Blog
Hands-on articles on IT, software development, .NET, Microsoft and digitalisation for small and medium businesses.
Upgrading Paperless-ngx 3.0: Migration Without Data Loss
From 2.x to 3.1.2 without losing data: breaking changes, decrypt_documents, PAPERLESS_DBENGINE, and Tantivy search — step by step.
Commissioning Custom Software: What Does a Software Project Cost for SMBs?
Market cost ranges, typical project phases and the main cost drivers – a straightforward decision guide for business owners.
Sandboxing AI Coding Agents with Docker: Secure and Reproducible
How to run Claude Code, Codex & co. in disposable containers or microVMs – from Docker flags and gVisor to Docker Sandboxes (sbx).
Passkeys Instead of SMS: Planning Your Entra ID Migration Before 1 September 2026 – A 5-Step Guide
From 1 Sept 2026, Microsoft enables passkeys for SMS MFA users automatically. SMS shuts down on 1 Feb 2027. A 5-step migration guide for your Entra tenant.
Migrating MCP Servers to Spec 2026-07-28: initialize Gone, server/discover Required
MCP 2026-07-28 breaks backward compatibility: the initialize handshake is removed, server/discover is mandatory, and subscriptions/listen replaces resources/subscribe. Migration guide with the Python SDK.
Ransomware Wave 2026: Qilin Targets Manufacturing and Construction in German SMBs
176 German victims in H1 2026, ranked 4th globally — Qilin is zeroing in on manufacturing and construction. Threat landscape and 7 immediate actions.
Running Muse Glimmer Locally with Ollama: Meta's 30B Model on Consumer Hardware
Run Meta's Muse Glimmer 30B locally with Ollama ≥ 0.32.8: pull the model, call the REST API, send multimodal prompts – up and running in 15 minutes.
What Is RAG? Making Company Knowledge Searchable with AI
RAG lets an AI assistant answer from your own documents – with citations. What it actually is, which data suits it, and how a pilot project runs.
Authelia or Authentik: Putting SSO Forward-Auth in Front of Self-Hosted Services
What forward-auth is, when Authelia is the right tool and when authentik is – plus a complete minimal example with Authelia 4.39.20 behind Traefik v3.7, including the cookie domain, middleware and session pitfalls.
GDPR-Compliant ChatGPT Alternatives for SMBs: Azure OpenAI, Mistral, EU Hosting and On-Premise Compared
A comparison table covering data residency, DPAs and training use – Azure OpenAI, Mistral Vibe, IONOS AI Model Hub, PhariaAI and self-hosted models.
WireGuard: A Minimal VPN Tunnel Between Two Hosts
A working minimal example – generate key pairs, write wg0.conf for both sides, wg-quick up, verify the connection – plus the three classic pitfalls: AllowedIPs, the UDP port and PersistentKeepalive.
AI in the Skilled Trades: 5 Realistic Use Cases for Businesses in the Ruhr Region
Only four percent of German trade businesses use AI. Five use cases that genuinely save time in daily operations – assessed soberly, without the hype.
nginx as a Reverse Proxy in a Container: Wiring Up Multiple Upstreams
A working minimal example – nginx via Docker Compose in front of three backend containers, with upstream blocks, path-based routing and correct header forwarding – plus the three traps around DNS, headers and WebSockets.
Rolling Out Microsoft 365 Copilot in an SME: Prerequisites, Costs, Data Protection, Pilot Phase
A Copilot rollout roadmap for SMEs: licensing, technical prerequisites, cleaning up permissions, data protection and a pilot phase you can measure.
Ollama: self-hosting an LLM locally – a Docker and REST API quickstart
From a bare machine to your own LLM API in 15 minutes – start Ollama with Docker Compose, pull a model, call /api/generate and /api/chat with curl, plus three pitfalls (open API, streaming default, 4096-token context).
Using ChatGPT in Your Business in Compliance with GDPR: DPA, Business vs. Free, EU Data Residency
When your business needs a data processing agreement for ChatGPT, which plan provides one, what happens to your data – and when EU data residency matters.
GitHub Actions CI Boilerplate: Build, Test, and Push a .NET App as a Docker Image to GHCR
A complete GitHub Actions workflow for .NET projects: automated build, test, and Docker image push to GHCR – in under 50 lines of YAML, no external services needed.
What Does AI Consulting Cost for Small Businesses? An Honest Market Overview
Day rates, project phases, funding options – what SMBs should budget for professional AI consulting and when the investment pays off.
Multi-Stage Dockerfile: Minimal, Secure Image for Node and .NET
Build tools don't belong in production images. Multi-stage builds separate compiler from runtime and shrink images from over a gigabyte to a fraction of that size.
Self-hosting Qdrant: a vector database for RAG via Docker in 15 minutes
A runnable minimal example – start Qdrant via Docker with an API key and a persistent volume, create a collection, upsert vectors, run a similarity query via curl – plus the Gridstore upgrade trap.
Podman 6.0: running a rootless container as a systemd service with Quadlet
How to run a rootless container as a clean, boot-capable systemd service with Podman 6.0 and Quadlet – with a working Caddy example and the common pitfalls.
Node.js security updates of June 2026: patch your container and harden it with the Permission Model
Node.js patched twelve CVEs on 18 June 2026. Here is how to update your container to 22.23.0/24.17.0/26.3.1 and harden the app with minimal effort.
NIS2 Registration: The 31 July 2026 Deadline Has Passed – Why Businesses Should Now Complete Their BSI Registration Without Delay
The BSI grace period ended on 31 July 2026 – yet the registration obligation remains in force. What applies now, and why registering immediately is the only sensible step.
Critical nginx flaw CVE-2026-42945: check your version, patch and secure it
Heap buffer overflow in the rewrite module (CVSS 9.2). How to check your nginx version, compare it against the affected releases, patch and verify.
