Building Multi-Arch Images with Docker Buildx
Build one image tag for amd64 and arm64 with Docker Buildx, push a single manifest, and verify every platform with buildx imagetools inspect.
Containers8 min read
NetBay journal
Guides for operators
Practical guides for Linux, containers, CI/CD, self-hosting, and running VPS infrastructure from Netbay Engineering.
599 articles · 24 topics
AllLinuxLinux AdministrationWindowsLinux SecurityLinux NetworkingContainersContainers & OrchestrationKubernetesCI/CDGitHubSelf-HostingBackups & DataDatabasesApp DeploymentDNS & TLSObservabilityEmailAI AgentsAI InfrastructureAPI & AutomationProxiesCloud ArchitectureHardware & PerformanceDevOps Practices
Building a Self-Hosted Photo Library With Immich
Organize, search, and share your photos with Immich or Piwigo, self-hosted photo libraries with automatic backup, face recognition, and search.
Self-Hosting8 min read
Resource Budgeting for Many Containers on One Box
Budget RAM and CPU across a crowded Docker host with explicit per-service limits and visibility so one runaway container never starves the rest.
Self-Hosting7 min read
Wildcard Certificates: When They Help and Hide Mistakes
Decide when a wildcard certificate helps on a VPS and when it hides hostname mistakes, extra names, and the extra ACME DNS-01 operational cost.
DNS & TLS7 min read
Mail-Tester, Headers, and Received Chains
A 10/10 mail-tester score is not inbox placement. Read Authentication-Results, the Received chain, and spam headers on a real Gmail or Outlook copy.
Email8 min read
ssh-audit and Disabling Legacy SSH Algorithms
Run ssh-audit against sshd, drop SHA-1 and CBC from the offer list, and keep a modern kex, cipher, and MAC set that still works with OpenSSH 9.
Linux Administration9 min read
Helm Basics: Packaging and Templating Kubernetes Charts
Package manifests into reusable Helm charts, parameterize values with Go templates, and install releases with a single command.
Kubernetes7 min read
CORS: What It Protects and Common Misconfigurations
Understand the same-origin policy, preflight requests, and the CORS mistakes that silently expose your API to arbitrary origins and attackers.
API & Automation7 min read
MTU, TCP Tuning, and the net.* sysctl Knobs
Tune MTU and TCP stack parameters through net.core and net.ipv4 sysctl knobs to improve throughput and reduce latency on Linux.
Linux Networking8 min read
Back Up a Windows VPS from the Command Line
Back up a Windows VPS from PowerShell and wbadmin: system state, selected files, and scheduled jobs you can restore without opening Server Manager.
Windows9 min read
Move the MariaDB Datadir to a Dedicated Disk
Move the MariaDB datadir onto a dedicated High-Speed SSD volume with a clean stop, copy, permission fix, and a systemd-aware restart you can reverse.
Databases9 min read
systemd Unit, Restart, and Log Rotation for Redis
Run Redis under the distro systemd unit with a sensible restart policy, then rotate logs so a busy instance cannot fill High-Speed SSD with redis.log.
Databases8 min read