Fix nginx-proxy SSL Certs Not Issuing in Docker Compose
nginx-proxy serving a self-signed cert instead of Let's Encrypt? Here's the exact fix for Docker Compose without burning rate limits.
Terraform AWS Modules vs Custom: VPC and IAM Done Right
Terraform AWS modules vs hand-rolled code for VPC and IAM — a decision matrix from production, plus the S3 misconfig that bites teams later.
PostgreSQL Archive Old Rows Script: 3 Mistakes We Made
Our PostgreSQL archive old rows script locked production for 18 minutes and duplicated 12,000 rows. Here's what we got wrong and how we fixed it.
Stop Credential Stuffing on Login with Cloudflare WAF Rules
A 3am login endpoint meltdown taught us why IP-based rate limiting fails against Cloudflare WAF credential stuffing — here's the fix.
3 WireGuard VPN Mistakes That Broke Our Remote Server Access
Real WireGuard VPN mistakes that cost us an outage and a security exposure — key reuse, bad AllowedIPs, and an open UDP port.
Terraform Cloudflare DNS Checklist Before Every Apply
A practical terraform cloudflare dns checklist to catch drift, proxied flag mistakes, and state issues before they hit prod.
Secure Kubernetes Dashboard with Cloudflare Zero Trust Tunnel
A practical checklist for locking down Kubernetes Dashboard with Cloudflare Tunnel and Zero Trust — no VPN, no open NodePorts.
Molecule Ansible Testing: 3 Docker Pitfalls That Fooled Us
Testing Ansible roles with Molecule looked bulletproof in CI — until it wasn't. Here's what broke and why.
Configure Docker Macvlan and Ipvlan for Dedicated LAN IPs
A docker macvlan ipvlan setup gives containers real LAN IPs instead of NAT'd ports — here's how we built it for a picky VoIP appliance.
Fix Predictive Alerting False Positives in Prometheus Python Models
Predictive alerting on Prometheus data pages on-call for pod restarts, not real anomalies? Here's the root cause and three fixes that work.
☕ Support us · 💳 Monobank