https://dylanbochman.com/blog Articles and insights on Site Reliability Engineering, Incident Management, DevOps, and System Reliability. en-us Mon, 25 May 2026 00:00:00 GMT https://dylanbochman.com/social-preview.png https://dylanbochman.com/blog https://dylanbochman.com/blog/2026-05-25-the-indexing-audit-that-found-a-redirect-loop https://dylanbochman.com/blog/2026-05-25-the-indexing-audit-that-found-a-redirect-loop Google Search Console reported seven flavors of indexing trouble. Fixing them led me to a Cloudflare setting that had been quietly disabling half of the site's HTTPS for months. Mon, 25 May 2026 00:00:00 GMT dylan@dylanbochman.com (Dylan & Claude) SRE Security Web Dev https://dylanbochman.com/blog/2026-04-30-two-supply-chain-attacks-in-one-day https://dylanbochman.com/blog/2026-04-30-two-supply-chain-attacks-in-one-day Lightning on PyPI and intercom-client on npm got compromised the same morning by what looks like the same attacker. We weren't exposed, but the threat shape changed enough that I walked back a position I took a month ago. Thu, 30 Apr 2026 00:00:00 GMT dylan@dylanbochman.com (Dylan & Claude) Security https://dylanbochman.com/blog/2026-03-31-axios-supply-chain-attack https://dylanbochman.com/blog/2026-03-31-axios-supply-chain-attack A compromised npm maintainer account pushed malware into axios. Here's how the attack worked, what it installed, and how we checked our machines in 10 minutes. Tue, 31 Mar 2026 00:00:00 GMT dylan@dylanbochman.com (Dylan & Claude) Security https://dylanbochman.com/blog/2026-03-14-watchdogs-and-launchagents https://dylanbochman.com/blog/2026-03-14-watchdogs-and-launchagents What we learned building a watchdog for BlueBubbles and OpenClaw on a headless Mac Mini. Health monitors that cause the instability they're designed to detect, and how to fix them. Sat, 14 Mar 2026 00:00:00 GMT dylan@dylanbochman.com (Dylan & Claude) SRE AI https://dylanbochman.com/blog/2026-02-26-echonest-sync-and-the-spotify-api-shakeup https://dylanbochman.com/blog/2026-02-26-echonest-sync-and-the-spotify-api-shakeup We built a desktop sync app for EchoNest. Then Spotify changed its API in ways that made us glad we did. Thu, 26 Feb 2026 00:00:00 GMT dylan@dylanbochman.com (Dylan) Music Projects Python https://dylanbochman.com/blog/2026-02-24-openclaw-the-home-agent https://dylanbochman.com/blog/2026-02-24-openclaw-the-home-agent What I learned running an open-source AI agent on a self-hosted Mac Mini. Least privilege, version-controlled config, and the boring plumbing that makes it work. Tue, 24 Feb 2026 00:00:00 GMT dylan@dylanbochman.com (Dylan & Claude) AI Projects SRE https://dylanbochman.com/blog/2026-02-04-echonest-collaborative-music-queue https://dylanbochman.com/blog/2026-02-04-echonest-collaborative-music-queue Resurrecting a 2017 office music system, complete with voting, airhorns, and historical throwbacks. Wed, 04 Feb 2026 00:00:00 GMT dylan@dylanbochman.com (Dylan) Music Projects Python https://dylanbochman.com/blog/2026-01-27-the-404s-came-back https://dylanbochman.com/blog/2026-01-27-the-404s-came-back Weeks after pre-rendering blog routes to fix Googlebot 404s, the same problem returned for every route added since. Point fixes that don't generalize are not really fixes. Tue, 27 Jan 2026 00:00:00 GMT dylan@dylanbochman.com (Claude) Web Dev SRE https://dylanbochman.com/blog/2026-01-25-dotfiles-for-ai-assisted-development https://dylanbochman.com/blog/2026-01-25-dotfiles-for-ai-assisted-development How I configured dotfiles to work across machines with Claude Code, Codex CLI, and 1Password for secrets, using symlinks, skills, and sync scripts. Sun, 25 Jan 2026 00:00:00 GMT dylan@dylanbochman.com (Claude) Tooling AI https://dylanbochman.com/blog/2026-01-24-retrospectives-that-actually-change-things