Technical guides, project walkthroughs, and open-source tools on AI agents, homelab infrastructure, Kubernetes, and IIoT.https://guatulabs.dev/en-ushttps://guatulabs.dev/posts/systemd-tmpfiles-and-plex-when-tmp-aging-breaks-eac3-transcoding/https://guatulabs.dev/posts/systemd-tmpfiles-and-plex-when-tmp-aging-breaks-eac3-transcoding/Why long-running Plex servers suddenly fail EAC3 transcodes with exit code 187, and how a tmpfiles.d exclusion rule fixes it permanently.Wed, 19 Aug 2026 00:00:00 GMThttps://guatulabs.dev/posts/tailscale-kernel-tun-in-unprivileged-lxc-direct-ssh-without-userspace-networking/https://guatulabs.dev/posts/tailscale-kernel-tun-in-unprivileged-lxc-direct-ssh-without-userspace-networking/Two lines in a Proxmox LXC config give Tailscale a real kernel TUN device: direct peer-to-peer SSH, working UDP, and the container stays unprivileged.Fri, 14 Aug 2026 00:00:00 GMThttps://guatulabs.dev/posts/pushgateway-heartbeat-gotcha-ndots-and-networkpolicy-interplay/https://guatulabs.dev/posts/pushgateway-heartbeat-gotcha-ndots-and-networkpolicy-interplay/How ndots:5, a wildcard DNS record, and a default-deny NetworkPolicy combine to swallow CronJob heartbeats without a single error or alert.Wed, 12 Aug 2026 00:00:00 GMThttps://guatulabs.dev/posts/fastmcp-agent-mail-rbac-token-vs-anonymous-lessons-from-403-errors/https://guatulabs.dev/posts/fastmcp-agent-mail-rbac-token-vs-anonymous-lessons-from-403-errors/Why a FastMCP agent mail server that works anonymously in dev returns 403 behind TLS ingress, and how to wire bearer tokens without leaking them.Mon, 10 Aug 2026 00:00:00 GMThttps://guatulabs.dev/posts/kyverno-allowlatesttag-pitfalls-how-policy-can-stop-pods-from-restarting/https://guatulabs.dev/posts/kyverno-allowlatesttag-pitfalls-how-policy-can-stop-pods-from-restarting/A disallow-latest-tag policy only blocks new admissions. That gap turns a routine pod eviction into a permanent outage. Here's the failure mode and the fix.Fri, 07 Aug 2026 00:00:00 GMThttps://guatulabs.dev/posts/hybrid-retrieval-v2-combining-qwen-embeddings-bm25-and-rrf-with-fastembed-reranker/https://guatulabs.dev/posts/hybrid-retrieval-v2-combining-qwen-embeddings-bm25-and-rrf-with-fastembed-reranker/Dense vectors miss exact identifiers. Here's the hybrid Qdrant setup I run: Qwen3 embeddings, BM25 sparse vectors, RRF fusion, and a CPU FastEmbed reranker.Wed, 05 Aug 2026 00:00:00 GMThttps://guatulabs.dev/posts/handling-longhorn-read-only-mounts-detection-recovery-and-preventing-silent-failures/https://guatulabs.dev/posts/handling-longhorn-read-only-mounts-detection-recovery-and-preventing-silent-failures/A Longhorn volume can report Healthy while the filesystem inside your pod has been read-only for hours. How to detect it, recover it, and alert on it.Mon, 03 Aug 2026 00:00:00 GMThttps://guatulabs.dev/posts/forwardauth-with-authentik-wiring-sso-across-multiple-apps-without-breaking-ingress/https://guatulabs.dev/posts/forwardauth-with-authentik-wiring-sso-across-multiple-apps-without-breaking-ingress/Authentik ForwardAuth on Traefik fails in ways that look like success. Outpost bindings, NetworkPolicies, secret shape, and header mapping across apps.Fri, 31 Jul 2026 00:00:00 GMThttps://guatulabs.dev/posts/backing-up-qdrant-snapshots-correctly-from-emptydir-to-nfs-persistent-backups/https://guatulabs.dev/posts/backing-up-qdrant-snapshots-correctly-from-emptydir-to-nfs-persistent-backups/Qdrant snapshots on emptyDir vanish on restart, and snapshots on the data PVC