Flaviu Vlaicuwhois

Cybersecurity | DevOps | HomeLab | HomeAutomation

Hermes Agent Operator's Manual

The Operator’s Manual for Hermes Agent Building an AI assistant that can act, remember, and improve Operator’s Manual · Edition 3.2 · Verified against official Nous Research documentation About This Manual This manual explains how to deploy and operate Hermes Agent as a persistent “operator” — an AI system that runs continuously, uses tools, remembers context across sessions, and improves over time — rather than as a single-session chatbot. It covers architecture, installation, the core mental model, day-to-day workflows, the operator loop, common failure modes, advanced configuration (including offline skill optimization with GEPA), and a distilled set of operational lessons. ...

May 24, 2026 · 47 min · 9845 words · Flaviu Vlaicu

Q-feeds

Q-Feeds delivers curated indicators of compromise (IPs and domains) on a schedule. The OPNsense plugin is purpose-built to consume the IP feeds, and the official documentation assumes you’ll feed the domain side into Unbound. If you’re running AdGuard Home as your primary DNS resolver instead of Unbound — as I am — that integration path doesn’t apply directly, and you have to wire the domain feeds in manually. A two-layer threat intelligence setup is only as good as the DNS path that feeds it. This post walks through wiring Q-Feeds into OPNsense (IP layer) and AdGuard Home (DNS layer), and then — the part that turned out to matter most — actually forcing every device on the network to use that DNS path, instead of just offering it. ...

May 7, 2026 · 25 min · 5268 words · Flaviu Vlaicu
TL;DR

TL;DR

  • Mosh replaces SSH for interactive sessions, using UDP so it survives roaming and network drops.
  • Open UDP ports 60000-61000 on the server; auth still piggybacks on SSH.
  • On macOS, fix the PATH in ~/.zshenv so non-interactive SSH can find mosh-server.
  • Pair it with tmux for a session that survives almost anything short of a server reboot.
  • Mosh replaces SSH for interactive sessions, using UDP so it survives roaming and network drops.
  • Open UDP ports 60000-61000 on the server; auth still piggybacks on SSH.
  • On macOS, fix the PATH in ~/.zshenv so non-interactive SSH can find mosh-server.
  • Pair it with tmux for a session that survives almost anything short of a server reboot.
  • Mosh replaces SSH for interactive sessions, using UDP so it survives roaming and network drops.
  • Open UDP ports 60000-61000 on the server; auth still piggybacks on SSH.
  • On macOS, fix the PATH in ~/.zshenv so non-interactive SSH can find mosh-server.
  • Pair it with tmux for a session that survives almost anything short of a server reboot.
click to read →

Mosh - The SSH Replacement You Didn't Know You Needed

If you’ve ever had an SSH session freeze mid-command because you switched from Wi-Fi to mobile, or lost your work because a hotel network dropped for three seconds, Mosh is the tool that fixes all of that. What is Mosh? Mosh (Mobile Shell) is a remote terminal application that replaces SSH for interactive sessions. It uses SSH only for the initial authentication handshake, then hands off to its own UDP-based protocol (SSP — State Synchronization Protocol) for the actual terminal session. ...

March 6, 2026 · 5 min · 967 words · Flaviu Vlaicu

Kea DHCP to Unbound DNS Registration

Features Smart Update Logic: Intelligently handles dual-stack environments. It preserves existing IPv4 records when adding IPv6 (and vice versa), eliminating race conditions. Automatic PTR Generation: Automatically generates reverse DNS (Pointer) records in both standard and in-addr.arpa formats. Persistence & Repair: Includes rc.syshook.d scripts to ensure patches survive OPNsense firmware updates and system reboots. Dedicated Logging: Writes detailed, timestamped activity logs to /var/log/kea-unbound.log with automatic rotation via newsyslog. Smart Hostnames: Automatically generates hostnames from MAC addresses or DUIDs if the client device does not provide one. Non-Destructive: Uses OPNsense’s native hook system to inject configuration safely without modifying core system files. Prerequisites Before installing, ensure the following services are enabled in OPNsense: ...

