Decisions

• Migrating Active Directory to Samba, One Domain Controller at a Time

  Replacing two Windows Server 2019 domain controllers with Samba AD via an in-place replica join — preserving every SID so no workstation ever notices, executed across one night and the following day, split by an AI usage-limit reset.

• The PKI Detour: A Week on the Wrong Cert Strategy, Three FreeIPA Failures

  Part 5 of the downsizing series: a week chasing the wrong cert strategy, three FreeIPA failures, and why step-ca ended up carrying the PKI load.

• Infrastructure to Build Infrastructure

  Part 4 of the downsizing series: the first commit, the first apply, and pushing the code to the server the code itself built.

• Why I Left XCP-ng for Proxmox

  Before any of the migration, there was a decision I didn't plan to make: the new cluster runs Proxmox, not XCP-ng. A Secure Boot wall, a YouTube channel I've trusted for years, and LXC containers are why.