Watchtower is dead: doing Docker container updates right in 2026 with Diun (notify instead of blind auto-pull)
Watchtower is archived. Diun as a maintained successor – a minimal Compose example on the Docker socket that watches all containers and notifies via Telegram or email.
Cyber Insurance 2026: The IT Measures Insurers Now Require from SMBs
Without MFA, tested backups and a patch routine you can barely get a policy. Which requirements insurers ask about — and how to clear the hurdles.
Cloudflare Tunnel: Expose Services Without Open Ports
Use cloudflared to bring a service online securely without opening a single inbound port – step by step via the CLI and as a Docker container.
E-Invoicing Becomes Mandatory: The Issuing Obligation from 2027 – How SMEs Should Switch Now
B2B businesses already have to receive them. From 2027, issuing becomes mandatory too. Deadlines, XRechnung vs. ZUGFeRD and the steps to a clean switchover.
Caddy vs. Traefik: Which Reverse Proxy Fits Your Setup?
Caddy and Traefik compared head to head: configuration, Docker integration, certificates, middlewares and Kubernetes – with a clear verdict on when to pick which.
Caddy: Automatic HTTPS as a Lean Reverse-Proxy Alternative
A minimal Caddy stack with Docker Compose: two services behind one domain, fully automatic TLS – including local testing and common pitfalls.
Windows 10 Is Out of Support – How SMBs Move Safely to Windows 11 Now
Windows 10 no longer receives security updates. What the ESU bridge costs, which PCs can handle Windows 11 and how to migrate without losing data.
Modernizing a legacy .NET application – when the effort is really worth it
Migrate, rebuild or keep running? A decision guide for SMBs with aging .NET software.
Traefik as a Reverse Proxy: Four Services Behind One Domain with Automatic HTTPS
A minimal Traefik v3 stack with Docker Compose: route four services behind one domain, automatic TLS via Let's Encrypt, plus the common pitfalls.
Docker Compose from scratch: a multi-service stack with health checks and its own network
A runnable minimal Compose example with Postgres and Adminer – including a health check, depends_on on service_healthy, a custom network and common pitfalls.
SQL Server 2025 vs. SQL Server 2022 – the key differences
What SQL Server 2025 (17.x) adds over its predecessor 2022 (16.x): a native vector type and AI in T-SQL, a native JSON type, RegEx, optimized locking, plus changes to editions, licensing and discontinued components.
Workflow Automation with n8n: Self-Hosting, Architecture, and First Workflows
A practical look at workflow engines using n8n: how it compares to Make, Zapier, Temporal, and Airflow, plus Docker self-hosting and a first workflow.
Incoming Webhooks in Microsoft Teams Are Being Retired: How to Post to a Channel Today Using Workflows (Power Automate)
Microsoft is retiring Office 365 Connectors and Incoming Webhooks in Teams. Here is the verified status and the recommended Workflows (Power Automate) replacement.
Sending Emails Programmatically with the Microsoft Graph API
Send emails from Microsoft 365 via the OAuth2-based Graph API: app registration, token retrieval, working C# code, and a curl example.
Self-Hosting Hermes by Nous Research: vLLM, Tool Calling, and Self-Hosting in Practice
A practical guide to self-hosting Nous Research's Hermes models with vLLM, including a function-calling example and a lightweight Ollama alternative.
Microsoft 365 Copilot for SMBs: Is It Worth Getting In Before the Discount Ends?
The promotional price for Microsoft 365 Copilot Business runs until 31 December 2026. When buying pays off – and when you are better off waiting.
Exchange Server 2016 and 2019 are end of life – migrate safely now
No security updates since October 2025. What businesses running their own Exchange server should do – the paths to Exchange Online and Exchange Server SE.
EU AI Act Since August 2026 – What SMBs Using ChatGPT, Copilot & Co. Must Do Now
Since 2 August 2026 new obligations under the EU AI Act apply. What small businesses really need to take care of – and what is pure scaremongering.
.NET 8 and .NET 9 reach end of support in November 2026 – plan your move to .NET 10 LTS now
On 10 November 2026 support for .NET 8 and .NET 9 ends at the same time. What that means for your software and how to migrate to .NET 10 LTS in good time.
Making your website GDPR-compliant – the key steps for SMBs
Cookie banner, privacy policy, fonts, forms: a practical checklist to put your website on a legally sound footing.
Microsoft 365 or Google Workspace – which fits small businesses?
An honest comparison for SMBs: cost, data protection, integration and migration effort – without the marketing fluff.
NIS2 for SMBs – what small businesses should do now
Germany's NIS2 implementation law is in force. Who is affected, why even small suppliers feel it – and the first concrete steps.
Ransomware protection for small businesses – the key levers
Why SMBs in particular get hit and the few effective measures that drastically lower the risk.
IT strategy for SMBs – from gut feeling to a plan in 5 steps
Only about 12% of SMBs have a mature IT strategy. Here's how to get one pragmatically – without consultant speak.
Why .NET and Microsoft 365 are often the best choice for small businesses
For SMBs, .NET and Microsoft 365 are more than the default – stable, secure, GDPR-capable and maintainable long-term. A practical overview.
Microsoft 365 price increase 2026 – what applies since 1 July, and when it hits your contract
New Microsoft 365 prices have applied since 1 July 2026. Which plans are affected, what came with the increase – and why it reaches many SMBs only in 2027.
Backup strategy for SMBs – the 3-2-1 rule done right
Why most backups fail when it counts and how to do it better with the 3-2-1 rule – explained for small businesses.
Self-hosted mail server or Microsoft 365 – what's worth it for SMBs?
Data sovereignty vs. operational burden: an honest comparison for small businesses considering their own mail server.