die with the disk. Here's the NFS-backed pattern that survives both.Wed, 29 Jul 2026 00:00:00 GMThttps://guatulabs.dev/posts/traefik-host-collision-why-duplicate-host-rules-break-ingressroutes/https://guatulabs.dev/posts/traefik-host-collision-why-duplicate-host-rules-break-ingressroutes/In Traefik v3, a wildcard router can outrank an exact Host match, because default priority is rule string length. Here's how it fails and how to fix it.Mon, 27 Jul 2026 00:00:00 GMThttps://guatulabs.dev/posts/we-almost-deployed-a-temporal-knowledge-graph-the-eval-said-no/https://guatulabs.dev/posts/we-almost-deployed-a-temporal-knowledge-graph-the-eval-said-no/A temporal knowledge graph passed every static RAG test and still failed. The gap was temporal reasoning, and one eval caught it before prod did.Fri, 24 Jul 2026 00:00:00 GMThttps://guatulabs.dev/posts/i-benchmarked-my-homelab-memory-stack-hybrid-search-local-reranker-took-locomo-from-63-to-80/https://guatulabs.dev/posts/i-benchmarked-my-homelab-memory-stack-hybrid-search-local-reranker-took-locomo-from-63-to-80/How adding BM25 hybrid search and a local BGE reranker to a vector-only agent memory stack moved LoCoMo accuracy from 63% to 80%, and what it cost in latency.Wed, 22 Jul 2026 00:00:00 GMThttps://guatulabs.dev/posts/the-write-policy-is-the-hard-part-promotion-pipelines-for-agent-memory/https://guatulabs.dev/posts/the-write-policy-is-the-hard-part-promotion-pipelines-for-agent-memory/Storing agent memory is easy. Deciding what earns a permanent write, and keeping the write-path alive through RBAC and network policy, is the real work.Mon, 20 Jul 2026 00:00:00 GMThttps://guatulabs.dev/posts/moving-scheduled-llm-curation-from-cloud-apis-to-local-models/https://guatulabs.dev/posts/moving-scheduled-llm-curation-from-cloud-apis-to-local-models/A comparison of cloud APIs vs local models for scheduled agent memory curation, and the headless-cron gotchas nobody warns you about.Fri, 17 Jul 2026 00:00:00 GMThttps://guatulabs.dev/posts/silent-drift-why-re-embedding-only-on-count-changes-rots-your-semantic-index/https://guatulabs.dev/posts/silent-drift-why-re-embedding-only-on-count-changes-rots-your-semantic-index/Count-based re-embedding leaves stale vectors pointing at edited text. Here's how semantic drift creeps in and how hash-based validation stops it.Wed, 15 Jul 2026 00:00:00 GMThttps://guatulabs.dev/posts/your-vector-db-snapshots-are-landing-on-the-same-disk-that-will-fail/https://guatulabs.dev/posts/your-vector-db-snapshots-are-landing-on-the-same-disk-that-will-fail/Qdrant snapshots default to the same volume as your data. One disk failure takes both, and even a surviving snapshot can fail restore with a 400 error.Fri, 03 Jul 2026 00:00:00 GMThttps://guatulabs.dev/posts/eviction-without-deletion-running-an-act-r-decay-policy-for-agent-memory-in-production/https://guatulabs.dev/posts/eviction-without-deletion-running-an-act-r-decay-policy-for-agent-memory-in-production/Stop deleting agent memories to fight vector-store noise. An ACT-R decay policy lowers activation instead, so cold context can re-activate later.Wed, 01 Jul 2026 00:00:00 GMThttps://guatulabs.dev/posts/prometheus-alerting-rules-that-don-t-cry-wolf/https://guatulabs.dev/posts/prometheus-alerting-rules-that-don-t-cry-wolf/How to write Prometheus alerts that carry context, tolerate transient scrape blips, and page only when something is actually broken.Mon, 29 Jun 2026 00:00:00 