February 7, 2026 · 4 min · 678 words · JameZUK

Frigate NVR - Complete Setup Guide with Nvidia Blackwell

System Overview | OS | Ubuntu 24.04 (Proxmox VM with GPU passthrough) | | GPU | NVIDIA RTX 2000 Pro Blackwell (16GB VRAM) | | Frigate | 0.16.4 (stable-tensorrt Docker image) | | Detector | ONNX (GPU-accelerated via TensorRT) | | Models | YOLOv9-c-640 and/or D-FINE-L-640 | | MQTT | Eclipse Mosquitto 2 | | Cameras | RTSP via UniFi Protect (192.168.1.10:7447) | 1. Prerequisites Docker and Docker Compose must be installed. NVIDIA drivers must be working (nvidia-smi should show your GPU). ...

February 2, 2026 · 10 min · 2017 words · Flaviu Vlaicu

Mosh FIDO2 / Yubikey Fix

Problem When using mosh with a FIDO2-backed SSH key (sk-ed25519 / sk-ecdsa, e.g. YubiKey), the touch prompt is never shown. The YubiKey blinks — meaning it received the signing request — but the terminal hangs silently until timeout. This affects any tool that invokes SSH as a subprocess without a proper controlling TTY, including mosh and ansible. Root Cause Mosh calls SSH internally with the -n flag: ssh -n -tt -S none -o ProxyCommand=... <host> -- mosh-server new ... The -n flag redirects SSH’s stdin from /dev/null. libfido2 needs a real /dev/tty to print the touch prompt. With -n in effect, the signing request reaches the YubiKey hardware (hence the blinking) but the prompt is swallowed and there is no way to respond. ...

March 6, 2026 · 7 min · 1397 words · Flaviu Vlaicu

Datanode.eu

Powering Romania’s Digital Backbone from Timișoara In the heart of Romania’s vibrant western region, nestled within the innovative VOX Technology Park, DataNode.eu stands as a cornerstone of reliable digital infrastructure. Established with a focus on collocation and internet services, this Romanian datacenter provider has quietly built a reputation for stability and efficiency over more than 16 years. As businesses increasingly rely on seamless connectivity and robust data management, DataNode.eu exemplifies how localized expertise can fuel broader technological growth. ...

November 14, 2025 · 4 min · 797 words · Flaviu Vlaicu

Discover Cloudify.ro

Outshining Hetzner! Cloudify.ro stands tall as Romania’s premium Cloud VPS provider, delivering unmatched performance that surpasses global giants like Hetzner at performance and as well as prices. Cloudify harnesses enterprise-grade tech with NVMe storage, dedicated CPUs powered by AMD EPYC Gen 5 & Intel Xeon Gold for blistering speeds, and seamless scalability for your most demanding workloads, projects, and applications. Why Cloudify Outperforms Hetzner? Storage & Compute: Built on OpenStack orchestration, Ceph distributed storage (with 3x replication for superior redundancy over traditional RAID), and KVM hypervisors, Cloudify’s NVMe HA arrays deliver faster I/O and data integrity than Hetzner’s setups—perfect for high-traffic apps without bottlenecks. Scale up to 64 vCPU AMD EPYC cores, 256GB ECC RAM, and 1.6TB NVMe for resource-hungry production stacks, or opt for flexible block storage options: high-performance NVMe for intensive tasks or cost-effective HDD for less demanding workloads and cold storage. Create instant snapshots for backups and enable seamless rescaling to adapt on the fly—without any downtime. Advanced Networking & Security: Dive into a robust networking suite for seamless connectivity, Load balancers: for traffic distribution, Floating IPs: (backed by our massive dedicated IPv4 pools for abundant, reliable addressing), Routers for intelligent routing, and Firewals for layered defenses. Add built-in firewall rules for granular traffic control, GDPR-compliant operations, and private VXLAN overlays for encrypted, high-speed networking—features refined beyond Hetzner’s for devops teams craving flexibility. If things go sideways, our machine rescue mode gets you back online fast. Object Storage & Orchestration: Go beyond basics with S3 bucket support for scalable, compatible object storage, and native Kubernetes integration to orchestrate containerized apps effortlessly. Manage your entire project via the intuitive OpenStack CLI using a simple API key—full root access for custom configs, on-demand block storage attachments, and more. In our extended testing and benchmarks we have found that Cloudify is surpassing Hetzner’s CPU performnce in Geekbench and also Disk Speed Test by quite a lot. ...

November 13, 2025 · 4 min · 759 words · Flaviu Vlaicu