8 series](20210724-vra8-series.png)
 
 The other series pages will be basically the same, just without the reverse sort directive. Here's `_pages/series-tips.md`:
@@ -202,7 +202,7 @@ author_profile: true
 ```
 
 ### Fixing category links in posts
-The bottom of each post has a section which lists the tags and categories to which it belongs. Right now, those are still pointing to the category archive page (`/series/#vra8`) instead of the series feature pages I created (`/series/vra8`).
+The bottom of each post has a section which lists the tags and categories to which it belongs. Right now, those are still pointing to the category archive page (`/series/#vra8`) instead of the series feature pages I created (`/categories/vmware`).
 ![Old category link](20210724-old-category-link.png)
 
 That *works* but I'd rather it reference the fancy new pages I created. Tracking down where to make that change was a bit of a journey.
@@ -245,7 +245,7 @@ Okay, it looks like [`_include/category-list.html`](https://github.com/mmistakes
   {% assign categories_sorted = page.categories | sort_natural %}
 
   <p class="page__taxonomy">
-    <strong><i class="fas fa-fw fa-folder-open" aria-hidden="true"></i> {{ site.data.ui-text[site.locale].categories_label | default: "series:" }} </strong>
+    <strong><i class="fas fa-fw fa-folder-open" aria-hidden="true"></i> {{ site.data.ui-text[site.locale].categories_label | default: "categories:" }} </strong>
     <span itemprop="keywords">
     {% for category_word in categories_sorted %}
       <a href="{{ category_word | slugify | prepend: path_type | prepend: site.category_archive.path | relative_url }}" class="page__taxonomy-item p-category" rel="tag">{{ category_word }}</a>{% unless forloop.last %}<span class="sep">, </span>{% endunless %}
@@ -283,9 +283,9 @@ And, finally, I'll want to update the navigation links at the top of each page t
 # torchlight! {"lineNumbers": true}
 main:
   - title: "vRealize Automation 8"
-    url: /series/vra8
+    url: /categories/vmware
   - title: "Projects"
-    url: /series/projects
+    url: /categories/self-hosting
   - title: "Code"
     url: /series/code
   - title: "Tips & Tricks"

content/posts/removing-recreating-vcls-vms/index.md

@@ -14,7 +14,7 @@ featureImage: "basic-architecture.png" # Sets featured image on blog post.
 thumbnail: "basic-architecture.png" # Sets thumbnail image appearing inside card on homepage.
 # shareImage: "share.png" # Designate a separate image for social media sharing.
 codeLineNumbers: false # Override global value for showing of line numbers within code block.
-series: Tips # Projects, Code, vRA8
+categories: VMware # Projects, Code, vRA8
 tags:
   - vmware
   - vsphere
@@ -36,7 +36,7 @@ Fortunately there's a somewhat-hidden way to disable (and re-enable) vCLS on a p
 Disabling vCLS will break DRS, and could have other unintended side effects. Don't do this in prod if you can avoid it.
 {{% /notice %}}
 
-[^off-and-on]: ![](off-and-on.gif)
+[^off-and-on]: ![GIF from The IT Crowd: "Have you tried turning it off and back on again?"](off-and-on.gif)
 
 ### Find the cluster's domain ID
 It starts with determining the affected cluster's domain ID, which is very easy to do once you know where to look. Simply browse to the cluster object in the vSphere inventory, and look at the URL:

content/posts/run-scripts-in-guest-os-with-vra-abx-actions/index.md

@@ -1,5 +1,5 @@
 ---
-series: vRA8
+categories: VMware
 date: "2021-09-03T00:00:00Z"
 thumbnail: 20210903_action_run_success.png
 usePageBundles: true
@@ -11,7 +11,7 @@ tags:
 - vmware
 title: Run scripts in guest OS with vRA ABX Actions
 ---
-Thus far in my [vRealize Automation project](/series/vra8), I've primarily been handing the payload over to vRealize Orchestrator to do the heavy lifting on the back end. This approach works really well for complex multi-part workflows (like when [generating unique hostnames](/vra8-custom-provisioning-part-two#the-vro-workflow)), but it may be overkill for more linear tasks (such as just running some simple commands inside of a deployed guest OS). In this post, I'll explore how I use [vRA Action Based eXtensibility (ABX)](https://blogs.vmware.com/management/2020/09/vra-abx-flow.html) to do just that.