GMThttps://guatulabs.dev/posts/sealedsecrets-storing-secrets-in-git-without-the-risk/https://guatulabs.dev/posts/sealedsecrets-storing-secrets-in-git-without-the-risk/How SealedSecrets lets you commit encrypted secrets to Git safely, why the real risk is losing the controller's private key, and how to back it up.Sat, 27 Jun 2026 00:00:00 GMThttps://guatulabs.dev/posts/metallb-on-bare-metal-loadbalancer-without-a-cloud-provider/https://guatulabs.dev/posts/metallb-on-bare-metal-loadbalancer-without-a-cloud-provider/Your bare-metal LoadBalancer Service is stuck Pending. Here's how MetalLB hands out real LAN IPs, why L2 mode works, and the traps that cost me hours.Fri, 26 Jun 2026 00:00:00 GMThttps://guatulabs.dev/posts/opentofu-state-in-minio-s3-compatible-backend-for-iac/https://guatulabs.dev/posts/opentofu-state-in-minio-s3-compatible-backend-for-iac/Store OpenTofu state in self-hosted MinIO: S3 backend config, native locking, least-privilege policies, and guards against a CI apply that destroys infra.Fri, 19 Jun 2026 00:00:00 GMThttps://guatulabs.dev/posts/langfuse-for-llm-observability-tracing-agent-calls/https://guatulabs.dev/posts/langfuse-for-llm-observability-tracing-agent-calls/Using Langfuse to trace multi-step agent workflows, replace custom eval logic, and consolidate LLM observability into one tool that actually scales.Fri, 19 Jun 2026 00:00:00 GMThttps://guatulabs.dev/posts/cloudnativepg-running-postgresql-in-kubernetes-without-the-pain/https://guatulabs.dev/posts/cloudnativepg-running-postgresql-in-kubernetes-without-the-pain/Running PostgreSQL on Kubernetes with CloudNativePG: the Kyverno policy traps, SSL gotchas, read/write splitting, and the 16.4 segfault to avoid.Mon, 15 Jun 2026 00:00:00 GMThttps://guatulabs.dev/posts/proxmox-backup-server-incremental-backups-for-your-whole-cluster/https://guatulabs.dev/posts/proxmox-backup-server-incremental-backups-for-your-whole-cluster/Setting up Proxmox Backup Server for incremental, deduplicated backups across a multi-node cluster, including the token auth and locking gotchas.Mon, 15 Jun 2026 00:00:00 GMThttps://guatulabs.dev/posts/network-policies-with-calico-default-deny-and-namespace-isolation/https://guatulabs.dev/posts/network-policies-with-calico-default-deny-and-namespace-isolation/Rolling out default-deny NetworkPolicies and namespace isolation with Calico without breaking DNS, ingress, or admission webhooks.Thu, 11 Jun 2026 00:00:00 GMThttps://guatulabs.dev/posts/agent-glass-break-patterns-controlled-escalation-for-production/https://guatulabs.dev/posts/agent-glass-break-patterns-controlled-escalation-for-production/How to implement controlled escalation for AI agents using safeBins and network-level constraints to prevent production catastrophes.Wed, 10 Jun 2026 00:00:00 GMThttps://guatulabs.dev/posts/velero-minio-kubernetes-backup-strategy-for-bare-metal/https://guatulabs.dev/posts/velero-minio-kubernetes-backup-strategy-for-bare-metal/Moving beyond cloud S3 to a bare-metal backup strategy using Velero, MinIO, and Longhorn. Lessons on CSI snapshots and ETCD persistence.Wed, 10 Jun 2026 00:00:00 GMThttps://guatulabs.dev/posts/when-agents-should-stop-designing-safety-boundaries-that-work/https://guatulabs.dev/posts/when-agents-should-stop-designing-safety-boundaries-that-work/Stop conditions are a feature, not a failure state. Budget caps, progress checks, and exit contracts that make autonomous agents quit cleanly.Wed, 10 Jun 2026 00:00:00 GMThttps://guatulabs.dev/posts/edge-computing-for-iiot-when-to-process-at-the-source/https://guatulabs.dev/posts/edge-computing-for-iiot-when-to-process-at-the-source/Stop