Windows Update Reboot Policy for Production VPS
Control Windows Update and reboot policy on a production VPS so patch Tuesday does not take IIS or your live .NET service down in business hours.
Windows8 min read
NetBay journal
Guides for operators
Practical guides for Linux, containers, CI/CD, self-hosting, and running VPS infrastructure from Netbay Engineering.
499 articles · 24 topics
AllLinuxLinux AdministrationWindowsLinux SecurityLinux NetworkingContainersContainers & OrchestrationKubernetesCI/CDGitHubSelf-HostingBackups & DataDatabasesApp DeploymentDNS & TLSObservabilityEmailAI AgentsAI InfrastructureAPI & AutomationProxiesCloud ArchitectureHardware & PerformanceDevOps Practices
WAL and PITR: When a pg_dump Is Not Enough
Turn on WAL archiving, take a base backup, and restore to a chosen timestamp so a bad write does not cost you a full day of PostgreSQL data.
Databases9 min read
Charsets, Collations, and utf8mb4 from Day One
Set utf8mb4 and a modern collation at create time so emoji, Hindi text, and joins do not become a painful migration project later on a live VPS.
Databases8 min read
Redis Pub/Sub: When to Use It and When Not
Use Redis pub/sub for live fan-out on one host, and skip it when you need persistence, retries, or consumer groups that Streams already provide.
Databases8 min read
logrotate: Keep VPS Logs From Filling the Disk
Configure logrotate so leftover text logs cannot fill a VPS root disk, with size caps, copytruncate versus create, and a dry-run habit before you need it.
Observability8 min read
Celery or a Simple Queue When Python Needs Two Processes
Know when a second process is required for Celery or a simple Redis queue so web requests stay fast while emails and reports run in the background.
App Deployment8 min read
Idempotent VPS Provisioning from a REST API
Wrap Netbay purchase calls in client-side idempotency so retries, CI jobs, and incident runbooks never double-buy a VPS when a request is replayed.
Cloud Architecture8 min read
HTTPS, Security Headers, and Hiding PHP Version
Terminate TLS on nginx, send strict security headers, and hide PHP and nginx versions so scanners see a boring VPS instead of a versioned attack surface.
App Deployment8 min read
Observability-Driven Architecture for VPS Apps
Let SLOs, traces, and queue age decide when to split a node, shed load, or move work off the request path instead of guessing from CPU charts.
Cloud Architecture8 min read
Measuring CI: Cycle Time, Lead Time, and Failed Builds
Track cycle time, lead time, and failed-build rate to make CI faster and more reliable, and use the numbers to drive real improvement.
CI/CD5 min read
Action Security: Pinning, Permissions and Third-Party Risk
Reduce supply-chain risk in GitHub Actions by pinning third-party actions to a commit SHA, granting least-privilege permissions, and guarding your secrets.
GitHub8 min read
Release Automation: Tagging, Changelogs, and Release Notes
Turn releases into a scripted habit with semantic tags, automated changelogs, and release notes assembled from your merged pull requests, in one command.
GitHub6 min read