Persistent services, quietly maintained

Short notes from operating a small pool of long-lived Linux hosts: boring configs, predictable restarts, boring recovery.

Latest

• Reload is not a restart — why configuration reloads matter
• Certificate rotation without downtime
• Reading logs under pressure

Host profile

• Static front end over TLS with HTTP/2
• Renewal driven by acme.sh with a deploy hook
• Access retained 30 days, rotated weekly