Off-Site Backups with rclone to Object and Cloud Storage
Ship encrypted directory dumps to object and cloud storage with rclone sync, and keep the off-site copy of your 3-2-1 both cheap and automatic.
Backups & Data7 min read
NetBay journal
Guides for operators
Practical guides for Linux, containers, CI/CD, self-hosting, and running VPS infrastructure from Netbay Engineering.
499 articles · 24 topics
AllLinuxLinux AdministrationWindowsLinux SecurityLinux NetworkingContainersContainers & OrchestrationKubernetesCI/CDGitHubSelf-HostingBackups & DataDatabasesApp DeploymentDNS & TLSObservabilityEmailAI AgentsAI InfrastructureAPI & AutomationProxiesCloud ArchitectureHardware & PerformanceDevOps Practices
Profiling a Slow Server from First Principles, Top to Code
A repeatable drill that walks a slow VPS from the uptime command and top down to a hot function, so you fix the real bottleneck instead of chasing a symptom.
Hardware & Performance9 min read
Ubuntu Server vs Fedora Server: Practical Differences That Matter
Release cadence, support windows, apt versus dnf, AppArmor versus SELinux, and upgrade mechanics: the practical gaps between Ubuntu Server and Fedora Server.
Linux7 min read
Hardening Services with systemd Sandboxing: ProtectSystem, PrivateTmp, and More
Use ProtectSystem, PrivateTmp, NoNewPrivileges, and friends to sandbox any service, then verify the restrictions with systemd-analyze security.
Linux Administration7 min read
Rollback Strategies That Are Tested, Not Improvised
Stop improvising rollbacks in incidents. Define, script, and rehearse rollback in CI so a bad release is undone fast and safely.
CI/CD6 min read
Building and Pushing Container Images in GitHub Actions
Build multi-arch container images with Docker Buildx in GitHub Actions, tag them with metadata-action, and push to a registry with layer caching.
GitHub8 min read
Designing Webhook Endpoints Clients Can Trust
Webhooks fail, arrive twice, and get spoofed. Sign payloads, retry with backoff, and make handlers idempotent so clients build on them safely.
API & Automation7 min read
Keeping Self-Hosted Apps Updated Automatically
Automate image and dependency updates with watchtower and Renovate so your self-hosted stack stays patched without breaking your careful setup.
Self-Hosting7 min read
Managing Secrets on a VPS: Permissions, Env, Vault
Store API keys and tokens safely on a Linux VPS with strict file permissions, protected environment files, and vault basics that survive a leak.
Linux Security7 min read
Keeping a Monorepo Sane: CODEOWNERS and Path-Scoped Checks
A large monorepo only stays usable with clear ownership. Use CODEOWNERS routing and path-scoped CI to keep review targeted and merges stay fast.
GitHub7 min read
A Layered API Security Checklist for Production
A production-ready API security checklist covering transport, auth, validation, throttling, and monitoring before you ship your API to production.
API & Automation8 min read
Zero-Downtime Node Restarts with systemd Sockets
Keep the listening socket in systemd so Node restarts do not drop the bind, and nginx clients stop seeing connection refused during deploys.
App Deployment8 min read