Posts
Page 35 of 58
-
LangGraph vs CrewAI vs AutoGen: AI Agents Without the Hype
LangGraph gives you graph-level control. CrewAI gives your agents job titles. AutoGen makes them have a conversation. Here's which one to reach for when building real AI workflows.
6 min read -
Cloudflare Tunnels: Beyond Port Forwarding
No port forwarding, no DDNS drama. Real cloudflared config: multiple services per tunnel, Access policies, origin TLS, and what Cloudflare can actually see.
9 min read -
Your Server Doesn't Know What Random Means (And That's a Problem)
Your freshly booted VM is generating SSH keys with barely any entropy, and that should make you nervous. Linux needs randomness to do cryptography, and headless servers are terrible at collecting it. Here's what's actually happening inside /dev/random and how to fix it before you generate a weak key.
8 min read -
Auditd & Audit Logging: Know Exactly Who Touched What on Your Server
When the config changes and nobody owns up, auditd has the receipts. Linux's kernel audit framework logs every file access, sudo, and syscall you tell it to.
8 min read -
Trivy + Cosign: Scan and Sign Your Images
You're pulling container images from strangers on the internet. Trivy scans them for CVEs. Cosign proves they haven't been tampered with. Use both.
6 min read -
Kernel Live Patching: Security Updates Without the 3am Reboot
That server nobody dares reboot? Kernel live patching lets you apply critical CVE fixes to the running kernel without a restart. Here's how it works.
8 min read -
Prometheus + Grafana: Monitoring That Doesn't Lie to You
Prometheus scrapes metrics. Grafana makes them pretty. Alertmanager wakes you up at 2 AM. Here's how to wire all three together into a monitoring stack that actually works.
7 min read -
Linux Capabilities: Drop Root Without Breaking Everything
Running everything as root because it's easier is the sysadmin equivalent of giving your web server the keys to reboot the host just because it needs port 80. Linux capabilities let you split root into 40+ granular permissions, here's how to use them without losing your mind.
8 min read -
Fail2ban vs CrowdSec: Blocking the Bots Actually Smartly
Fail2ban bans IPs that attack you. CrowdSec bans them before they attack you, using community threat intelligence. Here's how to set up both and why you might want both.
7 min read -
Sysctl Tuning: The Linux Kernel Knobs That Actually Matter
Your Linux box has hundreds of kernel knobs in /proc/sys that nobody ever touches. Most don't matter, here are the handful that actually improve a Docker host.
8 min read -
Tailscale Deep Dive: Mesh Networking That Actually Works
Tailscale takes WireGuard's speed and wraps it in a control plane that handles key exchange, routing, and ACLs automatically. Here's everything beyond 'tailscale up'.
9 min read -
n8n + LLM: Building Automations That Actually Think
Traditional automation is just very fast copy-paste. When your email filter breaks because someone wrote "URGENT" in lowercase, you realize rule-based logic has limits. Connecting n8n to a local LLM turns "if this then that" into "figure this out and do the right thing."
8 min read