+Thus far in my [vRealize Automation project](/categories/vmware), I've primarily been handing the payload over to vRealize Orchestrator to do the heavy lifting on the back end. This approach works really well for complex multi-part workflows (like when [generating unique hostnames](/vra8-custom-provisioning-part-two#the-vro-workflow)), but it may be overkill for more linear tasks (such as just running some simple commands inside of a deployed guest OS). In this post, I'll explore how I use [vRA Action Based eXtensibility (ABX)](https://blogs.vmware.com/management/2020/09/vra-abx-flow.html) to do just that.
 
 ### The Goal
 My ABX action is going to use PowerCLI to perform a few steps inside a deployed guest OS (Windows-only for this demonstration):

content/posts/safeguard-your-androids-battery-with-tasker-home-assistant/index.md

@@ -1,5 +1,5 @@
 ---
-series: Projects
+categories: Code
 date: "2020-11-14T08:34:30Z"
 thumbnail: aeIOr8w6k.png
 usePageBundles: true
@@ -11,11 +11,11 @@ tags:
 title: Safeguard your Android's battery with Tasker + Home Assistant
 ---
 
-A few months ago, I started using the [AccuBattery app](https://play.google.com/store/apps/details?id=com.digibites.accubattery) to keep a closer eye on how I'd been charging my phones. The app has a handy feature that notifies you once the battery level reaches a certain threshold so you can pull the phone off the charger and extend the lithium battery's service life, and it even offers an estimate for what that impact might be. For instance, right now the app indicates that charging my Pixel 5 from 51% to 100% would cause 0.92 wear cycles, while stopping the charge at 80% would impose just 0.17 cycles. 
+A few months ago, I started using the [AccuBattery app](https://play.google.com/store/apps/details?id=com.digibites.accubattery) to keep a closer eye on how I'd been charging my phones. The app has a handy feature that notifies you once the battery level reaches a certain threshold so you can pull the phone off the charger and extend the lithium battery's service life, and it even offers an estimate for what that impact might be. For instance, right now the app indicates that charging my Pixel 5 from 51% to 100% would cause 0.92 wear cycles, while stopping the charge at 80% would impose just 0.17 cycles.
 
 ![AccuBattery screenshot](aeIOr8w6k.png)
 
-But that depends on me being near my phone and conscious so I can take action when the notification goes off. That's often a big assumption to make - and, frankly, I'm lazy. 
+But that depends on me being near my phone and conscious so I can take action when the notification goes off. That's often a big assumption to make - and, frankly, I'm lazy.
 
 I'm fortunately also fairly crafty, so I came up with a way to combine my favorite Android automation app with my chosen home automation platform to take my laziness out of the picture.
 
@@ -25,7 +25,7 @@ I'm fortunately also fairly crafty, so I came up with a way to combine my favori
 - [Tasker](https://play.google.com/store/apps/details?id=net.dinglisch.android.taskerm)
 - [Home Assistant Plug-In for Tasker](https://play.google.com/store/apps/details?id=com.markadamson.taskerplugin.homeassistant)
 
-I'm not going to go through how to install Home Assistant on the Pi or how to configure it beyond what's strictly necessary for this particular recipe. The official [getting started documentation](https://www.home-assistant.io/getting-started/) is a great place to start. 
+I'm not going to go through how to install Home Assistant on the Pi or how to configure it beyond what's strictly necessary for this particular recipe. The official [getting started documentation](https://www.home-assistant.io/getting-started/) is a great place to start.
 