sending raw sensor data to the cloud. A deep dive into edge processing, local LLM routing, and the privacy hard-wall for IIoT.Fri, 05 Jun 2026 00:00:00 GMThttps://guatulabs.dev/posts/grafana-dashboards-information-density-vs-readability/https://guatulabs.dev/posts/grafana-dashboards-information-density-vs-readability/Stop cramming every metric into one screen. A practical look at balancing information density and performance in Grafana dashboards.Wed, 03 Jun 2026 00:00:00 GMThttps://guatulabs.dev/posts/kubernetes-rbac-building-least-privilege-service-accounts/https://guatulabs.dev/posts/kubernetes-rbac-building-least-privilege-service-accounts/Moving beyond cluster-admin for everything. A practical approach to scoping ServiceAccount permissions for production workloads and AI agents.Mon, 01 Jun 2026 00:00:00 GMThttps://guatulabs.dev/posts/building-agent-skills-a-pattern-for-discoverable-capabilities/https://guatulabs.dev/posts/building-agent-skills-a-pattern-for-discoverable-capabilities/Moving beyond basic tool-calling to a composable skill pattern that makes agent capabilities discoverable and reusable across different frameworks.Fri, 29 May 2026 00:00:00 GMThttps://guatulabs.dev/posts/tesla-p40-in-a-homelab-24gb-of-inference-on-a-budget/https://guatulabs.dev/posts/tesla-p40-in-a-homelab-24gb-of-inference-on-a-budget/Running a Tesla P40 for LLM inference. Why I ditched GPU passthrough for host-level drivers to stop the constant Proxmox crashes.Mon, 25 May 2026 00:00:00 GMThttps://guatulabs.dev/posts/condition-based-vs-time-based-maintenance-making-the-switch/https://guatulabs.dev/posts/condition-based-vs-time-based-maintenance-making-the-switch/Stop replacing parts that aren't broken. A deep dive into moving from calendar-based schedules to real-time condition-based maintenance in IIoT.Fri, 22 May 2026 00:00:00 GMThttps://guatulabs.dev/posts/longhorn-volume-health-monitoring-replication-and-capacity/https://guatulabs.dev/posts/longhorn-volume-health-monitoring-replication-and-capacity/Stop trusting the Longhorn UI blindly. Learn to monitor replication, fix stale mounts, and manage snapshot bloat in production K8s storage.Wed, 20 May 2026 00:00:00 GMThttps://guatulabs.dev/posts/proxmox-cluster-quorum-how-many-nodes-do-you-actually-need/https://guatulabs.dev/posts/proxmox-cluster-quorum-how-many-nodes-do-you-actually-need/Stop guessing about Proxmox quorum. A deep dive into 2-node vs 3-node setups, QDevice, and why your cluster suddenly goes read-only.Mon, 18 May 2026 00:00:00 GMThttps://guatulabs.dev/posts/privacy-routed-llm-inference-local-models-for-sensitive-data/https://guatulabs.dev/posts/privacy-routed-llm-inference-local-models-for-sensitive-data/How to build a routing layer for AI agents that ensures sensitive data stays on local hardware while leveraging cloud LLMs for non-private tasks.Fri, 15 May 2026 00:00:00 GMThttps://guatulabs.dev/posts/kyverno-admission-controllers-policy-as-code-that-actually-works/https://guatulabs.dev/posts/kyverno-admission-controllers-policy-as-code-that-actually-works/Moving beyond the happy path of Kubernetes policy enforcement. Real-world Kyverno pitfalls, mutation loops, and the gap between docs and production.Wed, 13 May 2026 00:00:00 GMThttps://guatulabs.dev/posts/tailscale-subnet-router-remote-access-without-traditional-vpn/https://guatulabs.dev/posts/tailscale-subnet-router-remote-access-without-traditional-vpn/Stop