ABGEO's Personal website

A New Way to Query HTTP APIs with a Body

Thu, 13 Aug 2026 20:48:39 +0400

Have you done something like this?

POST /api/orders/search HTTP/1.1
Host: api.example.com
Content-Type: application/json

{
 "status": "shipped",
 "createdAfter": "2026-01-01",
 "customer": { "country": "GE" },
 "sortBy": "createdAt",
 "limit": 50
}

Most backend developers have. I’ve seen it in dozens of production APIs. You need to filter, sort, and page through a resource, the filter shape is too complex for query parameters, so you reach for POST and call the endpoint /search. It works. It also lies about what the request does.

Siesta

Fri, 31 Jul 2026 00:00:00 +0400

A macOS menu bar app that pauses your Slack status and Google Calendar availability while you’re away, and restores them when you’re back.

CLI Authentication, the Right Way

Thu, 18 Jun 2026 09:57:00 +0400

I SSH into a fresh dev VM and run claude to start a session in there. The CLI prints a login URL with http://localhost:54213/callback buried in the query string, tries to open a browser on the remote box, and starts waiting for a callback. There is no browser on this box. The CLI catches the failure, prints Paste code here if prompted, and hangs. I copy the URL into the browser on my laptop, log in, and the consent page hands me a one-time code instead of a redirect. I paste it back over SSH. It works. It is also 2009 wearing a 2026 t-shirt.

Mezz

Sun, 10 May 2026 00:00:00 +0400

A small wifi sandbox for inspecting your own IoT devices.

Anyone on the Internet Can Ring Your Doorbell

Wed, 06 May 2026 10:35:15 +0400

Updates

2026-05-06. I opened a coordination case with CERT/CC’s VINCE covering the findings below. CVE assignment will go through that process.

2026-05-07. Naxclow contacted me one day after this post went live, acknowledged the report, and started their internal review process.

Naxclow’s reply, the day after publication.

2026-06-11. CISA published advisory ICSA-26-162-02 for the Naxclow IoT Platform, assigning seven CVEs from the VINCE case. Naxclow did not respond to CISA.

Nginx Ingress Is Dead: Your Complete Guide to What Comes Next

Wed, 25 Mar 2026 19:54:48 +0400

For many years, the nginx ingress controller was the preferable choice when running a Kubernetes cluster, whether it was a simple few-node homelab setup or a production-grade deployment serving millions of requests. You installed it, wrote a couple of Ingress manifests, and moved on with your life. It just worked.

That era is over. The Kubernetes team announced the retirement of the ingress-nginx project back in November 2025, and as of March 2026 the project is officially retired. The repository is archived and marked read-only. No more releases, no bug fixes, no security patches.

Trivy GitHub Actions Compromised: Full Malware Payload Analysis

Fri, 20 Mar 2026 15:28:00 +0400

On March 19, 2026, the Trivy vulnerability scanner got owned. Again. Less than three weeks after the hackerbot-claw incident on February 28, attackers came back with a much more aggressive payload. This time they force-pushed 75 out of 76 version tags in aquasecurity/trivy-action — the official GitHub Action with over 10,000 workflow references — to point at commits containing a full credential stealer.

Malicious v0.69.4 and v0.70.0 releases were published. The only tag that wasn’t affected during the attack was @0.35.0. Maintainers have since removed all compromised tags and re-tagged clean releases with a v prefix (e.g., v0.35.0 instead of 0.35.0), keeping the original 0.35.0 intact.

My Electronic Garden in Obsidian

Thu, 19 Mar 2026 12:00:00 +0400

I’ve been collecting houseplants for a while now, and at some point the mental overhead of remembering which plant needs water, which one got repotted last week, and where I put the new orchid became too much. I’m already building Jasmine, a plant management plugin for Maroid, but that’s still a work in progress. I needed something now.

So I turned to Obsidian. It started as a simple “one note per plant” thing and gradually grew into a proper plant database with automated entries, maintenance tracking, photo galleries, and dashboards that tell me which plants I’ve been neglecting.

UBill SDK Generator

Mon, 02 Jun 2025 00:00:00 +0400

A fully automated system for generating SDKs from the UBill API. It builds, tests, and releases SDKs for multiple languages like PHP, Go, and JavaScript/TypeScript — with zero manual steps. This project powers open-source developer tooling for UBill, a Georgian billing and SMS platform.

Follytics

Mon, 03 Mar 2025 00:00:00 +0400

A GitHub follower analytics service that tracks follows and unfollows using an event-sourcing-like pattern. Gain historical insights into follower trends with precise, event-based tracking.

Secure Kubernetes Apps with Cert-Manager and Let’s Encrypt

Sat, 25 Jan 2025 19:06:38 +0400

Introduction

In today’s digital landscape, securing websites with SSL (Secure Sockets Layer) is essential. SSL not only encrypts data in transit, ensuring privacy and security for users, but also builds trust and improves the credibility of your application. Kubernetes, combined with cert-manager and Let’s Encrypt, makes managing SSL certificates seamless and automated.