 ### The Recipe
 1. Plug the Wemo into a wall outlet, and plug a phone charger into the Wemo. Add the Belkin Wemo integration in Home Assistant, and configure the device and entity. I named mine `switchy`. Make a note of the Entity ID: `switch.switchy`. We'll need that later.
@@ -37,7 +37,7 @@ For the Service field, you need to tell HA what you want it to do. We want it to
 ```json
 {"entity_id": "switch.switchy"}
 ```
-Tap Test Service to make sure it works - and verify that the switch does indeed turn off. 
+Tap Test Service to make sure it works - and verify that the switch does indeed turn off.
 ![Creating and testing the service](U3LfmEJ_7.png)
 4. Hard part is over. Now we just need to set up a profile in Tasker to fire our new task. I named mine 'Charge Limiter'. I started with `State > Power > Battery Level` and set it to trigger between 81-100%., and also added `State > Power > Source: Any` so it will only be active while charging. I also only want this to trigger while my phone is charging at home, so I added `State > Net > Wifi Connected` and then specified my home SSID. Link this profile to the Task you created earlier, and never worry about overcharging your phone again.
 ![Tasker profile to kill power above 80%](h7tl6facr.png)

content/posts/salt-state-netdata-tailscale/index.md

@@ -6,7 +6,7 @@ description: "A hasty Salt state to deploy netdata monitoring and publish it int
 featured: false
 toc: true
 comments: true
-series: Code
+categories: Code
 tags:
   - homelab
   - iac

content/posts/script-to-convert-posts-to-hugo-page-bundles/index.md

@@ -15,7 +15,7 @@ thumbnail: "thumbnail.png" # Sets thumbnail image appearing inside card on homep
 # shareImage: "/images/path/share.png" # Designate a separate image for social media sharing.
 codeLineNumbers: false # Override global value for showing of line numbers within code block.
 codeMaxLines: 30
-series: Code
+categories: Backstage
 tags:
   - hugo
   - meta

content/posts/script-to-update-image-embed-links-in-markdown-files/index.md

@@ -1,5 +1,5 @@
 ---
-series: Code
+categories: Backstage
 date: "2021-07-19T16:03:30Z"
 usePageBundles: true
 tags:

content/posts/secure-networking-made-simple-with-tailscale/index.md

@@ -14,7 +14,7 @@ featureImageAlt: 'Tailscale Logo' # Alternative text for featured image.
 thumbnail: "Tailscale-AppIcon.png" # Sets thumbnail image appearing inside card on homepage.
 # shareImage: "share.png" # Designate a separate image for social media sharing.
 codeLineNumbers: false # Override global value for showing of line numbers within code block.
-series: Projects
+categories: Self-Hosting
 tags:
   - vpn
   - wireguard

content/posts/setting-up-linux-on-a-new-lenovo-chromebook-duet-bonus-arm64-complications/index.md

@@ -1,5 +1,5 @@
 ---
-series: Projects
+categories: ChromeOS
 date: "2020-10-27T08:34:30Z"
 lastmod: "2021-05-20"
 thumbnail: XtmaR9Z0J.png

content/posts/showdown-lenovo-chromebook-duet-vs-google-pixel-slate/index.md

@@ -4,6 +4,7 @@ thumbnail: P-x5qEg_9.jpeg
 usePageBundles: true
 tags:
 - chromeos
+categories: ChromeOS
 title: 'Showdown: Lenovo Chromebook Duet vs. Google Pixel Slate'
 ---
 
@@ -14,9 +15,9 @@ Okay, okay, this isn't actually going to be a comparison review between the two
 ### Background
 Up until last week, I'd been using the Slate as my primary personal computing device for the previous 20 months or so, mainly in laptop mode (as opposed to tablet mode). I do a lot of casual web browsing, and I spend a significant portion of my free time helping other users on Google's product support forums as a part of the [Google Product Experts program](https://productexperts.withgoogle.com/what-it-is). I also work a lot with the  [Chrome OS Linux (Beta) environment](/setting-up-linux-on-a-new-lenovo-chromebook-duet-bonus-arm64-complications), but I avoid Android apps as much as I can. And I also used the Slate for a bit of Stadia gaming when I wasn't near a Chromecast.
 
-So the laptop experience is generally more important to me than the tablet one. I need to be able to work with a large number of browser tabs, but I don't typically need to do any heavy processing directly on the computer. 
