Self-Hosting Immich: High-Performance Photo Management on Linux VPS
Deploy and tune Immich on Ubuntu for private, high-speed mobile photo backup, configuring machine learning microservices and pgvector storage.
Self-Hosting7 min read
NetBay journal
Guides for operators
Practical guides for Linux, containers, CI/CD, self-hosting, and running VPS infrastructure from Netbay Engineering.
599 articles · 24 topics
AllLinuxLinux AdministrationWindowsLinux SecurityLinux NetworkingContainersContainers & OrchestrationKubernetesCI/CDGitHubSelf-HostingBackups & DataDatabasesApp DeploymentDNS & TLSObservabilityEmailAI AgentsAI InfrastructureAPI & AutomationProxiesCloud ArchitectureHardware & PerformanceDevOps Practices
Automated Canary Deployments with Caddy Reverse Proxy and Prometheus Metrics
Route fractional production traffic to new releases with dynamic weight balancing and automatic rollback on elevated HTTP 5xx error anomalies.
DevOps Practices5 min read
Windows Server Firewall: Scripting Custom IPsec and Rules
Automate advanced network defense on Windows Server VPS with PowerShell scripts creating stateful port filters and encrypted IPsec transport rules.
Windows7 min read
Implementing DNSSEC with BIND9: Zone Signing, Key Rollovers, and DS Validation
Protect your domain from DNS spoofing and cache poisoning by generating KSK/ZSK key pairs, signing BIND9 zones, and publishing DS records at your registrar.
DNS & TLS7 min read
Self-Hosting Nextcloud Hub: Production PHP-FPM, Valkey, and Cron Tuning
Configure enterprise-grade self-hosted collaboration with Nextcloud Hub on Ubuntu 24.04, optimizing PHP 8.3 OPcache, Valkey file locking, and systemd cron.
Self-Hosting8 min read
Hardened Self-Hosted GitHub Actions Runners on Ephemeral VPS Instances
Speed up intensive build and testing workloads by 10x using dedicated bare-metal VPS runners with automated ephemeral token registration and sandbox resets.
GitHub7 min read
Scaling Event-Driven Background Workers with BullMQ and Valkey
Offload compute-heavy background tasks from the HTTP event loop using BullMQ and Valkey on Linux, managing concurrency, retries, and job telemetry.
API & Automation7 min read
IIS 10 Performance Tuning: HTTP/3, TLS 1.3, and Worker Pools
Maximize web throughput on Windows Server by enabling HTTP/3 QUIC, tuning TLS 1.3 cipher suites, and optimizing IIS worker application pools.
Windows6 min read
Automating Wildcard TLS Certificates with Let's Encrypt DNS-01 and Certbot Hooks
Issue and automatically renew wildcard SSL/TLS certificates using Certbot DNS-01 validation scripts without exposing port 80 to the internet.
DNS & TLS6 min read
Hermetic CI/CD Pipelines: Bit-for-Bit Reproducible Builds with Nix Flakes
Banish 'works on my machine' build anomalies forever by isolating compiler dependencies, system toolchains, and runtime environments with Nix.
CI/CD7 min read
API Contract Testing and Linting with OpenAPI 3.1 and Spectral
Automate API quality and prevent breaking changes using OpenAPI 3.1 specifications, Spectral ruleset linting, and Schemathesis property testing.
API & Automation6 min read
Windows Server 2025 Core: Headless PowerShell Remoting Guide
Manage lightweight, GUI-free Windows Server 2025 Core instances over secure HTTPS WinRM and OpenSSH using modern PowerShell 7.
Windows5 min read