diff --git a/.gitignore b/.gitignore
index ff64e02..d70ebaa 100755
--- a/.gitignore
+++ b/.gitignore
@@ -1,4 +1 @@
-public
-resources/_gen
-.hugo_build.lock
-themes
+public
\ No newline at end of file
diff --git a/aws-metric-filters.org b/aws-metric-filters.org
index 737ef7e..b6f98c2 100644
--- a/aws-metric-filters.org
+++ b/aws-metric-filters.org
@@ -1,6 +1,5 @@
:PROPERTIES:
#+SETUPFILE: setup.org
-#+export_file_name: aws-cloudwatch-metric-filters
#+subtitle:
:END:
** Structed and passively collected metrics via AWS CloudWatch
diff --git a/https-at-home.html b/https-at-home.html
deleted file mode 100644
index ca135a7..0000000
--- a/https-at-home.html
+++ /dev/null
@@ -1,243 +0,0 @@
-
-
-
-
-
-
-
Just let people be wrong
-
-
-
-
-
-Warning: This, like most things, will involve a fair bit of projection.
-
-
-
-I have some thoughts about collaboration.
-
-
-
-While a lot of this is obvious and well accepted, I think there are some fine points worth elaborating on.
-
-
-
-The obvious part is that people work better together when they believe they are trusted. Trust breeds initiative and independence. Distrust breeds resentment and inaction.
-
-
-
-Consider the flip side of trust, for a moment.
-
-
-
-A common way that people show distrust when collaborating is either micromanaging or just coming in behind someone and redoing their work.
-
-
-
-If that demonstrates distrust then
-
-
-
-It's not enough that you simply do trust someone else to get the benefits, you need to show it. I think this is the part that many people skip or ignore.
-
-
-
-This is, of course, true in general.
-
-
-
-
diff --git a/https-at-home.org b/https-at-home.org
new file mode 100644
index 0000000..bc82bdc
--- /dev/null
+++ b/https-at-home.org
@@ -0,0 +1,51 @@
+:PROPERTIES:
+#+SETUPFILE: setup.org
+#+keywords: homelab
+#+subtitle:
+:END:
+
+** HTTPS @ Home
+I run a lot of services at home.
+
+This includes, but isn't limited to
+
+- [[https://archivebox.io/][ArchiveBox]]
+- [[https://github.com/dani-garcia/vaultwarden][VaultWarden]]
+- [[https://github.com/navidrome/navidrome][Navidrome]]
+- [[https://plex.tv][Plex]]
+- [[https://github.com/LibrePhotos/librephotos][LibrePhotos]]
+- This blog
+
+and a lot more.
+
+Pretty much anything that's served up over HTTP is always nice if not
+necessary to have behind TLS.
+
+[[https://letsencrypt.org/][LetsEncrypt]] long ago brought free certs to
+the masses and there are a lot of tools for automating that nowadays.
+
+My preferred approach for getting all the unnecessary nonsense I
+self-host at home behind TLS is [[https://caddyserver.com][Caddy]].
+
+I have a super straight forward setup, generally:
+
+- Run Caddy in a docker container
+- Create a wildcard CNAME record in my DNS pointing at my home's
+ (effectively) static IP
+- Add an entry in my Caddyfile for each services I'm running at home on
+ its own subdomain
+- If it's a service then I add it with a =reverse_proxy= block
+- If it's a static site (like this) then there's a block for
+- If it's something I want only accessible on my home network then I put
+ a block like
+
+#+BEGIN_EXAMPLE
+ @local_network {
+ path *
+ remote_ip
+ }
+#+END_EXAMPLE
+
+in the directive. And voila.
+
+Then tell Caddy to reload the config and I'm done.
diff --git a/index.html b/index.html
deleted file mode 100644
index a75a3dc..0000000
--- a/index.html
+++ /dev/null
@@ -1,212 +0,0 @@
-
-
-
-
-
-