Welcome to my personal blog

To know more about me, check out on LinkedIn or GitHub

Advanced WireGuard on Docker: Split Tunneling, No-NAT, and Hardening on Modern Linux

Configuring WireGuard via Docker (using popular images like wg-easy) is often marketed as a 5-minute operation. And it is, if your only goal is a working tunnel without worrying about what happens ‘under the hood.’ However, when you have specific engineering requirements—such as integration with a local DNS (e.g., Pi-hole), the need for real logs (No-NAT), and granular security (Firewalling)—the out-of-the-box configuration reveals its limitations, especially on modern Linux distributions (Debian 12/13, Ubuntu 22.04+) that utilize nftables and a complex Docker subsystem.

January 20, 2025 · Simeone Vilardo

How to NOT implement a promo code

A promo code is a code used to participate in a particular promotion. Let’s consider a practical example. Imagine being a retail chain selling products, and we want to allow our customers to participate in a survey about the quality of our service. In exchange, they can receive a reward (such as a discount or a free product). However, we want this survey to be completed only by those who have actually made a purchase. To achieve this, we can print a unique code on the receipt, which the customer can use to participate in the survey. This code is the promo code.

March 17, 2024 · Simeone Vilardo