In this guide, we’ll demonstrate how to secure a Kubernetes-based web service with SSL. To make it engaging, we’ll deploy a Star Wars-themed demo service accessible at https://deathstar.abgeo.cloud. This service displays Death Star-related information and serves as a practical example of securing an application with cert-manager and Let’s Encrypt.

Dynamic Environment Variables in Dockerized Next.js: A Flexible Multi-Environment Solution

Sun, 12 Jan 2025 21:48:24 +0400

When building a Next.js application, managing environment variables across different environments becomes challenging, particularly when deploying with Docker. Typically, environment variables are accessed using process.env.VARIABLE_NAME, which works well for server-side code. However, since the browser doesn’t have access to the server’s runtime variables, we’re restricted to using environment variables embedded during the client bundle build process.

In cases where process.env is accessed in client-side code, Next.js compiles these variables by embedding their values directly into the generated JavaScript. For example, the following code:

Generate a Professional CV PDF Using Markdown and Hugo

Wed, 25 Dec 2024 20:25:56 +0400

Recently, I updated my personal website and rebuilt it using Hugo. For those unfamiliar:

Hugo is one of the most popular open-source static site generators. With its amazing speed and flexibility, Hugo makes building websites fun again.

My website includes various sections such as About, Work Experience, Projects, and more. However, this blog focuses specifically on the CV section - a PDF file containing a summary of my work experience, education, skills, projects, and more. Essentially, the CV is duplicated content from my website.

Maintaining two separate sources for my website and the CV seemed inefficient, so I considered generating the CV directly from my Hugo content. After some research, I discovered that Hugo does not natively support generating PDF files. But don’t worry - this story has a happy ending! I found a workaround to solve my problem.

MailTM CLI

Sun, 25 Sep 2022 00:00:00 +0400

Here’s my latest Go project - Mail.tm CLI, a CLI application for working with Mail.tm’s disposable email service.

httpinfo

Sat, 05 Mar 2022 00:00:00 +0400

Display information about HTTP status codes.

dupman

Wed, 09 Feb 2022 00:00:00 +0400

Manage multiple Drupal instance updates just in one place

vaccination.py

Wed, 01 Sep 2021 00:00:00 +0400

Get COVID-19 vaccination schedules from booking.moh.gov.ge in the CLI.

nomrebi-web

Sat, 27 Feb 2021 00:00:00 +0400

Get information about phone numbers stored in the Nomrebi.com database

goclockify

Mon, 13 Jul 2020 00:00:00 +0400

A terminal-based client for Clockify time tracker

XML to JSON

Sun, 10 May 2020 00:00:00 +0400

Simple way to convert XML to JSON.

Convert JSON to POPO

Sat, 09 May 2020 13:37:00 +0400

Consider that you have example.json with the following content:

{
 "firstName": "Temuri",
 "lastName": "Takalandze",
 "active": true,
 "position": {
 "title": "Developer",
 "department": {
 "title": "IT"
 }
 }
}

JSON to POPO

Wed, 29 Apr 2020 00:00:00 +0400

My PHP library to fill Plain Old PHP Object with JSON content.

How not to be hacked

Sat, 25 Apr 2020 15:44:00 +0400

We live in a world where almost everything is digital. To manage the digital world, we need digital accounts. It can be an online bank account, an online wallet or even a Facebook profile. When it comes to online systems, we need to pay close attention to its security and safety, but no matter how secure the system is, its weak point will always be the user.

I will teach you how not to be a weak point in global systems and how to secure your online accounts.

Stalin's List Website

Sat, 25 Apr 2020 00:00:00 +0400

Website for the presentation of the “Stalin’s list”

covid19-cli

Sun, 05 Apr 2020 00:00:00 +0400

Simple CLI tool for displaying COVID-19 statistics.

My programming activity in 2k19

Wed, 18 Dec 2019 08:32:00 +0400

My #programming activity in #2k19 :)

This year was the #firstyear of #contribution to #symfony.

gen-md

Thu, 29 Aug 2019 00:00:00 +0400

PHP Library for generating Markdown document.

nbg-currency-d8

Sat, 17 Aug 2019 00:00:00 +0400

Drupal 8 module for working with NBG Currency API.

gen-html

Tue, 23 Jul 2019 00:00:00 +0400

PHP Library for generating HTML document.

nbg-currency

Tue, 16 Jul 2019 00:00:00 +0400

PHP Library for getting data from National Bank of Georgia (NBG)’s API.

Hello, World!

Thu, 11 Jul 2019 12:28:00 +0400

Hallo, it’s my first blog on my website :)

docker4symfony

Thu, 23 May 2019 00:00:00 +0400

My Docker stack for Symfony projects.

Cherry Framework

Wed, 27 Feb 2019 00:00:00 +0400

My simple PHP micro framework.

Informatics.Ge

Thu, 15 Nov 2018 00:00:00 +0400

Informatics.Ge - Website to learn programming and competitive programming.

iMatiane

Sat, 09 Jun 2018 00:00:00 +0400

Historical quiz created for VizHack.