Tangible Bytes

I recently started using Claude Code but I found the permission prompts both hard work and unreliable.

Trying to work out what I was agreeing to was hard work - and all too often the agent managed to do things I hadn’t wanted.

So I turned the inbuilt soft limits off (--dangerously-skip-permissions) and put Claude in a container I call a devbox. Inside the devbox Claude can do whatever it likes. The container decides what can actually be written, where it can connect to, and which credentials it holds, and Claude can’t change any of that from inside.

I just has the most painful time configuring domain based routing in Laravel to work on dev/stage/prod according to env vars.

Everything worked fine in dev - only for me to stuck getting 404s when I deployed to kubernetes.

I ran into the issue of how to manage environment variables with a NextJS app a while ago and made some notes

After living with this for a while and settling on using sops for secrets encryption what I have found works best for me is

My Laravel project is in part a headless CMS - this means it has and API that gets called by a frontend system - with around 10 API requests per page view.

We can cache some of that - but sometimes caches are empty and the site still has to be responsive.

The meant I needed to optimise my Laravel site and after a few experiments I found that using [Laravel Octane]](https://laravel.com/docs/12.x/octane) with FrankenPHP gave me the performance boost I needed without needing any significant code change.

I’m a long time Linux user, and a big fan of Docker, Kubernetes, VMs, and containers.

While I love developing on Linux - I do sometimes find it frustrating that I don’t have the same level of access to the Microsoft suite on Linux.

A while ago I had to use a Windows laptop for a few days and tried out using WSL - so most of the time I’m in Linux - I didn’t entirely hate it so when it was time for an upgrade I decided to try the Windows route this time.

I’ve had my new machine for a little over a week now.

I’ve had a few problems with docker and firewalls and seem to get a “good enough” solution only to run into trouble again later having forgotten what I’ve done so far.

This is an attempt to make some notes and at least capture where I am up to.

TLDR

• Disable dockers Iptables
• Add some firewalld rules
• Watch out if the Docker interface changes

https://dev.to/soerenmetje/how-to-secure-a-docker-host-using-firewalld-2joo