Securing Public Endpoints with Proxy Access Rules
Enforce IP allowlists, rate limits, and method filters at the proxy so unwanted hostile requests are rejected before they reach your application.
Proxies7 min read
NetBay journal
Guides for operators
Practical guides for Linux, containers, CI/CD, self-hosting, and running VPS infrastructure from Netbay Engineering.
599 articles · 24 topics
AllLinuxLinux AdministrationWindowsLinux SecurityLinux NetworkingContainersContainers & OrchestrationKubernetesCI/CDGitHubSelf-HostingBackups & DataDatabasesApp DeploymentDNS & TLSObservabilityEmailAI AgentsAI InfrastructureAPI & AutomationProxiesCloud ArchitectureHardware & PerformanceDevOps Practices
Orchestrating a Single Node: When One Machine Is Enough
Run several containerized services on one VPS with Compose, Podman Quadlets, and a reverse proxy — no cluster, no wasted capacity.
Containers & Orchestration8 min read
Hosting Your Own Notes With Joplin or Outline
Compare Joplin Server and Outline for self-hosted notes, then deploy one with Docker Compose to sync your Markdown notes across every device.
Self-Hosting7 min read
Secrets in Configuration Management Systems
Keep passwords and API keys out of git with Ansible Vault, sensitive Terraform variables, and rotation habits that work with real systems.
API & Automation8 min read
Retry, Timeout, Circuit Breakers for LLM APIs
Wrap every model HTTP call with timeouts, jittered retries, and a circuit breaker so one slow provider cannot stall every agent process on the box.
AI Agents8 min read
Namespaces and Resource Limits (Requests/Limits) on One Node
Organize workloads with namespaces and keep them from starving the node using resource requests and limits and ResourceQuota.
Kubernetes7 min read
Artifacts, Caches, and Dependencies Across Stages
Move build outputs between pipeline stages correctly while keeping dependencies cached and artifacts immutable.
CI/CD7 min read
Structured Node.js Logs Piped into journald
Write JSON logs from Node to stdout, let systemd capture them in journald, and query a single stream instead of rotating application log files.
App Deployment7 min read
Diagnose Latency and Packet Loss: ping, traceroute, mtr
Use ping, traceroute, and mtr to diagnose network latency and packet loss on a Linux VPS, and interpret the results correctly.
Linux Networking8 min read
Gentoo on a VPS: Realistic USE Flags and Compilation Strategy
The honest picture of Gentoo on a small VPS: profile defaults, a USE budget, MAKEOPTS that match your cores, and binary packages when it matters.
Linux7 min read
RPM in Practice: Querying, Verifying, and Extracting Packages
RPM quietly records files on your RHEL-family server. Learn to query ownership, verify file integrity, and extract package contents without installing them.
Linux7 min read
Database Migrations in CI: Testing Schema Changes Early
Test database migrations in CI — against real databases, in order, with rollbacks — so schema changes do not break production at deploy.
CI/CD7 min read