Disk Layout for Models, Caches, and Indexes
Put models, embedding caches, git clones, and SQLite indexes on separate paths so a full cache cannot bury the OS on a single Lucknow VPS disk.
AI Infrastructure8 min read
NetBay journal
Guides for operators
Practical guides for Linux, containers, CI/CD, self-hosting, and running VPS infrastructure from Netbay Engineering.
599 articles · 24 topics
AllLinuxLinux AdministrationWindowsLinux SecurityLinux NetworkingContainersContainers & OrchestrationKubernetesCI/CDGitHubSelf-HostingBackups & DataDatabasesApp DeploymentDNS & TLSObservabilityEmailAI AgentsAI InfrastructureAPI & AutomationProxiesCloud ArchitectureHardware & PerformanceDevOps Practices
Securing the Admin Surfaces of Self-Hosted Dashboards
Harden every admin dashboard, panel, and control surface in your self-hosted stack so the tools that manage it cannot become its weak point.
Self-Hosting7 min read
Agent Identity, API Keys, and Secret Isolation
Give each agent its own Unix user, env file, and scoped API keys so a leaked worker key cannot drain the billing account or rewrite git history.
AI Agents8 min read
Rolling Back Package Updates on RHEL-Family Systems with DNF History
Every DNF transaction is numbered and stored. Learn to read dnf history, undo one bad update, or roll the whole system back to a known-good state.
Linux6 min read
Disk I/O on a VPS: IOPS, Latency and Filesystem Tuning
How to measure IOPS and latency on virtualised solid-state storage, then tune the filesystem and block scheduler to match your access pattern.
Hardware & Performance9 min read
X-Forwarded-For and Proxy Header Hygiene
Stop spoofed X-Forwarded-For and doubled forwarding headers from corrupting your logs, rate limits, and trust decisions at the proxy.
Proxies6 min read
Move PostgreSQL Off the OS Disk onto Its Volume
Stop the cluster, rsync the data directory onto a dedicated High-Speed SSD volume, and point PostgreSQL 16 at that new data location safely.
Databases8 min read
Node Health Checks That Fail Fast When Wedged
Expose a cheap health endpoint, let systemd watchdog the event loop, and fail the unit before a wedged Node process sits silent in production.
App Deployment8 min read
Minimal Postfix and Dovecot for One Domain
A single-domain Postfix plus Dovecot inbox is small and honest: IMAP for you, DNS auth in place, and no claim that Gmail will accept your outbound.
Email9 min read
Agent Architecture: Local 7B Plus API Fallback
Put nginx, a tool-gated agent, a loopback 7B, Redis, and a cheap remote API on one Lucknow VPS so private prompts stay local and hard tasks can escalate.
AI Infrastructure9 min read
Scaling HTTP Application ,roxies on Proxmox VE Infrastructure
Deep dive into automated fw_cfg parameter injection and QEMU guest agent orchestration for zero-downtime application rebuilds.
Cloud Architecture6 min read
Symlinks and Hardlinks: What They Solve and When to Use Them
Learn the difference between symbolic and hard links, what they cost, and when each is the right tool.
Linux5 min read