installing Tailscale on every single device. Use a subnet router to expose your home network and IoT gear without traditional VPN complexity.Wed, 13 May 2026 00:00:00 GMThttps://guatulabs.dev/posts/pcie-device-passthrough-nic-name-instability-and-mac-pinning/https://guatulabs.dev/posts/pcie-device-passthrough-nic-name-instability-and-mac-pinning/Stop your network configs from breaking after a reboot. How to fix unpredictable NIC naming in Proxmox PCIe passthrough.Mon, 11 May 2026 00:00:00 GMThttps://guatulabs.dev/posts/vibration-monitoring-architecture-from-sensor-to-dashboard/https://guatulabs.dev/posts/vibration-monitoring-architecture-from-sensor-to-dashboard/Building a production-ready vibration monitoring pipeline. Lessons on sampling rates, MQTT bottlenecks, and avoiding dashboard lag.Fri, 08 May 2026 00:00:00 GMThttps://guatulabs.dev/posts/gpu-pci-address-instability-when-your-card-moves-between-reboots/https://guatulabs.dev/posts/gpu-pci-address-instability-when-your-card-moves-between-reboots/Dealing with shifting PCI addresses in Proxmox and how to stop your GPU from disappearing or changing IDs after a reboot.Tue, 05 May 2026 00:00:00 GMThttps://guatulabs.dev/posts/cognitive-memory-for-agents-vector-search-vs-activation-based-recall/https://guatulabs.dev/posts/cognitive-memory-for-agents-vector-search-vs-activation-based-recall/Comparing vector databases and activation-based memory for AI agents. Trade-offs in latency, scale, and interpretability.Sun, 03 May 2026 00:00:00 GMThttps://guatulabs.dev/posts/adguard-home-network-wide-dns-filtering-with-failover/https://guatulabs.dev/posts/adguard-home-network-wide-dns-filtering-with-failover/Setting up AdGuard Home for network-wide DNS filtering with a robust failover strategy to prevent total internet outages.Sat, 02 May 2026 00:00:00 GMThttps://guatulabs.dev/posts/unprivileged-lxc-docker-the-runc-sysctl-permission-trap/https://guatulabs.dev/posts/unprivileged-lxc-docker-the-runc-sysctl-permission-trap/Fixing the silent failure of sysctl settings when running Docker inside unprivileged Proxmox LXC containers.Fri, 01 May 2026 00:00:00 GMThttps://guatulabs.dev/posts/three-layer-safety-autonomous-agents/https://guatulabs.dev/posts/three-layer-safety-autonomous-agents/Moving beyond prompt engineering to implement token-level schema enforcement, pre-execution gates, and shell-safe execution pipelines for AI agents.Tue, 28 Apr 2026 00:00:00 GMThttps://guatulabs.dev/posts/kubernetes-manifest-validation-catching-errors-before-merge/https://guatulabs.dev/posts/kubernetes-manifest-validation-catching-errors-before-merge/Don't let invalid manifests break your GitOps pipeline. Learn how to use kubeconform and Kyverno exclusions to catch errors before they hit production.Sat, 25 Apr 2026 00:00:00 GMThttps://guatulabs.dev/posts/gpu-d3cold-power-states-how-to-brick-your-card-without-trying/https://guatulabs.dev/posts/gpu-d3cold-power-states-how-to-brick-your-card-without-trying/Bricking GPUs with D3cold: Real-world gotchas and fixes for Proxmox usersFri, 24 Apr 2026 00:00:00 GMThttps://guatulabs.dev/posts/cert-manager-cloudflare-dns-01-automated-tls-for-everything/https://guatulabs.dev/posts/cert-manager-cloudflare-dns-01-automated-tls-for-everything/Automating TLS with cert-manager and Cloudflare DNS-01 in KubernetesThu, 23 Apr 2026 00:00:00 GMThttps://guatulabs.dev/posts/sealedsecrets-key-backup-don-t-lose-your-encryption-keys/https://guatulabs.dev/posts/sealedsecrets-key-backup-don-t-lose-your-encryption-keys/How