DR for a Single Datacenter: RPO and RTO Plans
Set honest RPO and RTO numbers when the origin is one Lucknow datacenter: replica nodes, tested restores, and offsite copies you actually own.
Cloud Architecture8 min read
NetBay journal
Guides for operators
Practical guides for Linux, containers, CI/CD, self-hosting, and running VPS infrastructure from Netbay Engineering.
499 articles · 24 topics
AllLinuxLinux AdministrationWindowsLinux SecurityLinux NetworkingContainersContainers & OrchestrationKubernetesCI/CDGitHubSelf-HostingBackups & DataDatabasesApp DeploymentDNS & TLSObservabilityEmailAI AgentsAI InfrastructureAPI & AutomationProxiesCloud ArchitectureHardware & PerformanceDevOps Practices
Indexes That Get Used: PostgreSQL EXPLAIN Basics
Read EXPLAIN ANALYZE until you can tell a Seq Scan from an Index Scan, then add btree indexes that match filters, joins, and ORDER BY clauses.
Databases9 min read
Install WordPress on a VPS Without a Marketplace
Install WordPress by hand on Ubuntu with nginx, PHP-FPM, and MariaDB: core files, wp-config, permalinks, and hardening without a one-click app marketplace.
App Deployment9 min read
Cron Agents: Scheduled LLM Jobs on Linux VPS
Schedule LLM work with systemd timers, lock files, and spend caps so nightly jobs finish, log, and fail loud instead of overlapping on your VPS.
AI Agents8 min read
SELinux for Beginners: Understanding Enforcing, Permissive, and Targeted
SELinux denies by default where file permissions allow everything. Understand enforcing, permissive, targeted policy, and how to read a denial calmly.
Linux7 min read
OpenID Connect Instead of Static Secrets in GitHub Actions
Replace long-lived cloud credentials in GitHub Actions with OpenID Connect — short-lived minted tokens bound to your repository by a trust policy.
GitHub8 min read
Forward Proxies: When a Server Proxies Outbound Traffic
Forward proxies relay outbound requests from your clients to the internet; learn when you need one and how to run a small, safe one on your VPS.
Proxies6 min read
DMARC Policy: From None to Reject Safely
Start DMARC at p=none, read aggregate reports, then raise to quarantine and reject once every legitimate sender aligns. Do not skip the report week.
Email8 min read
Read-Only SQL Analyst Agent for Postgres
Give an agent a SELECT-only Postgres role and a table allowlist so it can explain slow queries and row counts without ever writing to production.
AI Agents8 min read
Fine-Tuning Is Usually the Wrong First LLM Step
Evaluate prompts, retrieval, and routing on a VPS before you collect a fine-tune set, because most quality gaps are instructions and data, not weights.
AI Infrastructure8 min read
systemd Units and journalctl: Inspecting Services Properly
Learn how systemd units define services, how to control them, and how journalctl gives you structured service logs.
Linux6 min read
openSUSE Leap vs Tumbleweed: The Server Deep Dive
Leap for point-release calm, Tumbleweed for rolling freshness on the same project. Compare patches, snapshots, and testing before you host anything.
Linux8 min read