A Docker Security Checklist for Production Hosts
A production-ready Docker checklist: hardened host, minimal pinned images, non-root read-only runtime, capability drops, limits, and clean network hygiene.
Containers9 min read
NetBay journal
Guides for operators
Practical guides for Linux, containers, CI/CD, self-hosting, and running VPS infrastructure from Netbay Engineering.
499 articles · 24 topics
AllLinuxLinux AdministrationWindowsLinux SecurityLinux NetworkingContainersContainers & OrchestrationKubernetesCI/CDGitHubSelf-HostingBackups & DataDatabasesApp DeploymentDNS & TLSObservabilityEmailAI AgentsAI InfrastructureAPI & AutomationProxiesCloud ArchitectureHardware & PerformanceDevOps Practices
Horizontal Scaling with HPA on a Single Node: Honest Limits
Autoscale your workloads with a HorizontalPodAutoscaler, and understand the honest capacity limits on a single-node cluster.
Kubernetes6 min read
Upgrade MariaDB Minor Versions Without Panic
Run a MariaDB minor upgrade as a rehearsal: dump, hold check, package update, mariadb-upgrade, and a rollback path you have already typed out.
Databases9 min read
A One-Weekend Observability Stack That Stays Small
Assemble a weekend metrics, logs, and alerts stack on one VPS with hard RAM and disk caps so the observers never crowd out the application you run.
Observability9 min read
Fixture-Based Evals for Production Ops Agents
Score ops agents against frozen fixtures for SQL safety, command allowlists, and citation honesty so a model change cannot silently break production habits.
AI Agents8 min read
DHCP on Linux Servers: When to Use It and Why It Surprises
Understand DHCP client behavior on Linux servers, why addresses change unexpectedly, and when static config is the safer choice.
Linux Networking6 min read
A Minimal CI Pipeline with GitHub Actions YAML
Build a clean, working GitHub Actions workflow from scratch with a step-by-step YAML walkthrough you can copy.
CI/CD8 min read
When a Script Is Better Than an AI Agent
Choose a cron script over an AI agent when the steps are known, the failure is binary, and a Linux VPS should not spend tokens to restart nginx.
AI Agents8 min read
Disk Layout for Models, Caches, and Indexes
Put models, embedding caches, git clones, and SQLite indexes on separate paths so a full cache cannot bury the OS on a single Lucknow VPS disk.
AI Infrastructure8 min read
Securing the Admin Surfaces of Self-Hosted Dashboards
Harden every admin dashboard, panel, and control surface in your self-hosted stack so the tools that manage it cannot become its weak point.
Self-Hosting7 min read
Agent Identity, API Keys, and Secret Isolation
Give each agent its own Unix user, env file, and scoped API keys so a leaked worker key cannot drain the billing account or rewrite git history.
AI Agents8 min read
Rolling Back Package Updates on RHEL-Family Systems with DNF History
Every DNF transaction is numbered and stored. Learn to read dnf history, undo one bad update, or roll the whole system back to a known-good state.
Linux6 min read