Architecting Custom Composite GitHub Actions for High-Performance Monorepos
Design reusable, parameter-driven GitHub composite actions with multi-tier cache layers and selective test execution for rapid monorepo verification.
GitHub6 min read
NetBay journal
Guides for operators
Practical guides for Linux, containers, CI/CD, self-hosting, and running VPS infrastructure from Netbay Engineering.
599 articles · 24 topics
AllLinuxLinux AdministrationWindowsLinux SecurityLinux NetworkingContainersContainers & OrchestrationKubernetesCI/CDGitHubSelf-HostingBackups & DataDatabasesApp DeploymentDNS & TLSObservabilityEmailAI AgentsAI InfrastructureAPI & AutomationProxiesCloud ArchitectureHardware & PerformanceDevOps Practices
NUMA Architecture Tuning: CPU Pinning and Memory Affinity
Eliminate remote memory cross-talk penalties on multi-socket servers by mastering numactl, taskset, and kernel automatic NUMA balancing.
Hardware & Performance6 min read
Comprehensive DKIM Signing with OpenDKIM: 2048-bit Key Rollover and Postfix Milters
Implement OpenDKIM cryptographic signature verification on Postfix with automated 2048-bit key rotation and dual-milter pipeline integration.
Email6 min read
Architecting an OpenTelemetry Collector Pipeline for Metrics, Logs, and Traces
Build a high-performance OpenTelemetry Collector Contrib pipeline on Linux VPS, unifying OTLP ingestion, memory limiting, batching, and multi-backend export.
Observability8 min read
NVMe Storage Performance: io_uring and Queue Depth Profiling
Supercharge Linux storage throughput by replacing legacy libaio with io_uring submission/completion queues tuned for high queue-depth NVMe SSDs.
Hardware & Performance5 min read
Dynamic Ephemeral Staging Environments per Pull Request with Traefik and Wildcard DNS
Provision isolated preview URLs automatically for every pull request branch on a shared VPS host with automated Let's Encrypt wildcard certificates.
CI/CD8 min read
Building a Modern Postfix SMTP Relay: Rate Limiting, Mandatory TLS, and SASL Auth
Configure a rock-solid Postfix outbound SMTP relay with Cyrus SASL authentication, opportunistic-to-mandatory TLS, and per-domain outbound rate limits.
Email5 min read
Paperless-ngx Document Archiving: Automated OCR and Metadata Extraction
Transform paper files into a searchable digital archive with Paperless-ngx on Ubuntu, tuning Tesseract OCR, Celery workers, and email intake.
Self-Hosting7 min read
Keyless VPS Deployments via GitHub Actions OIDC and Short-Lived SSH Certificates
Eliminate static private deployment keys in GitHub secrets by exchanging OpenID Connect JWT tokens for temporary signed SSH credentials.
GitHub8 min read
Deploying Vaultwarden: Lightweight Self-Hosted Password Management
Host a secure, private Bitwarden-compatible vault with Vaultwarden on Linux, featuring WebSocket notifications, encrypted backups, and admin lockdown.
Self-Hosting6 min read
Windows Storage Spaces: Mirroring, Tiering, and IOPS Profiling
Build resilient, high-IOPS storage pools on Windows Server using two-way mirroring, performance tiers, and ReFS integrity streams.
Windows8 min read
Hardening TLS Configurations: OCSP Stapling, Forward Secrecy, and Cipher Priorities
Achieve an SSL Labs A+ rating by enforcing modern TLS 1.3 cipher suites, preloading HSTS headers, and configuring reliable OCSP stapling.
DNS & TLS8 min read