Syllabus
Two days, 14 labs, roughly 14 hours of instruction. Click any card to open the lab.
Day 1
Field-Ready Router — 7 labs, ~4 hoursHardware Familiarization & Recovery
Router teardown, recovery procedures, and U-Boot serial console.
60 minImageBuilder Firmware
Compile a custom OpenWrt firmware with your package set.
45 minOverlay Deployment
ExtRoot on USB — persistent services across sysupgrades.
30 minDomain & Cloudflare Verification
Verify workshop subdomain delegation and Cloudflare zone access.
15 minTailscale Mesh
Build a two-node tailnet: devcontainer + Mango drop device.
30 minCloudflare Tunnel
Zero-port-forward access to your router via cloudflared.
30 minFirst Worker
Build the route dispatcher that powers this site's own /api/*.
60 minDay 2
Engagement Stack — 7 labs, ~7 hoursCloudflare Access
OTP-to-email auth policy — the same gate you used to reach this site.
45 minD1 Database
Device registry and audit trail in D1 — this site's own schema extended.
60 minKV & R2 Storage
Session cache in KV; artifact storage and signed URLs from R2.
45 minChatOps — EmojiChef
6-bit food-emoji encoding scheme; Discord command bridge.
45 minDrop Device
Harden the Mango, deploy enrollment script, validate OPSEC posture.
60 minRedirector & Relay
Malleable Worker redirector pattern based on Oblique-Relay.
60 minCapstone
Full round-trip: Discord emoji → Worker → Tailnet → Mango → R2 → signed URL.
90 min