+So the laptop experience is generally more important to me than the tablet one. I need to be able to work with a large number of browser tabs, but I don't typically need to do any heavy processing directly on the computer.
 
-I was pretty happy with the Slate, but its expensive keyboard stopped working recently and replacements aren't really available anywhere. Remember, laptop mode is key for my use case so the Pixel Slate became instantly unusable to me. 
+I was pretty happy with the Slate, but its expensive keyboard stopped working recently and replacements aren't really available anywhere. Remember, laptop mode is key for my use case so the Pixel Slate became instantly unusable to me.
 
 ### Size
 When you put these machines side by side, the first difference that jumps out is the size disparity. The 12.3" Pixel Slate is positively massive next to the 10.1" Lenovo Duet.
@@ -24,14 +25,14 @@ When you put these machines side by side, the first difference that jumps out is
 
 The Duet is physically smaller so the display itself is of course smaller. I had a brief moment of panic when I first logged in and the setup wizard completely filled the screen. Dialing Chrome OS's display scaling down to 80% strikes a good balance for me between fonts being legible while still displaying enough content to be worthwhile. It can get a bit tight when you've got windows docked side-by-side but I'm getting by okay.
 
-Of course, the smaller size of the Duet also makes it work better as a tablet in my mind. It's comfortable enough to hold with one hand while you interact with the other, whereas the Slate always felt a little too big for that to me. 
+Of course, the smaller size of the Duet also makes it work better as a tablet in my mind. It's comfortable enough to hold with one hand while you interact with the other, whereas the Slate always felt a little too big for that to me.
 ![One-handing the Duet](qne9SybLi.jpeg)
 
 ### Keyboard
 A far more impactful size difference is the keyboards though. The Duet keyboard gets a bit cramped, particularly over toward the right side (you know, those pesky braces and semicolons that are *never* needed when coding):
 ![The Duet's keyboard is MUCH smaller](CBziPHD8A.jpeg)
 
-Getting used to typing on this significantly smaller keyboard has been the biggest adjustment so far. The pad on my pinky finger is wider than the last few keys at the right edge of the keyboard so I've struggled with accurately hitting the correct `[` or `]`, and also with smacking Return (and inevitably sending a malformed chat message) when trying to insert an apostrophe. I feel like I'm slowly getting the hang of it, but like I said, it's been an adjustment. 
+Getting used to typing on this significantly smaller keyboard has been the biggest adjustment so far. The pad on my pinky finger is wider than the last few keys at the right edge of the keyboard so I've struggled with accurately hitting the correct `[` or `]`, and also with smacking Return (and inevitably sending a malformed chat message) when trying to insert an apostrophe. I feel like I'm slowly getting the hang of it, but like I said, it's been an adjustment.
 
 ### Cover
 ![Cover up!](yiCW6XZbF.jpeg)
@@ -39,7 +40,7 @@ The Pixel Slate's keyboard + folio cover is a single (floppy) piece. The keyboar
 
 ![Duet's fabric cover](9_Ze3zyBk.jpeg)
 
-The Duet's rear cover has a fabric finish kind of similar to the cases Google offers for their phones, and it provides a great texture for holding the tablet. It sticks to the back of the Duet through the magic of magnets, and the lower half of it folds out to create a really sturdy kickstand. And it's completely separate from the keyboard which is great for when you're using the Duet as a tablet (either handheld or propped up for watching a movie or gaming with Stadia). 
