Colophon

Technology Stack

Typography

Design Principles

Infrastructure

Origin

Hetzner VPS (EU)

Runtime

Node v22.23.3

Process

systemd (portfolio-ssr.service, User=portfolio)

CDN

Cloudflare

Edge cache

s-maxage=60

TLS

1.3 + HSTS preload

DB

PostgreSQL 16

Chose / Rejected

Six decisions that are live on this server right now, each with the option it replaced, the reason it was needed here, what it costs, and the file and line where you can check it. They are all good tools — these cards are about fit, not ranking.

• ChoseMotion v12

  RejectedGSAP

  Every page is a React tree, and animation state had to live in the same place as component lifecycle. LazyMotion + domAnimation keeps the feature bundle out of the first load, and heavier features such as drag stay scoped to the one component that needs them.

  CostFor timeline-driven, frame-exact choreography GSAP remains stronger; if such a scene is ever needed this decision gets reopened.

  Evidencepackage.json:64

• ChoseSF Pro (self-host, woff2)

  RejectedInter (Google Fonts)

  The whole site is about the Apple ecosystem, so matching the reader's own system typeface is part of the content. The files are served from our own origin through next/font/local, which removes the third-party font request and its connection cost.

  CostApple's Personal Use licence: the same choice would not be available in a commercial product, and two variable files (including latin-ext) have to be carried.

  Evidencesrc/app/(main)/layout.tsx:34

• ChosePrisma client → src/generated/prisma

  RejectedThe default node_modules/@prisma/client path

  The standalone SSR output only copies what it can trace. With the client inside the repo under src/, next build treats it as an ordinary module and the whole class of "missing from the .next/standalone copy" failures disappears.

  Costprisma generate becomes mandatory on every schema change and the generated directory sits in the repo tree — which is why it is the first step of the prebuild chain.

  Evidenceprisma/schema.prisma:7

• Chosesystemd, User=portfolio (non-root)

  Rejectedpm2 running as root

  The SSR process was taken off root on 14 Jul 2026. The unit ships NoNewPrivileges, ProtectSystem, ProtectHome and PrivateTmp; ProtectHome alone means the app can no longer read the deployment credentials under /root. The line above does not hard-code any of this — it asks the unit on every build.

  CostThe build still runs as root, so .next ownership has to be handed back after every build; ProtectSystem=strict and MemoryDenyWriteExecute are deliberately left off because of V8's JIT.

  Evidencescripts/generate-colophon-stack.ts:63

• ChoseTailwind v4 @theme inline bridge

  RejectedUsing shadcn names as they are

  The project's colour vocabulary is its own semantic tokens (--color-bg-primary, --color-text-primary). shadcn's 19 names — bg-muted, text-foreground and the rest — are bound to those through @theme inline; inline is required because the theme switches at runtime via the .dark / .admin-v2 classes.

  CostUsing a new shadcn name means adding a bridge line and checking its light/dark contrast before it can be used.

  Evidencesrc/app/globals.css:42

• ChoseContent in PostgreSQL (Prisma)

  RejectedTypeScript constant arrays

  While content lived in TS files every correction required a build, and what the admin panel saw could drift from what the page printed. The database is now the single source; the prebuild step turns those records into static JSON so the page never queries at request time.

  CostA content change only reaches production through a build, and the backup burden moved from the repository to the database.

  Evidencescripts/generate-content-json.ts:200

Measurement Series

A cron on this server has been storing a Lighthouse run per page type every night and a PageSpeed Insights mobile run every morning. These are those files, unedited: the highs and the bad days both.

Lighthouse CI · 2026-08-04 → 2026-11-01 · 90 daily files