{"@attributes":{"version":"2.0"},"channel":{"title":"Matheus Monteiro","link":"https:\/\/mmonteiro.dev\/","description":"Recent content on Matheus Monteiro","generator":"Hugo -- gohugo.io","language":"en-US","managingEditor":"contact@mmonteiro.dev (Matheus Monteiro)","webMaster":"contact@mmonteiro.dev (Matheus Monteiro)","copyright":"Matheus Monteiro","lastBuildDate":"Mon, 15 Jun 2026 00:00:00 +0000","item":[{"title":"Building a Production-Grade Homelab with Proxmox, Talos, Kubernetes and GitOps","link":"https:\/\/mmonteiro.dev\/posts\/production-grade-homelab-proxmox-talos-kubernetes-gitops\/","pubDate":"Mon, 15 Jun 2026 00:00:00 +0000","author":"contact@mmonteiro.dev (Matheus Monteiro)","guid":"https:\/\/mmonteiro.dev\/posts\/production-grade-homelab-proxmox-talos-kubernetes-gitops\/","description":"

I wanted a lab that failed like production without taking production down.<\/p>\n

That was the point. I did not want another toy cluster that ran a dashboard, two demo apps, and died the first time storage got weird. I wanted a small system with real operational pressure: declarative infrastructure, GitOps, immutable nodes, secrets outside the repository, remote access without port forwarding, and storage that could survive a pod restart.<\/p>\n

The result is my homelab: one physical server running Proxmox, a Talos Kubernetes cluster on VMs, TrueNAS for storage, ArgoCD for GitOps, 1Password for secrets, Tailscale for access, MetalLB for bare-metal load balancers, and Istio Ambient for service mesh experiments.<\/p>"},{"title":"10 Istio Features You're Probably Not Using","link":"https:\/\/mmonteiro.dev\/posts\/istio-beyond-basics\/","pubDate":"Mon, 26 Jan 2026 00:00:00 +0000","author":"contact@mmonteiro.dev (Matheus Monteiro)","guid":"https:\/\/mmonteiro.dev\/posts\/istio-beyond-basics\/","description":"

What Is Istio<\/h2>\n

Istio is a service mesh for Kubernetes. It intercepts all traffic between your services and adds capabilities your application doesn’t need to implement: automatic mTLS, metrics, tracing, traffic control.<\/p>\n

Here’s how it works. A sidecar proxy (Envoy) gets injected into each pod. This proxy captures all inbound and outbound traffic. The Istio control plane configures these proxies. (There’s also a newer “ambient mode” that removes the sidecar entirely. That’s a topic for another post.)<\/p>"},{"title":"What It Means to Have Agency","link":"https:\/\/mmonteiro.dev\/posts\/agency\/","pubDate":"Fri, 09 Jan 2026 00:00:00 +0000","author":"contact@mmonteiro.dev (Matheus Monteiro)","guid":"https:\/\/mmonteiro.dev\/posts\/agency\/","description":"

I came across this word on X, which I’ve recently started using a lot: agency<\/em>.<\/p>\n

Not the business kind, not a marketing agency or a travel agency. This is a different meaning entirely. Someone posted about “having agency over your career,” and I realized I didn’t fully understand what that meant. So I went down a rabbit hole.<\/p>\n

Turns out, when psychologists and philosophers talk about “agency,” they’re referring to something deeper than just “doing stuff.” Agency is about being the author of your own actions. It’s a concept developed primarily by psychologist Albert Bandura in his social cognitive theory (Bandura, 2006).<\/p>"}]}}