diff --git a/docs/blog/posts/2025/006-ente/README.md b/docs/blog/posts/2025/006-ente/README.md
index 62fb8fd..e1c61c3 100644
--- a/docs/blog/posts/2025/006-ente/README.md
+++ b/docs/blog/posts/2025/006-ente/README.md
@@ -333,7 +333,7 @@ subscribe to [the newsletter] or the [rss feed]. :wink:
 [this website]: https://developer-friendly.blog/
 
 [the newsletter]: https://newsletter.developer-friendly.blog/subscription/form
-[rss feed]: /feed_rss_created.xml
+[rss feed]: https://developer-friendly.blog/feed_rss_created.xml
 
 [^ente-selfhosting]: https://help.ente.io/self-hosting/
 [^github]: https://github.com/
@@ -344,5 +344,5 @@ subscribe to [the newsletter] or the [rss feed]. :wink:
 [^local-yaml]: https://github.com/ente-io/ente/blob/5806eb6e608dedc3713da1ebcab22f0cb87b7b23/server/configurations/local.yaml
 [^config-parsing]: https://github.com/ente-io/ente/blob/5806eb6e608dedc3713da1ebcab22f0cb87b7b23/server/pkg/utils/config/config.go#L35-L65
 [^ente-repo]: https://github.com/ente-io/ente
-[^ente-ghcr]: https://github.com/ente-io/ente/pkgs/container/server
+[^ente-ghcr]: https://github.com/ente/ente/pkgs/container/server
 [^ente-desktop]: https://help.ente.io/photos/troubleshooting/desktop-install/
diff --git a/docs/blog/posts/2025/009-alloy-migration/README.md b/docs/blog/posts/2025/009-alloy-migration/README.md
index fd898b6..1f4e0f8 100644
--- a/docs/blog/posts/2025/009-alloy-migration/README.md
+++ b/docs/blog/posts/2025/009-alloy-migration/README.md
@@ -437,7 +437,7 @@ are no longer maintained, now would you!? :wink:
 [VictoriaLogs]: ../../../category/victorialogs.md
 
 [^promtail-homepage]: https://grafana.com/docs/loki/latest/send-data/promtail/
-[^promtail-journal]: https://grafana.com/docs/loki/latest/send-data/promtail/configuration/#journal
+[^promtail-journal]: https://grafana.com/docs/loki/v3.5.x/send-data/promtail/configuration/#journal
 [^alloy-docs]: https://grafana.com/docs/alloy/latest/
 [^fear-of-change]: https://www.medicalnewstoday.com/articles/fear-of-change-phobia
 [^alloy-intro]: https://grafana.com/docs/alloy/latest/introduction/
diff --git a/lychee.toml b/lychee.toml
index 1328b2e..c587d9f 100644
--- a/lychee.toml
+++ b/lychee.toml
@@ -27,6 +27,9 @@ exclude = [
   "https://unsplash.com/photos/man-wearing-white-top-using-macbook-1K9T5YiZ2WU",
   "https://patreon.com/meysam81",
   "https://kubectl.docs.kubernetes.io",
+  # AWS WAF answers non-browser clients with an empty 202 challenge; the page
+  # is alive in a browser.
+  "https://www.onelogin.com/learn/oidc-vs-saml",
 ]
 
 exclude_path = [
@@ -35,6 +38,8 @@ exclude_path = [
   ".ruff_cache",
   "secrets",
   "internal/newsletter/index.html",
+  # Sample app pages; their root-relative links resolve only when served.
+  "docs/blog/codes/2024/0012/",
 ]
 
 accept = [500, 429, 403, 200]