RAM Planning: Spotting Memory Pressure Before the OOM Killer
Learn to read memory pressure on a VPS, distinguish reclaimable cache from real usage, and size your RAM well before the OOM killer ever acts.
NetBay journal
Practical guides for Linux, containers, CI/CD, self-hosting, and running VPS infrastructure from Netbay Engineering.
599 articles · 24 topics
Learn to read memory pressure on a VPS, distinguish reclaimable cache from real usage, and size your RAM well before the OOM killer ever acts.
Both rebuild RHEL source, but governance, release cadence, and tooling differ. Compare the two CentOS successors on facts that matter for production.
A step-by-step Nginx reverse proxy from a clean VPS: install, server blocks, proxy_pass, upstreams, and the header set you need for real client IPs.
Mutual TLS verifies both sides of a connection with certificates. Learn when client certificates genuinely matter and how to enforce them at your proxy edge.
Receivers reject mail when PTR, HELO, and the A record disagree. Align the hostname, reverse DNS, and Postfix myhostname before you send mail.
Send easy prompts to a cheap model and escalate only when a classifier, token budget, or failed JSON parse says the expensive model is worth it.
Run next start under PM2 on a loopback port, keep it alive across reboots, and put Nginx in front with the proxy headers Next.js expects to see.
Factor repeated pipeline logic into reusable GitHub Actions workflows with typed inputs and secrets, and share one tested CI definition across repositories.
Tune the few php.ini knobs that matter in production: memory_limit, upload sizes, and opcache, so a 2 GB VPS serves PHP without swap or silent upload failures.
Learn the [Unit], [Service], and [Install] sections, pick the right Type=, and ship a production-ready unit file for your own application on any modern distro.
Pick the pull-request checks that actually protect a branch, and wire them into CI so review stops shipping known-bad merges.
Use Caddy for automatic TLS, http-to-https redirects, and controlled exposure of internal apps without opening more than the ports you intend.