to back up and recover SealedSecrets encryption keys in KubernetesWed, 22 Apr 2026 00:00:00 GMThttps://guatulabs.dev/posts/ollama-on-kubernetes-recreate-strategy-and-single-gpu-deadlock/https://guatulabs.dev/posts/ollama-on-kubernetes-recreate-strategy-and-single-gpu-deadlock/Deploying Ollama on Kubernetes can lead to GPU deadlocks. Here's how to avoid them.Tue, 21 Apr 2026 00:00:00 GMThttps://guatulabs.dev/posts/mqtt-broker-selection-hivemq-vs-mosquitto-for-industrial-use/https://guatulabs.dev/posts/mqtt-broker-selection-hivemq-vs-mosquitto-for-industrial-use/Comparing HiveMQ and Mosquitto for industrial IoT: scalability, security, and reliabilityMon, 20 Apr 2026 00:00:00 GMThttps://guatulabs.dev/posts/wildcard-dns-ndots-5-the-tls-nightmare-and-how-to-fix-it/https://guatulabs.dev/posts/wildcard-dns-ndots-5-the-tls-nightmare-and-how-to-fix-it/Kubernetes default DNS settings can cause TLS certificate mismatches when using wildcard DNS. Here is how to debug and fix it.Mon, 20 Apr 2026 00:00:00 GMThttps://guatulabs.dev/posts/self-improving-ai-infrastructure-how-your-homelab-wiki-updates-itself/https://guatulabs.dev/posts/self-improving-ai-infrastructure-how-your-homelab-wiki-updates-itself/How to automate your homelab wiki with self-improving AI infrastructureSat, 18 Apr 2026 00:00:00 GMThttps://guatulabs.dev/posts/six-layer-memory-architecture-for-claude-code/https://guatulabs.dev/posts/six-layer-memory-architecture-for-claude-code/Open-sourcing the memory system behind my Claude Code setup: CLAUDE.md, path-scoped rules, wiki, vector search, cognitive memory. With the mistakes.Thu, 16 Apr 2026 00:00:00 GMThttps://guatulabs.dev/posts/building-karpathy-s-llm-wiki-a-production-homelab-implementation/https://guatulabs.dev/posts/building-karpathy-s-llm-wiki-a-production-homelab-implementation/Implementing Karpathy's LLM Wiki in a homelab with real-world lessons and gotchasMon, 13 Apr 2026 00:00:00 GMThttps://guatulabs.dev/posts/proxmox-api-tokens-bash-history-expansion-and-the-character/https://guatulabs.dev/posts/proxmox-api-tokens-bash-history-expansion-and-the-character/Bash history expansion breaks Proxmox API tokens — here's how to fix itSat, 11 Apr 2026 00:00:00 GMThttps://guatulabs.dev/posts/amd-igpu-stealing-your-ram-uma-frame-buffer-on-headless-servers/https://guatulabs.dev/posts/amd-igpu-stealing-your-ram-uma-frame-buffer-on-headless-servers/AMD iGPU steals RAM on headless servers, here's how to fix itFri, 10 Apr 2026 00:00:00 GMThttps://guatulabs.dev/posts/agent-credential-management-two-tier-service-accounts/https://guatulabs.dev/posts/agent-credential-management-two-tier-service-accounts/Managing agent credentials with two-tier service accounts: a secure approach for AI agent orchestrationFri, 10 Apr 2026 00:00:00 GMThttps://guatulabs.dev/posts/automating-infrastructure-with-opentofu-and-github-actions/https://guatulabs.dev/posts/automating-infrastructure-with-opentofu-and-github-actions/Stop manual applies. Learn how to build a production-ready CI/CD pipeline for your infrastructure using OpenTofu and GitHub Actions.Wed, 08 Apr 2026 00:00:00 GMThttps://guatulabs.dev/posts/equipment-health-scoring-one-number-your-operators-actually-check/https://guatulabs.dev/posts/equipment-health-scoring-one-number-your-operators-actually-check/Turn raw sensor data into a single, actionable health score operators actually useTue, 07 Apr 2026 00:00:00 