René Welches

TECH NOTES TO MYSELF

Running Your Own Root CA for the Homelab

What started as a GitHub README turned into a proper blog post

How to create a self-signed Root CA for your homelab, sign server certificates, and trust them on macOS and Linux — including the git gotcha that the macOS Keychain won't tell you about.

Posted by Rene Welches on Wednesday, February 18, 2026
Last Modified on Thursday, February 19, 2026

Fixing Twingate DNS Resolution with AdGuard Home

Moving connectors to separate hosts fixed my DNS resolution issues

How to fix Twingate DNS resolution issues when using the Home Assistant connector with AdGuard Home by moving connectors to separate Proxmox hosts.

Posted by Rene Welches on Thursday, January 29, 2026

Securing Proxmox API Tokens with Apple Keychain Access for Terraform

Store and retrieve Proxmox credentials securely using macOS Keychain instead of plain text files

Securely manage Proxmox API tokens for Terraform using macOS Keychain Access. Eliminates plain text credential files and integrates seamlessly with automated Terraform workflows.

Posted by Rene Welches on Tuesday, December 9, 2025
Last Modified on Wednesday, February 4, 2026

Secure Home Network Access with Twingate

Alternative setup to Pi-Hole and Pi-VPN with Twingate, Home Assistant and AdGuard Home

Modern zero-trust VPN setup using Twingate for secure home network access, with AdGuard Home for local DNS resolution. No port forwarding or DDNS required - a simpler alternative to Pi-Hole and PiVPN.

Posted by Rene Welches on Thursday, November 13, 2025
Last Modified on Thursday, January 29, 2026