Posts
Page 46 of 58
-
ArgoCD vs Flux: GitOps, When Your Git Repo Is the Source of Truth
ArgoCD vs Flux for Kubernetes GitOps: compare UI-focused ArgoCD with automation-first Flux CD. Sync workflows, install examples, and when to use each.
8 min read -
Docker Health Checks: Because "It's Running" Doesn't Mean "It's Working"
Docker health checks for Dockerfiles and Compose: configure HEALTHCHECK for PostgreSQL, Redis, Nginx, and Node.js with intervals, retries, and depends_on.
18 min read -
Prometheus + Grafana on Docker: Know When Your Server Is Crying Before It Dies
Set up a self-hosted Prometheus and Grafana monitoring stack with Docker Compose. Stop flying blind, get metrics, dashboards, and alerts in under 30 minutes.
8 min read -
tcpdump Basics: Capture Traffic Without Wireshark
You don't need a GUI to see network packets. Learn tcpdump filters, flags, and pcap capture to debug servers from the command line, no Wireshark needed.
5 min read -
AppArmor vs SELinux: Mandatory Access Control Without the Existential Dread
AppArmor vs SELinux: what mandatory access control actually does, writing AppArmor profiles with aa-genprof, SELinux labels and audit2allow, and when to use each.
9 min read -
Your Server Doesn't Know What Random Means (And That's a Problem)
Linux entropy explained: /dev/random vs /dev/urandom, entropy pools, haveged, virtio-rng, and hardware RNG. Fix low entropy on VMs and containers for safe crypto key generation.
8 min read -
Docker Logging: From "Where Did My Logs Go?" to Centralized Bliss
Learn Docker logging from basics to centralized stacks. Master docker logs, logging drivers, log rotation, Loki+Grafana, and Fluentd setup with practical examples.
16 min read -
NocoDB: Because Airtable Doesn't Need to Know Your Business
NocoDB self-hosted: connect to existing Postgres/MySQL, build spreadsheet views, auto-generate APIs, and skip the Airtable subscription forever.
8 min read -
TCP Keepalives: Why Connections Die and How to Fix It
Long-lived connections dropping randomly? Your OS is killing them. Here's why keepalives matter and how to tune them.
6 min read -
Caddy Advanced: Automatic HTTPS, Plugins, and Config That Doesn't Make You Cry
Advanced Caddy server configuration: wildcard certs, Caddyfile matchers, Docker label integration, rate limiting, forward auth with Authelia, and the JSON API.
8 min read -
Auditd & Audit Logging: Know Exactly Who Touched What on Your Server
Master auditd for Linux audit logging: watch critical files, audit syscalls, use aureport and ausearch, and ship logs to Loki or Elasticsearch for compliance and security monitoring.
9 min read -
Time Sync on VMs: Why NTP Keeps Drifting
Your VM's clock is off by minutes, NTP says it's synced, yet the system keeps drifting. Here's why the hypervisor is the real culprit, and how to fix it.
5 min read
