https://billalrehmani.pages.dev/Recent content on Bill's Bloghttps://billalrehmani.pages.dev/images/eft-bg.jpghttps://billalrehmani.pages.dev/images/eft-bg.jpgHugoen-AUSun, 12 Jul 2026 23:29:00 +1000https://billalrehmani.pages.dev/posts/cloudflare-pages-migration-security-headers/Sun, 12 Jul 2026 23:29:00 +1000https://billalrehmani.pages.dev/posts/cloudflare-pages-migration-security-headers/Why I moved this Hugo blog from GitHub Pages to Cloudflare Pages: GitHub Pages can't set custom HTTP response headers, so a meta-tag CSP was as far as my security posture could go.https://billalrehmani.pages.dev/posts/vlan-segmentation-pfsense/Sun, 12 Jul 2026 21:30:00 +1000https://billalrehmani.pages.dev/posts/vlan-segmentation-pfsense/Building three firewall-isolated network segments — Trusted, IoT, and Guest — entirely in virtual machines, with no managed-switch hardware, and proving the isolation holds.https://billalrehmani.pages.dev/posts/wireguard-pfsense-nested-firewall/Sat, 11 Jul 2026 22:30:00 +1000https://billalrehmani.pages.dev/posts/wireguard-pfsense-nested-firewall/I already run Tailscale, but I wanted to build a VPN into my lab from scratch — raw WireGuard on pfSense, reaching it from my phone on mobile data. Getting the tunnel up was the easy part. Then came four separate silent failures, each producing the identical 'won't load' symptom for a completely different reason, at a completely different layer.https://billalrehmani.pages.dev/posts/hardening-debian-homelab-vm/Tue, 07 Jul 2026 21:50:00 +1000https://billalrehmani.pages.dev/posts/hardening-debian-homelab-vm/The VM is already isolated behind a pfSense firewall — so why harden it? Because two paths reach in without ever crossing pfSense. An honest audit of my own box, the fixes, and the sandbox gotcha that broke a service.https://billalrehmani.pages.dev/posts/claude-code-mcp-hub-tailscale/Tue, 07 Jul 2026 16:55:00 +1000https://billalrehmani.pages.dev/posts/claude-code-mcp-hub-tailscale/Linking two independent Claude Code agents — a home-lab VM and a roaming laptop — through a custom MCP server over a Tailscale mesh, so the laptop can push notes to a central hub from any network without opening a single inbound port.https://billalrehmani.pages.dev/posts/prometheus-grafana-observability-stack/Mon, 06 Jul 2026 21:26:00 +1000https://billalrehmani.pages.dev/posts/prometheus-grafana-observability-stack/The dashboard layer under the LaMetric glance: Prometheus scraping my Debian VM and pfSense firewall, Grafana turning it into real graphs with history — all on one isolated VM, bound to localhost, reusing the SNMP work from the last project.https://billalrehmani.pages.dev/posts/implementing-lametric-time-to-network-part-2/Mon, 06 Jul 2026 19:20:00 +1000https://billalrehmani.pages.dev/posts/implementing-lametric-time-to-network-part-2/Adding real WAN throughput to the LaMetric display by polling pfSense over SNMP — turning 'a VM's stats' into 'my network's stats', with the counter that proves it works.https://billalrehmani.pages.dev/posts/implementing-lametric-time-to-network/Sun, 05 Jul 2026 21:30:00 +1000https://billalrehmani.pages.dev/posts/implementing-lametric-time-to-network/Piping live home-lab stats to a LaMetric Time over MQTT — bridging two deliberately-isolated networks through a cloud broker without opening a single inbound port.https://billalrehmani.pages.dev/privacy/Sun, 05 Jul 2026 13:30:00 +1000https://billalrehmani.pages.dev/privacy/Privacy policy for this personal blog.https://billalrehmani.pages.dev/posts/porting-mod-claude-fable-5/Fri, 03 Jul 2026 21:13:00 +1000https://billalrehmani.pages.dev/posts/porting-mod-claude-fable-5/Running a full legacy mod port through Claude Fable 5: a 2022 JavaScript weapon-sound mod rebuilt as a C#/.NET 9 DLL for SPT 4.0.13 — five bugs found in the original, seven problems hit and fixed along the way.https://billalrehmani.pages.dev/posts/systeminfo-grabber-claude-ai/Thu, 02 Jul 2026 22:02:00 +1000https://billalrehmani.pages.dev/posts/systeminfo-grabber-claude-ai/One Claude Code session: a native desktop GUI that grabs system info and exports a styled HTML report — Tarkov-themed, security-hardened, and packaged as executables for both Linux and Windows.https://billalrehmani.pages.dev/posts/pfsense-lab-recovery-and-hardening/Thu, 02 Jul 2026 21:46:00 +1000https://billalrehmani.pages.dev/posts/pfsense-lab-recovery-and-hardening/A Windows update silently re-enabled the hypervisor and killed my VMware lab's networking. The diagnosis, the fix, and the pfSense rebuild — bridged WAN plus egress rules — that came out of it.https://billalrehmani.pages.dev/about/Wed, 01 Jul 2026 00:00:00 +1000https://billalrehmani.pages.dev/about/IT student, gamer, and hobbyist based in Australia — using Claude to build, learn, and document.https://billalrehmani.pages.dev/now/Wed, 01 Jul 2026 00:00:00 +1000https://billalrehmani.pages.dev/now/What I'm up to right now — studies, projects, games, and learning.https://billalrehmani.pages.dev/laptop-claude-proj/Tue, 30 Jun 2026 00:00:00 +1000https://billalrehmani.pages.dev/laptop-claude-proj/Mini projects completed through Claude Code CLI on a Debian laptop — environment setup, OneDrive sync, Obsidian vault optimisation, and lab document migration.https://billalrehmani.pages.dev/posts/spt-aki-typescript-to-csharp-port/Mon, 29 Jun 2026 12:20:00 +1000https://billalrehmani.pages.dev/posts/spt-aki-typescript-to-csharp-port/How I ported the BiggerBang SPT mod from TypeScript to C#/.NET for the SPT 4.0 server rewrite, fixed five real bugs in the process, and packaged it for release.https://billalrehmani.pages.dev/posts/home-network-hardening-hwg2025/Mon, 29 Jun 2026 12:10:00 +1000https://billalrehmani.pages.dev/posts/home-network-hardening-hwg2025/How I hardened and segmented my home network on an ISP-provided Wi-Fi 7 router — and the DNS gotcha that makes doing it properly harder than it should be.https://billalrehmani.pages.dev/posts/self-hosted-hugo-claude-code-pipeline/Mon, 29 Jun 2026 12:00:00 +1000https://billalrehmani.pages.dev/posts/self-hosted-hugo-claude-code-pipeline/How I set up a Hugo blog on Debian, automated publishing with Claude Code slash commands, and bridged the gap between two separate Claude memory systems.https://billalrehmani.pages.dev/projects/Mon, 01 Jan 0001 00:00:00 +0000https://billalrehmani.pages.dev/projects/The projects behind the posts — networking, security, game modding, and tooling.