Marián Hollý on polyglot developer [mh]

Playing With This Site

Fri, 27 Mar 2026 00:00:00 +0000

This site has more going on than a blog has any right to. Easter eggs, fake ops dashboards, CTF flags, honeypots, and a Konami code. Here’s everything you can poke at.

How This Blog Is Built

Tue, 24 Mar 2026 00:00:00 +0000

Hugo, self-hosted fonts, a strict CSP, and GitHub Actions. No Node in the build pipeline. No analytics. No external dependencies.

This Blog

Tue, 24 Mar 2026 00:00:00 +0000

Built from scratch with Hugo, no imported theme. Self-hosted Inter and JetBrains Mono, Gruvbox palette, strict CSP, deployed via GitHub Actions.

Elevated Build Latency

Sun, 15 Mar 2026 00:00:00 +0000

Summary

Build time increased from 12 seconds to 47 seconds after adding SCSS compilation for three new component files. The deployment pipeline completed successfully but exceeded the informal 30-second threshold.

Impact

Zero users were affected. The site was never unavailable. The only observable effect was that the GitHub Actions job took longer to complete, which delayed the green checkmark on the commit by approximately 35 seconds.

Timeline

14:22 UTC — Commit pushed adding _components.scss partials for status page, encrypted content, and redacted text shortcode
14:23 UTC — Build started. Hugo compilation took 47 seconds (previous baseline: 12 seconds)
14:24 UTC — Build completed successfully. No errors
14:31 UTC — Author noticed the longer build time while checking the Actions tab
14:32 UTC — Root cause identified

Root Cause

Hugo’s SCSS pipeline recompiled all partials when new @import statements were added to main.scss. The extended build time was caused by Dart Sass processing three new files with nested selectors and media queries. This is normal behavior, not a bug.

CSS Failed to Load on Production

Tue, 10 Mar 2026 00:00:00 +0000

Summary

The production site served unstyled HTML for approximately 3 minutes after a deploy that changed the SCSS fingerprint hash. Browsers with cached CSS received a 404 for the old filename, and the new file was not yet available on the CDN edge.

Impact

Any visitor who loaded the site during the 3-minute window saw unstyled content. The HTML was fully functional — all links, navigation, and content worked correctly. The site looked like it was from 1996. Given the blog’s traffic volume, the number of affected users is estimated at zero, but cannot be proven.

CCNA Notes: Subnetting Without a Calculator

Sun, 01 Mar 2026 00:00:00 +0000

The method that finally made subnetting click — working through it by hand until it becomes automatic.

Proxmox VLAN Setup for a Homelab

Sat, 28 Feb 2026 00:00:00 +0000

How I segmented my homelab traffic into VLANs using Proxmox’s Linux bridge — management, services, IoT, and guest networks on a single NIC.

Typo in Published Post Title

Sat, 28 Feb 2026 00:00:00 +0000

Summary

A blog post was published with the title “Setting Up My First Homelba” instead of “Setting Up My First Homelab”. The typo was live for 1 hour and 12 minutes before being corrected.

Impact

The post content was correct. Navigation, links, and SEO metadata all reflected the typo. The Open Graph title shared on social media would have displayed “Homelba” to anyone who shared the URL during the window. No shares were recorded during this period.

React Server Components: What Actually Changed

Sat, 14 Feb 2026 00:00:00 +0000

RSC is not just a performance optimization. It changes how you think about the boundary between server and client in a React app.

Django vs FastAPI for Side Projects

Tue, 20 Jan 2026 00:00:00 +0000

After building side projects in both frameworks, here’s when I reach for Django and when FastAPI is the better tool.

Setting Up My First Homelab

Sat, 10 Jan 2026 00:00:00 +0000

How I turned three old workstations into a Proxmox cluster — hardware choices, network setup, and the mistakes I made so you don’t have to.

Learning Go as a Python Developer

Mon, 05 Jan 2026 00:00:00 +0000

Notes from my first month writing Go after years of Python. What felt familiar, what didn’t, and the things I wish someone had told me earlier.

Dog Shelter Website

Mon, 22 Dec 2025 00:00:00 +0000

Website for Trenčianský útulok, a dog shelter in Trenčín, Slovakia. Filterable dog profiles, Decap CMS for non-technical staff, Cloudinary for image hosting. Real client project.

Letterboxd Stats

Mon, 10 Nov 2025 00:00:00 +0000

Detailed viewing statistics from a Letterboxd export — genre breakdowns, directors, decades, ratings distribution. Built as a data exploration tool.

$ runner

Mon, 01 Jan 0001 00:00:00 +0000

Infrastructure

Mon, 01 Jan 0001 00:00:00 +0000

 ┌─────────────────────────────────────────────────────────┐
 │ GitHub Actions │
 │ │
 │ ┌─────────┐ ┌─────────┐ ┌────────┐ ┌────────┐ │
 │ │ Lint │──▶│ Build │──▶│ Test │──▶│ Deploy │ │
 │ │ │ │ │ │ │ │ │ │
 │ │validate │ │metadata │ │security│ │artifact│ │
 │ │ front- │ │ inject │ │ scan │ │ upload │ │
 │ │ matter │ │ Hugo │ │ link │ │ OIDC │ │
 │ │template │ │ compile │ │ check │ │ auth │ │
 │ │ metrics │ │ minify │ │ │ │ │ │
 │ └─────────┘ └─────────┘ └────────┘ └────┬───┘ │
 │ │ │
 └─────────────────────────────────────────────────┼──────┘
 │
 ┌──────────────┐ ┌──────────────┐ │
 │ Developer │ │ GitHub │ ▼
 │ Laptop │──────▶│ Repository │ ┌──────────────────────────┐
 │ │ git │ │ │ GitHub Pages CDN │
 │ Hugo 0.152 │ push │ main │ │ │
 │ Docker │ │ │ │ Static HTML/CSS/JS │
 │ Make │ │ │ │ Fingerprinted assets │
 │ .githooks │ │ │ │ SRI integrity hashes │
 └──────────────┘ └──────┬───────┘ └────────────┬─────────────┘
 │ │
 │ │ HTTPS
 ┌──────┴───────┐ │
 │ Dependabot │ ▼
 │ │ ┌──────────────────────────┐
 │ weekly │ │ End User │
 │ action │ │ │
 │ version │ │ Browser │
 │ updates │ │ CSP enforced │
 └──────────────┘ │ SRI verified │
 └──────────────────────────┘

Legend:

Runbook

Mon, 01 Jan 0001 00:00:00 +0000

Prerequisites

Git
A web browser
Hugo 0.152.2 extended (or Docker)
The ability to cope with the responsibility of a zero-user system

Deploy

Push to main.
Wait 45 seconds.
There is no step 3.

The pipeline runs automatically. Lint, build, test, deploy — in that order. If any stage fails, the deploy does not happen. Check the Actions tab for status.

Rollback

Run git revert HEAD.
Push to main.
Wait 45 seconds.

There is no “rollback button.” The site is always built from the latest commit on main. To undo a deploy, undo the commit.

Security

Mon, 01 Jan 0001 00:00:00 +0000

Preservation and Integrity

A work of this nature — built to endure, maintained with deliberate care — depends on structural soundness as much as content. Security is not an afterthought appended to the margins; it is woven into the material from the first line of code. CSP enforced. SRI on every asset. No external scripts. No databases. No moving parts that do not need to move.

Even so, no structure is beyond scrutiny. If you have found an imperfection — a crack in the surface, a structural risk invisible from the outside — this is the appropriate place to bring it.