Rate Limiting Your REST API with HTTP 429
Rate limiting protects both sides of an API. Token buckets, the standard 429 headers, and what well-behaved clients should do with Retry-After.
API & Automation7 min read
NetBay journal
Guides for operators
Practical guides for Linux, containers, CI/CD, self-hosting, and running VPS infrastructure from Netbay Engineering.
599 articles · 24 topics
AllLinuxLinux AdministrationWindowsLinux SecurityLinux NetworkingContainersContainers & OrchestrationKubernetesCI/CDGitHubSelf-HostingBackups & DataDatabasesApp DeploymentDNS & TLSObservabilityEmailAI AgentsAI InfrastructureAPI & AutomationProxiesCloud ArchitectureHardware & PerformanceDevOps Practices
Gentoo and Source-Based Distros: When Compiling Everything Is Worth It
What USE flags and source-based installs actually buy you on Gentoo, when compiling everything pays off on a VPS, and when a binary distro is the better bet.
Linux7 min read
Monitoring Every Self-Hosted Service at a Glance
Aggregate all your self-hosted services into one Grafana overview with Prometheus scraping, alerts, and a status page you can actually trust.
Self-Hosting8 min read
Implementing Refresh Tokens Safely in Production
Field-proven guidance on issuing, rotating, storing, and revoking refresh tokens without introducing session-hijack security holes for your API.
API & Automation8 min read
PM2 vs systemd for Node.js: Why systemd Wins
Compare PM2 and systemd for a single Ubuntu VPS and see why the init system you already run is the better supervisor for Node.js in production.
App Deployment8 min read
Webhook-Triggered Agents from GitHub Events
Verify GitHub HMAC signatures, enqueue the JSON payload, and let a worker agent comment or label, so a webhook never blocks on a model API call.
AI Agents8 min read
Adding 2FA for SSH Logins with PAM, TOTP, and U2F
Require a second factor for SSH with TOTP via PAM or a hardware U2F key, without breaking key-only automation or locking out legitimate users.
Linux Security7 min read
WireGuard Setup on a Linux VPS: Networking Primer
Set up WireGuard on a Linux VPS with a focus on the underlying networking: peers, keys, routing, and MTU considerations.
Linux Networking9 min read
Keeping Pipelines Green: Discipline, Quarantine, and Triage
A red pipeline is a process failure, not a fact of life. Learn quarantine, flaky-test triage, and the discipline that keeps CI green.
CI/CD6 min read
GitHub Projects for Lightweight Issue Tracking
Skip the Jira setup week. GitHub Projects wires boards, tables, and roadmaps to your existing issues and pull requests, and automation keeps statuses fresh.
GitHub6 min read
Support Classifier Agent That Routes Tickets
Classify incoming support mail into billing, SSH, DNS, and abuse queues with extracted hostnames and a confidence gate that falls back to a human.
AI Agents8 min read
Secrets, Env, and Least Privilege Across Nodes
Give each VPS only the secrets it needs: split EnvironmentFiles, systemd credentials, and per-role database users so a stolen node is not a stolen fleet.
Cloud Architecture8 min read