GMThttps://guatulabs.dev/posts/pod-disruption-budgets-why-kubectl-drain-gets-stuck-on-longhorn/https://guatulabs.dev/posts/pod-disruption-budgets-why-kubectl-drain-gets-stuck-on-longhorn/Pod Disruption Budgets can block kubectl drain on Longhorn. Here's how to avoid it.Mon, 06 Apr 2026 00:00:00 GMThttps://guatulabs.dev/posts/attention-residuals-how-kimi-is-rethinking-transformer-depth/https://guatulabs.dev/posts/attention-residuals-how-kimi-is-rethinking-transformer-depth/Kimi's Attention Residuals replace fixed residual connections with learned layer aggregation. What it means for LLM depth.Sun, 05 Apr 2026 00:00:00 GMThttps://guatulabs.dev/posts/helm-fullnameoverride-naming-sanity-in-argocd/https://guatulabs.dev/posts/helm-fullnameoverride-naming-sanity-in-argocd/Avoid naming chaos in ArgoCD by using Helm fullnameOverride effectivelyWed, 01 Apr 2026 00:00:00 GMThttps://guatulabs.dev/posts/nvidia-container-toolkit-why-the-default-runtime-matters/https://guatulabs.dev/posts/nvidia-container-toolkit-why-the-default-runtime-matters/Fixing default runtime misconfigurations in NVIDIA Container Toolkit for GPU workloadsTue, 31 Mar 2026 00:00:00 GMThttps://guatulabs.dev/posts/docp-xmp-why-your-proxmox-node-runs-at-half-ram-speed/https://guatulabs.dev/posts/docp-xmp-why-your-proxmox-node-runs-at-half-ram-speed/DOCP/XMP enabled but Proxmox still runs at half RAM speed? Check your kernel and BIOS.Sat, 28 Mar 2026 00:00:00 GMThttps://guatulabs.dev/posts/amd-ryzen-c-state-freezes-the-processor-max-cstate-1-fix/https://guatulabs.dev/posts/amd-ryzen-c-state-freezes-the-processor-max-cstate-1-fix/Ryzen freezes in Proxmox? Learn how to disable deep C-states and stop random system lockups.Fri, 27 Mar 2026 00:00:00 GMThttps://guatulabs.dev/posts/kubernetes-storage-on-bare-metal-longhorn-in-practice/https://guatulabs.dev/posts/kubernetes-storage-on-bare-metal-longhorn-in-practice/How I configured Longhorn storage for a Kubernetes cluster on bare metal — what worked, what didn't, and what I'd do differently next time.Fri, 27 Mar 2026 00:00:00 GMThttps://guatulabs.dev/posts/gpu-passthrough-on-proxmox-gotcha-guide/https://guatulabs.dev/posts/gpu-passthrough-on-proxmox-gotcha-guide/The documentation won't warn you about D3cold bricking, PCIe bus renumbering, or why the NVIDIA device plugin silently fails. This is that guide.Thu, 26 Mar 2026 00:00:00 GMThttps://guatulabs.dev/posts/building-mcp-servers-with-fastmcp/https://guatulabs.dev/posts/building-mcp-servers-with-fastmcp/FastMCP makes building Model Context Protocol servers feel like FastAPI. Here's how to go from zero to a working MCP server in under an hour.Sun, 22 Mar 2026 00:00:00 GMThttps://guatulabs.dev/posts/gitops-for-homelabs-argocd-app-of-apps/https://guatulabs.dev/posts/gitops-for-homelabs-argocd-app-of-apps/How the ArgoCD app-of-apps pattern brings real GitOps discipline to homelab Kubernetes — repo structure, examples, and what I'd do differently.Sun, 22 Mar 2026 00:00:00 GMThttps://guatulabs.dev/posts/multi-agent-ai-systems-architecture-patterns/https://guatulabs.dev/posts/multi-agent-ai-systems-architecture-patterns/A practical guide to designing multi-agent AI systems — orchestrator patterns, trust boundaries, and the tradeoffs I learned running agents in production.Sun, 22 Mar 2026 00:00:00 GMThttps://guatulabs.dev/posts/building-production-homelab/https://guatulabs.dev/posts/building-production-homelab/How I built a multi-node Proxmox cluster running Kubernetes with GPU passthrough, GitOps, and dozens of services — and what broke along the way.Sat, 21 Mar 2026 00:00:00 GMT