WhiteNoise vs Nginx for Python Static Files
Decide when WhiteNoise is enough for Django static files and when nginx should serve them, so your Python app stays fast without extra moving parts.
App Deployment7 min read
NetBay journal
Guides for operators
Practical guides for Linux, containers, CI/CD, self-hosting, and running VPS infrastructure from Netbay Engineering.
599 articles · 24 topics
AllLinuxLinux AdministrationWindowsLinux SecurityLinux NetworkingContainersContainers & OrchestrationKubernetesCI/CDGitHubSelf-HostingBackups & DataDatabasesApp DeploymentDNS & TLSObservabilityEmailAI AgentsAI InfrastructureAPI & AutomationProxiesCloud ArchitectureHardware & PerformanceDevOps Practices
Control Plane vs Data Plane for a Small SaaS
Split admin, billing, and provisioning from request serving on one VPS so a hung control action cannot stall the path your customers actually hit.
Cloud Architecture8 min read
Agent Guardrails: Allowlists, Dry-Run, Approval
Ship ops-agent guardrails that actually hold: tool allowlists, default dry-run, and a human approval file before any write hits a Linux VPS.
AI Agents8 min read
Run Docker as Non-Root with a Read-Only Rootfs
Run containers as a non-root user on a read-only root filesystem with tmpfs for scratch space, and cut a wide slice out of container escape risk.
Containers7 min read
Off-Site Backups with rclone to Object and Cloud Storage
Ship encrypted directory dumps to object and cloud storage with rclone sync, and keep the off-site copy of your 3-2-1 both cheap and automatic.
Backups & Data7 min read
Profiling a Slow Server from First Principles, Top to Code
A repeatable drill that walks a slow VPS from the uptime command and top down to a hot function, so you fix the real bottleneck instead of chasing a symptom.
Hardware & Performance9 min read
Ubuntu Server vs Fedora Server: Practical Differences That Matter
Release cadence, support windows, apt versus dnf, AppArmor versus SELinux, and upgrade mechanics: the practical gaps between Ubuntu Server and Fedora Server.
Linux7 min read
Hardening Services with systemd Sandboxing: ProtectSystem, PrivateTmp, and More
Use ProtectSystem, PrivateTmp, NoNewPrivileges, and friends to sandbox any service, then verify the restrictions with systemd-analyze security.
Linux Administration7 min read
Rollback Strategies That Are Tested, Not Improvised
Stop improvising rollbacks in incidents. Define, script, and rehearse rollback in CI so a bad release is undone fast and safely.
CI/CD6 min read
Building and Pushing Container Images in GitHub Actions
Build multi-arch container images with Docker Buildx in GitHub Actions, tag them with metadata-action, and push to a registry with layer caching.
GitHub8 min read
Designing Webhook Endpoints Clients Can Trust
Webhooks fail, arrive twice, and get spoofed. Sign payloads, retry with backoff, and make handlers idempotent so clients build on them safely.
API & Automation7 min read
Keeping Self-Hosted Apps Updated Automatically
Automate image and dependency updates with watchtower and Renovate so your self-hosted stack stays patched without breaking your careful setup.
Self-Hosting7 min read