Tag: devops

Cloudflare WAF: Free Tier Firewall Rules

Cloudflare's free tier WAF is more powerful than most people use. Here's how to actually configure it — rules, rate limits, and all.

Distroless: How to Build Slim, Secure Containers

Distroless images contain only your app and its runtime — no shell, no package manager, no attack surface. Here's how to build them.

.gitignore Entries Every Project Actually Needs

Stop leaking secrets, dependencies, and OS garbage into git. Here are the .gitignore patterns that save you from disaster.

Multi-Stage Docker Builds: Stop Shipping Your node_modules to Production

Learn multi-stage Docker builds to slash image sizes by 90%. Practical before/after examples for Node.js, Python, and Go with real size comparisons.

Cloudflare DNS: Beyond Pointing Records

Stop using your registrar's janky DNS panel. Here's how Cloudflare DNS actually works — proxying, DNSSEC, dynamic DNS, and email records that don't break.

make for Project Automation (It's Not Just for C Code)

Forget bash scripts scattered across your repo. make is a simple task runner that's been around for 50 years and works everywhere.

Vault vs Infisical: Secrets Management for Teams Who've Learned the Hard Way

HashiCorp Vault vs Infisical compared: secrets management for DevOps teams, Docker Compose setup, SDK examples, and when complexity is worth it.

Git Hooks You Should Be Using Locally Right Now

Stop committing broken code. Git hooks catch mistakes before they hit CI, save hours of debugging, and make your team love you.

Traefik: Docker Routing with Labels

Master Traefik's label-based routing in Docker: entrypoints, routers, middlewares, TLS, and the mental model that makes it all click.

Docker BuildKit: Stop Waiting for Your Images to Build

Docker BuildKit is the default builder since Docker 23.0 — but most people aren't using it right. Here's how to actually speed up your builds.

Terraform vs Pulumi: Infrastructure as Code Without the YAML Nightmares

Terraform vs Pulumi compared head-to-head: HCL state files and the plan/apply workflow against real programming languages. Includes OpenTofu and when to choose each for your IaC.

Nginx Proxy Manager for Normal Humans

Set up Nginx Proxy Manager in Docker, get SSL certs, proxy hosts, access lists, and TCP streams — without reading a 40-page nginx manual.