Small fixes for systems that should just work.

Field notes on Linux servers, networking, TLS and the occasional late-night debugging session.

Recent notes

Ordering systemd units so a reverse proxy never starts first

A short checklist for After=, Wants= and why a 20-second gap after reboot is worth closing.

Moving acme.sh from standalone to webroot without downtime

Port 80 is already taken by nginx — here is how to keep renewals working.

Reading nginx stream logs when nothing is in them

ssl_preread, PROXY protocol and where the client address actually ends up.

BBR, fq and the sysctl file that silently loses

Load order in /etc/sysctl.d matters more than the values inside it.

About

Prival is a personal notebook. Everything here was tested on real machines first; nothing is sponsored.