Things I use
Hardware, software and tools I reach for every day. Lightly opinionated.
Hardware
- LaptopMacBook Pro 14" (M2 Pro, 32 GB) — daily driver, dual-boots into Asahi Linux for tinkering.
- External displayLG UltraFine 32" 4K — vertical real estate matters more than I expected.
- KeyboardKeychron K3 Pro low-profile, brown switches. Wired when serious, BT when lazy.
- PointerLogitech MX Master 3S. Trackpad for travel days.
- AudioSony WH-1000XM5 for calls and noisy cafes. Sennheiser HD 6XX at the desk.
- PhoneiPhone — boring on purpose.
Editor & shell
- EditorNeovim with LazyVim + a handful of customisations. VS Code for pair-programming.
- TerminalGhostty. Tmux as the session multiplexer.
- ShellZsh + Starship prompt.
direnv+asdffor per-project tooling. - ThemeTokyo Night Storm dark. One serif font for prose, JetBrains Mono everywhere else.
Cloud & ops
- IaCTerraform + Terragrunt. OpenTofu for new greenfield.
- K8skubectl +
k9s. Helm + Helmfile. ArgoCD for delivery. - Cloud CLIs
aws-vault,az,gcloud. SSO sessions only — no static keys. - Secrets1Password CLI in dev. AWS Secrets Manager / Azure Key Vault in prod.
- ObservabilityGrafana + Prometheus + Loki. OpenTelemetry collector wherever possible.
Security
- SASTSemgrep — fast, owns the rule set, plays well with CI.
- DASTOWASP ZAP for the obvious stuff, Burp Pro when poking around manually.
- ContainersTrivy + Grype for image scanning. Cosign for signing.
- SBOMSyft + Grype. Stored in OCI registries alongside the images.
- AuthHardware key (YubiKey 5C) for all the things that support it. TOTP otherwise.
Productivity
- NotesObsidian (local-first), synced via iCloud. Plain markdown for everything.
- TasksThings 3 + a single
todo.mdper active engagement. - CalendarFantastical. Cal.com for bookings.
- MailMimestream for Gmail. Inbox zero kept honest by Hey-style filtering.
- BrowserArc on macOS, Firefox + uBlock for boring tabs and research.
Inspired by Wes Bos' /uses tag. Updated when the kit actually changes — not for the sake of it.