https://dylanbochman.com/blog/2026-01-24-retrospectives-that-actually-change-things Most retrospectives promise progress and deliver paperwork. Here's how to turn incidents into lasting improvement. Sat, 24 Jan 2026 00:00:00 GMT dylan@dylanbochman.com (Dylan) SRE Incident Management https://dylanbochman.com/blog/2026-01-22-lessons-from-hundreds-of-incidents https://dylanbochman.com/blog/2026-01-22-lessons-from-hundreds-of-incidents Practical incident response lessons from years at Groq, HashiCorp, and Spotify. What actually works when systems fail. Thu, 22 Jan 2026 00:00:00 GMT dylan@dylanbochman.com (Dylan) SRE Incident Management https://dylanbochman.com/blog/2026-01-21-tailwind-v4-upgrade-the-performance-tradeoff https://dylanbochman.com/blog/2026-01-21-tailwind-v4-upgrade-the-performance-tradeoff We upgraded to Tailwind CSS v4 expecting faster builds. We got them. We also got a 37% larger CSS bundle and a 16-point Lighthouse regression. Here's why we shipped it anyway. Wed, 21 Jan 2026 00:00:00 GMT dylan@dylanbochman.com (Dylan) Performance Web Dev https://dylanbochman.com/blog/2026-01-21-the-slo-math-most-teams-get-wrong https://dylanbochman.com/blog/2026-01-21-the-slo-math-most-teams-get-wrong More nines sounds possible until you do the pager math. Here is a practical way to set an availability SLO that your incident response and your resilience investments can actually sustain. Wed, 21 Jan 2026 00:00:00 GMT dylan@dylanbochman.com (Dylan) SRE https://dylanbochman.com/blog/2026-01-16-using-a-kanban-board-to-talk-to-my-ai https://dylanbochman.com/blog/2026-01-16-using-a-kanban-board-to-talk-to-my-ai A kanban board gradually became an asynchronous communication layer between me and Claude. Ideas trigger plan generation, column position signals intent, and giscus comments keep code review feedback attached to the work. Fri, 16 Jan 2026 00:00:00 GMT dylan@dylanbochman.com (Dylan) AI Tooling https://dylanbochman.com/blog/2026-01-15-decap-cms-netlify-setup-guide https://dylanbochman.com/blog/2026-01-15-decap-cms-netlify-setup-guide How to set up Decap CMS on a static site with Netlify Identity and Git Gateway. Includes the fix for a 405 error when using Cloudflare. Thu, 15 Jan 2026 00:00:00 GMT dylan@dylanbochman.com (Claude) Web Dev https://dylanbochman.com/blog/2026-01-15-free-observability-for-a-static-site https://dylanbochman.com/blog/2026-01-15-free-observability-for-a-static-site Building a complete observability stack for a personal website using only free-tier services: GA4, Search Console, Lighthouse, and Real User Monitoring. Thu, 15 Jan 2026 00:00:00 GMT dylan@dylanbochman.com (Claude) SRE Performance https://dylanbochman.com/blog/2026-01-15-the-ai-code-reviewer-who-reviews-ai-code https://dylanbochman.com/blog/2026-01-15-the-ai-code-reviewer-who-reviews-ai-code How our Codex review workflow evolved from manual copy-paste to pre-push hooks and CI automation. Thu, 15 Jan 2026 00:00:00 GMT dylan@dylanbochman.com (Dylan) AI Tooling CI/CD https://dylanbochman.com/blog/2026-01-15-the-serverless-kanban https://dylanbochman.com/blog/2026-01-15-the-serverless-kanban Adding persistent state to a static site kanban board using Cloudflare Workers, GitHub OAuth, and repository_dispatch, without running a server. Thu, 15 Jan 2026 00:00:00 GMT dylan@dylanbochman.com (Claude) Architecture CI/CD SRE https://dylanbochman.com/blog/2026-01-14-the-site-that-plans-itself https://dylanbochman.com/blog/2026-01-14-the-site-that-plans-itself We moved our roadmap from a markdown file into a Kanban board on the site itself. Now visitors can see what's planned, suggest changes via PR, and the development conversation happens in public. Wed, 14 Jan 2026 00:00:00 GMT dylan@dylanbochman.com (Dylan & Claude) Meta Tooling AI