Solving Android CA Trust Issues for Local Homelab Services with Route 53, Let's Encrypt, and BIND9

I run OpenProject and Nextcloud on my home network, both behind an internal certificate authority I run with PicoCA. Browsers on my laptop are happy to trust that root cert once I install it, but the official Android apps for both services flatly refuse to talk to a server whose certificate they don’t recognize. No amount of “install anyway” in Android’s certificate settings fixes it, and I didn’t want to root my phone just to sync a project board and a file share. ...

July 25, 2026 · 11 min · Michael Locatelli

Rebuilding My Tilt Hydrometer Logger as a Single Dockerized Service

I brew beer, and for the last few years I’ve tracked fermentation with a Tilt Hydrometer — a battery-powered sensor that floats in the fermenter and broadcasts the current temperature and specific gravity over Bluetooth Low Energy. Watching gravity fall over a week or two is the easiest way to know fermentation is actually happening and when it’s done. The catch with the Tilt is that something has to be in BLE range, always listening, to capture those readings and do anything useful with them. For years that something was a pair of scripts I wrote running on a Raspberry Pi next to my fermentation fridge. They worked, but using them had become a genuine chore. So I tore the whole thing down and rebuilt it as a single Dockerized service with a web interface. The result is tilt-monitor, and along the way I got to chase down a battery-age mystery and figure out why my Bluetooth mouse suddenly stopped working. ...

June 14, 2026 · 9 min · Michael Locatelli