One small part per post: a probe, a daily job, a trick, a trap that cost an afternoon.
A font loaded from Google at page load sends the visitor's IP address to Google before anyone has consented to anything. Next.js can bundle the same font at build time, so the request never happens.
A Mac sits at home behind a normal router, no public IP, no port forwarding, and I open a shell on it from a laptop anywhere. Tailscale does the network and the keys, MagicDNS gives it a name. Plus the three things to check when it stops answering.
Someone wants to see the thing before it is deployed, and the thing is a dev server on my laptop. Two Tailscale commands hand out a temporary HTTPS link: serve for people inside your network, funnel for anyone with a browser. When to use which, and how to switch it off again.
A fresh AWS account can send mail through SES only to addresses you have verified yourself. Your test to your own inbox works, the first real recipient fails, and the error is easy to miss. How to spot it and how to get out.
Editors drop finished files into a shared Google Drive folder. A cron job copies the folder to a public S3 prefix with rclone, so every file gets a stable URL that works in a browser, an API call or a spreadsheet, without anyone logging in.
