Breaking Radio Silence
While I was chopping down maples and opening the dacha season, the project kept moving. Yesterday I finished building the Architecture 2.0 infrastructure and ran a full end-to-end test. First traffic is flowing.
Sigil Gate Project Blog
Building a network that’s hard to detect, and writing a blog that’s easy to find.
2026
New Tenants
Two empty clusters waited in the cold for their first tenants: data moved into etcd, and k3s welcomed its first service — a database API built on FastAPI.
Data Schemas
The etcd cluster is up and waiting for data. Here’s why copying everything over as-is didn’t work out — and how the migration turned into a full rethink of the data schemas.
The Management Cluster
First component: the management cluster on Kubernetes.
New Network
The concept behind Architecture 2.0.
From a Clean Slate
Architecture 2.0 is taking shape — time to build. First component: a Kubernetes management cluster. But before any logic or services, there’s one question that comes first: security.
Architecture 2.0
Breaking down what was wrong with the old architecture and how I redesigned it: from a tree to two independent clusters, zero trust, one domain per cluster, and Docker-based onboarding.
Cryptominer Attack
How I got hacked, had my CI/CD taken down, and had tokens vacuumed across the entire core cluster — in fifteen minutes.
A Small Security Fix
Someone hinted that storing Telegram IDs in plaintext is not a great idea. I fixed it. Here’s how — and why it turned out trickier than expected.
Terms of Entry
The project is still closed — but I’ve started bringing in new participants. Here’s how the collaboration works and where it’s all heading.