+The Duet's rear cover has a fabric finish kind of similar to the cases Google offers for their phones, and it provides a great texture for holding the tablet. It sticks to the back of the Duet through the magic of magnets, and the lower half of it folds out to create a really sturdy kickstand. And it's completely separate from the keyboard which is great for when you're using the Duet as a tablet (either handheld or propped up for watching a movie or gaming with Stadia).
 
 ![Duet kickstand](nWRu2TB8i.jpeg)
 
@@ -48,9 +49,9 @@ And this little kickstand can go *low*, much lower than the Slate. This makes it
 ![The Duet handily wins this limbo competition](BAf7knBk5.jpeg)
 
 ### Performance
-The Duet does struggle a bit here. It's basically got a [smartphone processor](https://www.notebookcheck.net/Mediatek-Helio-P60T-Processor-Benchmarks-and-Specs.470711.0.html) and half the RAM of the Slate. Switching between windows and tabs sometimes takes an extra moment or two to catch up (particularly if said tab has been silently suspended in the background). Similarly, working with Linux apps is just a bit slower than you'd like it to be. Still, I've spent a bit more than a week now with the Duet as my go-to computer and it's never really been slow enough to bother me. 
+The Duet does struggle a bit here. It's basically got a [smartphone processor](https://www.notebookcheck.net/Mediatek-Helio-P60T-Processor-Benchmarks-and-Specs.470711.0.html) and half the RAM of the Slate. Switching between windows and tabs sometimes takes an extra moment or two to catch up (particularly if said tab has been silently suspended in the background). Similarly, working with Linux apps is just a bit slower than you'd like it to be. Still, I've spent a bit more than a week now with the Duet as my go-to computer and it's never really been slow enough to bother me.
 
-That arm64 processor does make finding compatible Linux packages a little more difficult than it's been on amd64 architectures but a [little bit of digging](/setting-up-linux-on-a-new-lenovo-chromebook-duet-bonus-arm64-complications) will get past that limitation in most cases. 
+That arm64 processor does make finding compatible Linux packages a little more difficult than it's been on amd64 architectures but a [little bit of digging](/setting-up-linux-on-a-new-lenovo-chromebook-duet-bonus-arm64-complications) will get past that limitation in most cases.
 
 The upside of that smartphone processor is that the battery life is *insane*. After about seven hours of light usage today I'm sitting at 63% - with an estimated nine hours remaining. This thing keeps going and going, even while Stadia-ing for hours. Being able to play Far Cry 5 without being tethered to a wall is so nice.
 

content/posts/snikket-private-xmpp-chat-on-oracle-cloud-free-tier/index.md

@@ -14,7 +14,7 @@ usePageBundles: true
 thumbnail: "snikket.png" # Sets thumbnail image appearing inside card on homepage.
 # shareImage: "share.png" # Designate a separate image for social media sharing.
 codeLineNumbers: false # Override global value for showing of line numbers within code block.
-series: Projects
+categories: Self-Hosting
 tags:
   - linux
   - cloud

content/posts/spotlight-on-torchlight/index.md

@@ -6,7 +6,7 @@ description: "Syntax highlighting powered by the Torchlight.dev API makes it eas
 featured: false
 toc: true
 comments: true
-series: Projects # Projects, Code
+categories: Backstage
 tags:
   - javascript
   - hugo
@@ -536,7 +536,7 @@ Serving HTTP on 0.0.0.0 port 1313 (http://0.0.0.0:1313/) ... # [tl! focus:1]
 #### Netlify
 Setting up Netlify to leverage the Torchlight API is kind of similar. I'll start with logging in to the [Netlify dashboard](https://app.netlify.com) and navigating to **Site Configuration > Environment Variables**. There, I'll click on **Add a variable > Add a ingle variable**. I'll give the new variable a key of `TORCHLIGHT_TOKEN` and set its value to the token I obtained earlier.
 
-![](netlify-env-var.png)
+![Screenshot showing the creation of the 'TORCHLIGHT_TOKEN' variable in Netlify](netlify-env-var.png)
 
 Once that's done, I edit the `netlify.toml` file at the root of my site repo to alter the build commands:
 ```toml

