Tag: devops

DDoS mitigation for self-hosters: Nginx rate limiting, Fail2ban, Cloudflare free tier, CrowdSec, and iptables tricks that actually work.

Traefik vs Nginx Proxy Manager compared for self-hosters. Docker auto-discovery, SSL certs, GUI vs labels, performance, and when to pick each reverse proxy.

Set up Wiki.js GitSync with GitHub or Gitea for docs-as-code. Version-controlled wikis, PR workflows, automated updates, and sane branch strategies.

Docker Compose vs Docker Swarm: a practical guide to choosing the right tool. Learn when simple orchestration beats enterprise complexity, with real examples.

Learn how to set Docker resource limits for memory, CPU, swap, and PIDs. Practical guide with real-world sizing examples, OOM killer behavior, and cgroups explained.

Profiles let you conditionally start services in Compose. Perfect for dev vs prod service splits without multiple files.

ENV bakes secrets into image layers that docker history shows to anyone. Use BuildKit secret mounts, runtime variables, or a real secrets manager.

The latest tag does not mean newest, it means whatever was pushed untagged. Why that breaks reproducible deploys and how to pin versions and digests.

Master Docker HEALTHCHECK syntax. Learn what checks work, how to tune interval/timeout/retries, and integrate with orchestration.

Docker labels are free metadata for filtering, routing, and documentation. Learn label conventions and leverage them with filters and tools.

Docker layer caching explains most slow builds. Why copying files too early kills the cache, the layer ordering that fixes it, and a multi-stage benchmark.

A missing .dockerignore bloats build context, slows every build, and leaks secrets into images. One you can copy-paste, plus how to check context size.