Logging for API Security Without Leaking Secrets
Log the signals that catch attackers while redacting tokens, keys, and personal data from your API event stream before it leaks to anyone.
API & Automation7 min read
NetBay journal
Guides for operators
Practical guides for Linux, containers, CI/CD, self-hosting, and running VPS infrastructure from Netbay Engineering.
599 articles · 24 topics
AllLinuxLinux AdministrationWindowsLinux SecurityLinux NetworkingContainersContainers & OrchestrationKubernetesCI/CDGitHubSelf-HostingBackups & DataDatabasesApp DeploymentDNS & TLSObservabilityEmailAI AgentsAI InfrastructureAPI & AutomationProxiesCloud ArchitectureHardware & PerformanceDevOps Practices
override.conf: Customizing Vendor Units Without Losing Updates
Use systemctl edit and drop-in override.conf files to customize vendor units safely, so package upgrades never clobber your production changes.
Linux Administration6 min read
DNS Resolution on Linux: resolv.conf and hosts
Understand how Linux resolves hostnames through systemd-resolved, resolv.conf, and the hosts file, and fix DNS problems.
Linux Networking8 min read
Backup Encryption End to End with age, gpg, and restic
Encrypt backups at rest and in transit with age and gpg for files and restic native crypto for repositories, without losing your recovery keys.
Backups & Data8 min read
Container-Optimized Operating Systems: What Makes Them Different
Read-only /usr, atomic A/B updates, and boot-time configuration: how container-optimized operating systems differ from a conventional distro with Docker.
Linux7 min read
Container Health and Self-Healing Beyond Docker Healthchecks
Go past a single healthcheck: layered probes, readiness vs liveness, and systemd watchdogs for containers that repair themselves.
Containers & Orchestration8 min read
Repo Ops: The .github Directory for Org-Wide Settings
The .github directory is repo policy as code — issue forms, workflows, owners files, and community defaults — and org-level repos inherit it everywhere.
GitHub6 min read
Caching in CI: Fast Pipelines Without Cheating
Cache dependencies and build outputs with correct keys so every run is fast and never silently stale.
CI/CD7 min read
Disk and CPU Watchdog Agent with Allowlists
Watch disk and CPU on a VPS and let the agent run only allowlisted fixes such as journal vacuum or nginx reload, logging every action it takes.
AI Agents8 min read
Observe Tokens, Latency, and OOM on CPU Inference
Log tokens, encode_ms, generate_ms, and RSS on every CPU inference request so you see saturation and OOM risk before the OOM killer ever fires.
AI Infrastructure9 min read
Automating Security Updates with unattended-upgrades
Deploy unattended-upgrades on Debian or dnf-automatic on Rocky so security patches install themselves without breaking your running services.
Linux Security6 min read
Immutable Distros: Fedora Silverblue and openSUSE MicroOS
Read-only roots, atomic updates, and containerized apps: how Silverblue and MicroOS change patching, deployment, and what a VPS admin must unlearn.
Linux7 min read