content/posts/systemctl-edit-delay-service-startup/index.md

@@ -6,7 +6,7 @@ description: "Quick notes on using `systemctl edit` to override a systemd servic
 featured: false
 toc: false
 comments: true
-series: Tips # Projects, Code
+categories: Tips # Projects, Code
 tags:
   - crostini
   - linux

content/posts/tailscale-golink-private-shortlinks-tailnet/index.md

@@ -14,7 +14,7 @@ usePageBundles: true
 thumbnail: "golinks.png" # Sets thumbnail image appearing inside card on homepage.
 # shareImage: "share.png" # Designate a separate image for social media sharing.
 codeLineNumbers: false # Override global value for showing of line numbers within code block.
-series: Projects # Projects, Code, vRA8, K8s on vSphere
+categories: Self-Hosting # Projects, Code, vRA8, K8s on vSphere
 tags:
   - docker
   - vpn

content/posts/tailscale-on-vmware-photon/index.md

@@ -14,7 +14,7 @@ usePageBundles: true
 thumbnail: "Tailscale-AppIcon.png" # Sets thumbnail image appearing inside card on homepage.
 # shareImage: "share.png" # Designate a separate image for social media sharing.
 codeLineNumbers: false # Override global value for showing of line numbers within code block.
-series: Tips # Projects, Code, vRA8, K8s on vSphere
+categories: Tips # Projects, Code, vRA8, K8s on vSphere
 tags:
   - vmware
   - linux

content/posts/tailscale-serve-docker-compose-sidecar/index.md

@@ -6,7 +6,7 @@ description: "Using Docker Compose to deploy containerized applications and make
 featured: false
 toc: true
 comments: true
-series: Projects
+categories: Self-Hosting
 tags:
   - containers
   - docker

content/posts/tailscale-ssh-serve-funnel/index.md

@@ -6,7 +6,7 @@ description: "Exploring some of my favorite Tailscale addon features: SSH, Serve
 featured: false
 toc: true
 comments: true
-series: Tips # Projects, Code
+categories: Tips # Projects, Code
 tags:
   - homelab
   - networking

content/posts/tanzu-community-edition-k8s-homelab/index.md

@@ -14,7 +14,7 @@ usePageBundles: true
 thumbnail: "tanzu_community_edition.png" # Sets thumbnail image appearing inside card on homepage.
 # shareImage: "share.png" # Designate a separate image for social media sharing.
 codeLineNumbers: false # Override global value for showing of line numbers within code block.
-series: K8s on vSphere
+categories: VMware
 tags:
   - vmware
   - linux
@@ -983,7 +983,8 @@ I'll define the new subnet as `192.168.1.0/24`. Once I enable the option to *Che
 ![A new (but empty) subnet](new_subnet_pre_scan.png)
 
 It shows the scanner associated with the subnet, but no data yet. I'll need to wait a few minutes for the first scan to kick off (at the five-minute interval I defined in the configuration).
-![](five_minutes.gif)
+
+![GIF which says 'Five Minutes Later!'](five_minutes.gif)
 ![Newly discovered IPs!](newly-discovered_IPs.png)
 
 Woah, it actually works!

content/posts/upgrading-standalone-vsphere-host-with-esxcli/index.md

@@ -14,7 +14,7 @@ featureImage: "esxi8.png" # Sets featured image on blog post.
 # thumbnail: "thumbnail.png" # Sets thumbnail image appearing inside card on homepage.
 # shareImage: "share.png" # Designate a separate image for social media sharing.
 codeLineNumbers: false # Override global value for showing of line numbers within code block.
-series: Tips # Projects, Code, vRA8
+categories: VMware # Projects, Code, vRA8
 tags:
   - vmware
   - homelab

content/posts/using-powershell-and-a-scheduled-task-to-apply-windows-updates/index.md

@@ -1,5 +1,5 @@
 ---
-series: Code
+categories: Code
 date: "2021-04-29T08:34:30Z"
 usePageBundles: true
 tags:
@@ -9,7 +9,7 @@ title: Using PowerShell and a Scheduled Task to apply Windows Updates
 toc: false
 ---
 
