Automating PostgreSQL Backups with pg_dump and Cron
A clean cron-driven pipeline for PostgreSQL: automated pg_dump archives, per-database isolation, retention pruning, and a simple integrity audit.
Backups & Data7 min read
NetBay journal
Guides for operators
Practical guides for Linux, containers, CI/CD, self-hosting, and running VPS infrastructure from Netbay Engineering.
599 articles · 24 topics
AllLinuxLinux AdministrationWindowsLinux SecurityLinux NetworkingContainersContainers & OrchestrationKubernetesCI/CDGitHubSelf-HostingBackups & DataDatabasesApp DeploymentDNS & TLSObservabilityEmailAI AgentsAI InfrastructureAPI & AutomationProxiesCloud ArchitectureHardware & PerformanceDevOps Practices
Ollama on Ubuntu: Install, Pull, and systemd
Install Ollama on Ubuntu 24.04, pull a small 3B GGUF-backed model, and run it under systemd on an Intel Xeon Platinum CPU VPS without a GPU.
AI Infrastructure8 min read
Restricting API Access by IP and Network Rules
Layer IP allow-lists, firewall rules, and private networking to lock down your API to a narrow trust boundary that rejects unknown strangers.
API & Automation6 min read
Connect to a Windows VPS with RDP Without Exposure
Lock RDP to known IPs, require Network Level Auth, and tunnel when needed. A public 3389 listener is not a remote-admin plan for a Windows VPS.
Windows8 min read
Users, Grants, and Remote Access Without Opening 3306
Create MariaDB users with tight hosts, grant least privilege, and reach the server over SSH instead of exposing TCP 3306 to the public internet.
Databases9 min read
Redis requirepass, ACLs, and Closing Port 6379
Lock Redis with requirepass or ACL users, keep 6379 off the public interface, and layer bind, auth, and a host firewall so scanners never get a PONG.
Databases8 min read
Run node_exporter and Prometheus on One VPS Node
Install node_exporter and Prometheus as systemd services on a single VPS, scrape localhost only, and keep the time series store small and restart-safe.
Observability9 min read
Run Gunicorn Behind Nginx for a WSGI Python App
Put Gunicorn behind nginx so a WSGI Python app serves TLS, buffering, and workers without exposing the application server to the public internet.
App Deployment8 min read
Reverse Proxy, App, and Database Failure Domains
Split proxy, app, and database into three failure domains on one VPS so a crash, a leak, or a lock does not take the whole stack down with it.
Cloud Architecture8 min read
Tool Calling Without a Framework on Linux VPS
Call tools from a chat model with a plain Python loop on Ubuntu: JSON schemas, a dispatch table, retries, and a hard stop without a heavy agent framework.
AI Agents8 min read
Log-Triage Agent Over journalctl on a VPS
Pipe journalctl output into an agent that fingerprints units, severity, and next checks so 3 a.m. log floods become a ranked shortlist, not a 40,000-line paste.
AI Agents8 min read
Maintaining a Rolling-Release Server: Arch Update Strategies That Work
A workable update policy for Arch servers: weekly windows, provider snapshots, .pacnew merges, package downgrades, and when to rebuild instead of updating.
Linux7 min read