Giving Pi-hole a real IP on the network with MetalLB, creating a dedicated VLAN for ad-blocked WiFi, and pointing a Ruckus SSID at it.

Split-horizon DNS with dnsmasq, MetalLB VIP, DHCP cutover, and debugging dnsmasq.

VLANs, firewall zones, traffic flow rules, DNS, ingress paths, and remote access.

Full architecture overview of The Heezy.

Tailscale exit node, FortiGate CVE treadmill, and why I don’t expose the firewall’s VPN.

Setting up cellular failover internet for the homelab.