I fixed one CI bug in eleven repos before learning GitHub Actions reusable workflows properly. Before/after YAML, composite actions, secrets, and the gotchas.
The post you're reading was published by a Hetzner box that's been up for twenty weeks. My honest Hetzner vs DigitalOcean math after paying both…
Minimus shuts its registry on October 22. What Docker Hardened Images gives you free, what the paid tier adds, and when hardening your own images…
pg_statviz 1.2 adds Postgres 19 support and a blocking locks module. How I monitor client databases with snapshots and a systemd timer instead of a…
nginx now ships a native ACME module, which kills the main reason I reached for Caddy. What changed, what Caddy still does better, and how…
My cron job silently skipped a backup after a 3am reboot. Here is the systemd timer setup that replaced it, the OnCalendar syntax, and where…
I cut a 1.2GB Go service image down to 12MB with a Docker multistage build. The before and after Dockerfiles, the base images I picked,…
The Docker container security checklist I run on every service: non-root users, dropped capabilities, read-only filesystems, build secrets and digest pinning.
Seven Dockerfile habits I changed after my images got embarrassing: smaller bases, multi-stage builds, cache mounts, non-root users, and pinned digests.
Six Docker habits I dropped from production in 2026, the ones I kept, and the small changes that cut image size, build time, and CVE…