-In the same vein as [my script to automagically resize a Linux LVM volume to use up free space on a disk](/automatic-unattended-expansion-of-linux-root-lvm-volume-to-fill-disk), I wanted a way to automatically apply Windows updates for servers deployed by [my vRealize Automation environment](/series/vra8). I'm only really concerned with Windows Server 2019, which includes the [built-in Windows Update Provider PowerShell module](https://4sysops.com/archives/scan-download-and-install-windows-updates-with-powershell/). So this could be as simple as `Install-WUUpdates -Updates (Start-WUScan)` to scan for and install any available updates.
+In the same vein as [my script to automagically resize a Linux LVM volume to use up free space on a disk](/automatic-unattended-expansion-of-linux-root-lvm-volume-to-fill-disk), I wanted a way to automatically apply Windows updates for servers deployed by [my vRealize Automation environment](/categories/vmware). I'm only really concerned with Windows Server 2019, which includes the [built-in Windows Update Provider PowerShell module](https://4sysops.com/archives/scan-download-and-install-windows-updates-with-powershell/). So this could be as simple as `Install-WUUpdates -Updates (Start-WUScan)` to scan for and install any available updates.
 
 Unfortunately, I found that this approach can take a long time to run and often exceeded the timeout limits imposed upon my ABX script, causing the PowerShell session to end and terminating the update process. I really needed a way to do this without requiring a persistent session.
 

content/posts/using-vs-code-to-explore-giant-log-bundles/index.md

@@ -1,5 +1,5 @@
 ---
-series: Tips
+categories: Tips
 date: "2021-02-18T08:34:30Z"
 thumbnail: PPZu_UOGO.png
 usePageBundles: true

content/posts/using-vsphere-diagnostic-tool-fling/index.md

@@ -14,7 +14,7 @@ featureImage: "vdt.png" # Sets featured image on blog post.
 thumbnail: "pulse2.png" # Sets thumbnail image appearing inside card on homepage.
 # shareImage: "share.png" # Designate a separate image for social media sharing.
 codeLineNumbers: false # Override global value for showing of line numbers within code block.
-series: Tips # Projects, Code, vRA8
+categories: VMware # Projects, Code, vRA8
 tags:
   - vmware
   - vsphere

content/posts/virtually-potato-migrated-to-github-pages/index.md

@@ -2,6 +2,7 @@
 date: "2021-07-20T22:20:00Z"
 thumbnail: 20210720-jekyll.png
 usePageBundles: true
+categories: Backstage
 tags:
 - linux
 - meta
@@ -71,4 +72,4 @@ And there it is!
 ### `git push` time
 Alright that's enough rambling for now. I'm very happy with this new setup, particularly with the automatically-generated Table of Contents to help folks navigate some of my longer posts. (I can't believe I was having to piece those together manually in this blog's previous iteration!)
 
-I'll continue to make some additional tweaks in the coming weeks but for now I'll `git push` this post and get back to documenting my never-ending [vRA project](/series/vra8).
+I'll continue to make some additional tweaks in the coming weeks but for now I'll `git push` this post and get back to documenting my never-ending [vRA project](/categories/vmware).

content/posts/virtuallypotato-runtimeterror/index.md

@@ -7,6 +7,7 @@ draft: false
 description: "This blog has migrated from virtuallypotato.com to runtimeterror.dev."
 toc: false
 comments: true
+categories: Backstage
 tags:
   - meta
 ---
@@ -19,7 +20,7 @@ ln -s virtuallypotato.com runtimeterror.dev
 
 If you've noticed that things look a bit different around here, you might *also* have noticed that my posts about VMware products had become less and less frequent over the past year or so. That wasn't intentional, but a side-effect of some shifting priorities with a new position at work. I'm no longer on the team responsible for our VMware environment and am now more focused on cloud-native technologies and open-source DevOps solutions. The new role keeps me pretty busy, and I'm using what free time I have to learn more about and experiment with the technologies I use at work.
 