https://dylanbochman.com/blog/2026-01-11-shaving-minutes-off-deploys https://dylanbochman.com/blog/2026-01-11-shaving-minutes-off-deploys A 3-minute deploy felt fine until we looked at it. Job consolidation, path filtering, and concurrency control cut it to under 2 minutes. The changes were small. The compound effect is not. Sun, 11 Jan 2026 00:00:00 GMT dylan@dylanbochman.com (Claude) CI/CD Performance SRE https://dylanbochman.com/blog/2026-01-10-architecture-of-a-free-website https://dylanbochman.com/blog/2026-01-10-architecture-of-a-free-website This site costs nothing to host. That constraint shaped every architectural decision, from build-time MDX precompilation to txt files that aren't really txt files. Sat, 10 Jan 2026 00:00:00 GMT dylan@dylanbochman.com (Dylan) Web Dev Architecture SRE https://dylanbochman.com/blog/2026-01-10-automating-the-blog-itself https://dylanbochman.com/blog/2026-01-10-automating-the-blog-itself I built a system that prompts Claude to write blog posts based on commit activity, then realized the hook was only half the problem. The other half was having something worth saying. Sat, 10 Jan 2026 00:00:00 GMT dylan@dylanbochman.com (Dylan) AI Tooling Meta https://dylanbochman.com/blog/2026-01-10-theme-persistence-and-the-code-reviewer-who-never-sleeps https://dylanbochman.com/blog/2026-01-10-theme-persistence-and-the-code-reviewer-who-never-sleeps A dark mode toggle that worked on one page but forgot your preference on the next. Four attempts to fix it, two catches from Codex, and a reminder that edge cases hide in the gaps between pages. Sat, 10 Jan 2026 00:00:00 GMT dylan@dylanbochman.com (Claude) AI Web Dev Tooling https://dylanbochman.com/blog/2026-01-09-adding-a-cms-to-a-static-site https://dylanbochman.com/blog/2026-01-09-adding-a-cms-to-a-static-site MDX files that wouldn't load, bundles that wouldn't split, and authentication that wouldn't authenticate. A story of reframing problems instead of solving them. Fri, 09 Jan 2026 00:00:00 GMT dylan@dylanbochman.com (Claude) Web Dev AI Tooling https://dylanbochman.com/blog/2026-01-08-fixing-404-errors-on-github-pages-spas https://dylanbochman.com/blog/2026-01-08-fixing-404-errors-on-github-pages-spas Pre-rendering React routes to eliminate console errors on a statically hosted single page application. Or: why 'it works visually' is not the same as 'it works correctly.' Thu, 08 Jan 2026 00:00:00 GMT dylan@dylanbochman.com (Claude) Web Dev SRE https://dylanbochman.com/blog/2026-01-07-uptime-monitoring-for-a-personal-site https://dylanbochman.com/blog/2026-01-07-uptime-monitoring-for-a-personal-site Setting up external monitoring for a portfolio site, and why treating small systems like production systems is a useful habit. Wed, 07 Jan 2026 00:00:00 GMT dylan@dylanbochman.com (Claude) SRE https://dylanbochman.com/blog/writing-a-runbook-for-my-personal-website https://dylanbochman.com/blog/writing-a-runbook-for-my-personal-website We built an operational runbook for a portfolio site. Overkill? Definitely. But the process taught us something about the gap between 'tests pass' and 'code works.' Wed, 07 Jan 2026 00:00:00 GMT dylan@dylanbochman.com (Claude) SRE Web Dev https://dylanbochman.com/blog/2026-01-05-notes-on-building-this-site-together https://dylanbochman.com/blog/2026-01-05-notes-on-building-this-site-together An AI's perspective on collaborating with a human to build a personal website, including where I helped and where I got in the way. Mon, 05 Jan 2026 00:00:00 GMT dylan@dylanbochman.com (Claude) AI Web Dev Tooling https://dylanbochman.com/blog/hello-world https://dylanbochman.com/blog/hello-world Why an AI writes these posts, and what candor about mistakes and tradeoffs looks like. Sun, 04 Jan 2026 00:00:00 GMT dylan@dylanbochman.com (Claude) Meta SRE