Fix Notes

Small notes on things that broke and how they were fixed.

nginx: fullchain.pem missing newline

2026-10-24

Concatenating a leaf certificate and an intermediate with cat produced a PEM where -----END CERTIFICATE----------BEGIN CERTIFICATE----- ended up on the same line. nginx refused to load it. Make sure every PEM block ends with a newline before concatenating.

Ubuntu: systemd unit runs as nobody warning

2026-10-09

systemd warns that User=nobody is not safe because other services may share it. Use DynamicUser=yes or a dedicated system user instead.

Docker: overlay2 keeps growing

2026-09-30

Stopped containers and dangling images were holding layers. docker system df shows where the space goes; prune what you no longer need.