NetBay journal

Guides for operators

Practical guides for Linux, containers, CI/CD, self-hosting, and running VPS infrastructure from Netbay Engineering.

599 articles · 24 topics

Put PgBouncer in front of PostgreSQL 16 so app workers share a small pool of backends instead of opening one backend process per HTTP request.

Tune TLS 1.2 and 1.3 plus ciphers for nginx without cargo-cult SSL Labs chasing, and read a test grade as a checklist rather than a trophy hunt.

Hard bounces must suppress the address. Soft bounces may retry with a cap. Infinite queues hurt IP reputation and hide dead users in your app.

Split sshd policy with Match User, Group, and Address so git, sftp, humans, and CI automation stop sharing one global sshd_config on the VPS.

Search files by name, size, and age with find, and pipe results to xargs for safe batch operations.

OpenAPI turns an API into living documentation with examples, schemas, and generated clients. Write it early, lint it in CI, keep it fresh.

How to benchmark CPU, RAM, disk, and network on a VPS so the numbers are actually meaningful, and the common traps that make those numbers lie.

Detect file and rootkit infections on a Linux VPS by combining ClamAV signature scanning with rkhunter rootkit checks and disciplined scans.

Design API key rotation and revocation workflows so a leaked key becomes a small, contained event instead of a full platform emergency.

Design deployment stages with environments, required checks, and manual approval gates between you and production.

Share a folder on a Windows VPS with SMB, then set NTFS ACLs so share permissions and file ACLs agree. Least privilege beats Everyone Full Control.

Know when a MariaDB replica on a second VPS earns its keep for reads and backups, and when it only adds lag, failover fiction, and extra cost.