-That (unfortunately) means that I won't be posting much (if at all) about VMware-related things (including the [vRA8 series of posts](/series/vra8/))[^vra8] going forward. Instead, expect to see more posts about things like [containers](/tags/containers/), [infrastructure-as-code](/tags/iac/), [self-hosting](/tags/selfhosting/), and [miscellaneous tech projects](/series/projects/) that I play with.
+That (unfortunately) means that I won't be posting much (if at all) about VMware-related things (including the [vRA8 series of posts](/categories/vmware/))[^vra8] going forward. Instead, expect to see more posts about things like [containers](/tags/containers/), [infrastructure-as-code](/tags/iac/), [self-hosting](/tags/selfhosting/), and [miscellaneous tech projects](/categories/self-hosting/) that I play with.
 
 I decided to migrate, rebrand, and re-theme my blog to reflect this change in focus. virtuallypotato used a [theme heavily inspired by VMware design language](https://github.com/chipzoller/hugo-clarity), and I don't think it's a great fit for the current (and future) content anymore. That theme is also very feature-rich which provides a lot of capability out of the box but makes it a bit tricky to modify (and maintain) my personal tweaks. The new runtimeterror[^pun] site uses a [more minimal theme](https://github.com/joeroe/risotto) which takes cues from terminals and markdown formatting. It's also simpler and thus easier for me to tweak. I've done a lot of that already and anticipating doing a bit more in the coming weeks, but I wanted to go ahead and make this thing "live" for now.
 

content/posts/vmware-home-lab-on-intel-nuc-9/index.md

@@ -1,5 +1,5 @@
 ---
-series: vRA8
+categories: VMware
 date: "2021-02-05T08:34:30Z"
 thumbnail: SIDah-Lag.png
 usePageBundles: true

content/posts/vra8-automatic-deployment-naming-another-take/index.md

@@ -1,5 +1,5 @@
 ---
-series: vRA8
+categories: VMware
 date: "2021-05-20T08:34:30Z"
 thumbnail: wl-WPQpEl.png
 usePageBundles: true

content/posts/vra8-custom-provisioning-part-four/index.md

@@ -1,5 +1,5 @@
 ---
-series: vRA8
+categories: VMware
 date: "2021-05-18T08:34:30Z"
 lastmod: "2021-05-20"
 thumbnail: hFPeakMxn.png

content/posts/vra8-custom-provisioning-part-one/index.md

@@ -1,5 +1,5 @@
 ---
-series: vRA8
+categories: VMware
 date: "2021-03-29T08:34:30Z"
 thumbnail: VZaK4btzl.png
 usePageBundles: true

content/posts/vra8-custom-provisioning-part-three/index.md

@@ -1,5 +1,5 @@
 ---
-series: vRA8
+categories: VMware
 date: "2021-04-19T08:34:30Z"
 thumbnail: K6vcxpDj8.png
 usePageBundles: true

content/posts/vra8-custom-provisioning-part-two/index.md

@@ -1,5 +1,5 @@
 ---
-series: vRA8
+categories: VMware
 date: "2021-04-02T08:34:30Z"
 lastmod: "2022-03-23"
 thumbnail: HXrAMJrH.png
@@ -331,9 +331,9 @@ I'll do that with another scriptable task element, named `Apply new names`, whic
 
 {{% notice note "Binding a workflow output" %}}
 To easily create a new workflow output and bind it to a task's output, click the task's **Add New** option like usual:
-![](add_new.png)
+![Screenshot showing the creation of a new output](add_new.png)
 Select **Output** at the top of the *New Variable* dialog and the complete the form with the other required details:
-![](new_output_parameter.png)
+![Screenshot showing the new output parameter with 'Name: resourceNames' and 'Type: string'](new_output_parameter.png)
 {{% /notice %}}
 
 

content/search/_index.md

@@ -0,0 +1,3 @@
+---
+title: Search Results Page
+---