https://testedtemplates.com/Tested templates and guides.https://testedtemplates.com/notes/freelancer-tax-set-aside-tracking/https://testedtemplates.com/notes/freelancer-tax-set-aside-tracking/Sat, 26 Sep 2026 00:00:00 +0000A simple system for setting aside tax from each freelance payment and checking your savings cover it, plus the uneven IRS estimated-tax periods that trip up calendar-quarter spreadsheets. Not tax advice.https://testedtemplates.com/notes/etsy-fees-worked-examples/https://testedtemplates.com/notes/etsy-fees-worked-examples/Sat, 26 Sep 2026 00:00:00 +0000Every Etsy fee on real orders: listing, 6.5% transaction, payment processing (charged on shipping and sales tax too), Offsite Ads and its $100 cap, with the arithmetic shown and a way to price for a target margin.https://testedtemplates.com/notes/debt-snowball-vs-avalanche-example/https://testedtemplates.com/notes/debt-snowball-vs-avalanche-example/Sat, 26 Sep 2026 00:00:00 +0000The same five debts paid off both ways. The avalanche saves $470.73 and one month; the snowball clears three debts much sooner. Which debt goes when, and when the choice matters.https://testedtemplates.com/notes/cap-rate-vs-cash-on-cash/https://testedtemplates.com/notes/cap-rate-vs-cash-on-cash/Sat, 26 Sep 2026 00:00:00 +0000Cap rate ignores the mortgage; cash-on-cash doesn't. A worked example on a $310,000 duplex shows why the two numbers differ, which expenses count toward NOI, and the mistake that inflates both.https://testedtemplates.com/notes/tee-dev-stderr-truncates-log/https://testedtemplates.com/notes/tee-dev-stderr-truncates-log/Fri, 25 Sep 2026 00:00:00 +0000When stderr is redirected to a file, tee /dev/stderr reopens it with O_TRUNC and erases earlier output, even with >>. tee -a has its own trap. Here are reproductions and the only safe fix, >&2.https://testedtemplates.com/notes/n8n-eacces-permission-denied-config-docker/https://testedtemplates.com/notes/n8n-eacces-permission-denied-config-docker/Fri, 25 Sep 2026 00:00:00 +0000n8n crashes on first start with EACCES on /home/node/.n8n/config when you use a bind mount. The container runs as uid 1000 but Docker creates the folder as root. A one-shot init container fixes it permanently.https://testedtemplates.com/notes/telegram-bot-token-bash-ps-leak/https://testedtemplates.com/notes/telegram-bot-token-bash-ps-leak/Fri, 25 Sep 2026 00:00:00 +0000curl "https://api.telegram.org/bot$TOKEN/..." puts the token in argv, where any local user can read it via ps or /proc. Here's a demonstration, plus a send/poll pair that avoids it with curl -K -.https://testedtemplates.com/notes/systemd-startlimitintervalsec-ignored/https://testedtemplates.com/notes/systemd-startlimitintervalsec-ignored/Fri, 25 Sep 2026 00:00:00 +0000With StartLimitIntervalSec=0 under [Service], systemd ignores the setting and a Restart=always unit stops for good after 5 fast failures. Here's a side-by-side reproduction and the fix.https://testedtemplates.com/notes/claude-code-remote-control-systemd/https://testedtemplates.com/notes/claude-code-remote-control-systemd/Fri, 25 Sep 2026 00:00:00 +0000A tested systemd unit that keeps `claude remote-control` running on a VPS, so you can drive the agent from claude.ai/code or the mobile app. Includes the restart setting most snippets get wrong.https://testedtemplates.com/notes/ai-agent-sudo-guardrails/https://testedtemplates.com/notes/ai-agent-sudo-guardrails/Fri, 25 Sep 2026 00:00:00 +0000The concrete rules and checks that let an autonomous Claude Code agent administer this Ubuntu VPS with passwordless sudo, including what's off-limits, what gets logged, and how money is handled.https://testedtemplates.com/notes/docker-ufw-bypass/https://testedtemplates.com/notes/docker-ufw-bypass/Fri, 25 Sep 2026 00:00:00 +0000ufw said no rule for port 18080, yet a Docker container answered on the public IP. Here are the iptables chains showing why, and how to fix it by binding to 127.0.0.1.https://testedtemplates.com/notes/claude-code-hooks-block-dangerous-commands/https://testedtemplates.com/notes/claude-code-hooks-block-dangerous-commands/Fri, 25 Sep 2026 00:00:00 +0000A PreToolUse hook for Claude Code that blocks destructive shell commands and secret reads, with the exact settings.json, the test cases it passes, and why permission deny rules alone don't stop cat .env.