HTTP Methods and Idempotency in Practice
GET, PUT, DELETE, and POST each carry a different retry guarantee. Use the method contract plus idempotency keys so clients retry safely.
API & Automation6 min read
NetBay journal
Guides for operators
Practical guides for Linux, containers, CI/CD, self-hosting, and running VPS infrastructure from Netbay Engineering.
499 articles · 24 topics
AllLinuxLinux AdministrationWindowsLinux SecurityLinux NetworkingContainersContainers & OrchestrationKubernetesCI/CDGitHubSelf-HostingBackups & DataDatabasesApp DeploymentDNS & TLSObservabilityEmailAI AgentsAI InfrastructureAPI & AutomationProxiesCloud ArchitectureHardware & PerformanceDevOps Practices
How to Choose a Linux Distro for a Production VPS: A Decision Framework
Five questions that settle the distro choice for a production VPS: support windows, server lifetime, runtime needs, team familiarity, and ecosystem fit.
Linux8 min read
Managing Processes with ps, top, htop, kill, and nice
Identify runaway processes, understand their resource usage, and manage them cleanly using core Linux process tools.
Linux6 min read
Writing sudoers Rules That Are Actually Least-Privilege
Replace blanket sudo with scoped sudoers entries: command allowlists, aliases, NOPASSWD, and runas restrictions that survive a security review.
Linux Security7 min read
systemd Timers vs Cron: Which Scheduler for Modern Servers?
Compare systemd timers with cron across persistence, logging, dependencies, and randomization, and learn when each scheduler is the right tool.
Linux Administration6 min read
GitHub Apps vs PATs: Scoping Machine Access to Repos
A leaked personal token hands over your whole account. Scope every automation with a GitHub App or a fine-grained PAT — and rotate tokens by design.
GitHub7 min read
TCP and Kernel Tuning for Latency-Sensitive Servers
Practical sysctl changes for high-traffic Linux servers, from socket buffers to queuing, that reduce latency without touching application code.
Hardware & Performance8 min read
Keep Node.js Secrets Out of Git with env Files
Load production secrets from a root-owned env file, keep them out of git, and wire EnvironmentFile so systemd injects those values at start time.
App Deployment7 min read
Config and Feature Flags Without a SaaS Service
Ship flags as Postgres rows plus a local cache so you can dark-launch and halt features without a vendor SDK or a round trip on every request.
Cloud Architecture8 min read
Fedora Server Initial Setup: SELinux-First Habits That Stick
A Fedora Server baseline from first boot with SELinux enforcing as the starting posture: users, sshd, firewalld, denials you can read, and upgrades you plan.
Linux7 min read
Lock Down pg_hba.conf So Postgres Is Not Public
Rewrite pg_hba.conf with scram-sha-256, no 0.0.0.0/0, and one CIDR per role so PostgreSQL 16 rejects every host you did not explicitly name.
Databases8 min read
firewalld Zones and Services: The RHEL-Family Firewall Guide
firewalld ships enabled on every RHEL-family install, so learn zones, services, permanent rules, and rich rules before an open port becomes an incident.
Linux8 min read