Stop Credential Stuffing on Login with Cloudflare WAF Rules
A 3am login endpoint meltdown taught us why IP-based rate limiting fails against Cloudflare WAF credential stuffing — here's the fix.
Prometheus Game Server Exporter Checklist for Player Metrics
A practical checklist for building a Prometheus game server exporter that tracks player count and query latency without blowing up cardinality.
3 WireGuard VPN Mistakes That Broke Our Remote Server Access
Real WireGuard VPN mistakes that cost us an outage and a security exposure — key reuse, bad AllowedIPs, and an open UDP port.
Terraform Cloudflare DNS Checklist Before Every Apply
A practical terraform cloudflare dns checklist to catch drift, proxied flag mistakes, and state issues before they hit prod.
Discord Bot Docker Restart: 3 Mistakes That Bit Us in Prod
We built a Discord bot docker restart flow for our game servers and got burned three times before fixing it properly.
Secure Kubernetes Dashboard with Cloudflare Zero Trust Tunnel
A practical checklist for locking down Kubernetes Dashboard with Cloudflare Tunnel and Zero Trust — no VPN, no open NodePorts.
Molecule Ansible Testing: 3 Docker Pitfalls That Fooled Us
Testing Ansible roles with Molecule looked bulletproof in CI — until it wasn't. Here's what broke and why.
Configure Docker Macvlan and Ipvlan for Dedicated LAN IPs
A docker macvlan ipvlan setup gives containers real LAN IPs instead of NAT'd ports — here's how we built it for a picky VoIP appliance.
Fix Predictive Alerting False Positives in Prometheus Python Models
Predictive alerting on Prometheus data pages on-call for pod restarts, not real anomalies? Here's the root cause and three fixes that work.
AWS Cost Anomaly Detection Script: A Bash Alert Checklist
A bash-based AWS cost anomaly detection script checklist to catch billing spikes in Slack before finance does — with real gotchas.
☕ Support us · 💳 Monobank