Modern Web Stack with Docker Compose and Caddy Ingress
Set up a clean, production-ready multi-container web stack with Docker Compose and Caddy, featuring automated Let's Encrypt TLS and isolated networks.
App Deployment7 min read
NetBay journal
Guides for operators
Practical guides for Linux, containers, CI/CD, self-hosting, and running VPS infrastructure from Netbay Engineering.
599 articles · 24 topics
AllLinuxLinux AdministrationWindowsLinux SecurityLinux NetworkingContainersContainers & OrchestrationKubernetesCI/CDGitHubSelf-HostingBackups & DataDatabasesApp DeploymentDNS & TLSObservabilityEmailAI AgentsAI InfrastructureAPI & AutomationProxiesCloud ArchitectureHardware & PerformanceDevOps Practices
Linux PAM Hardening: Multi-Factor Auth, Limits, and Lockouts
Secure Linux user authentication using Pluggable Authentication Modules (PAM) with Google Authenticator MFA, faillock brute-force protection, and limits.
Linux Security5 min read
Building Immutable VPS Golden Images with Packer and QEMU Automation
Eliminate configuration drift by baking hardened, pre-patched cloud images with systemd security policies and automated vulnerability scanning.
DevOps Practices6 min read
High-Performance Caddy 2 Reverse Proxy with Rate Limiting and Dynamic Upstreams
Configure Caddy 2 as a zero-maintenance reverse proxy with automatic TLS, active health checking, and IP-based rate limiting on a Linux VPS.
Proxies5 min read
Running Production Bun Microservices with Systemd and Caddy
Deploy high-throughput TypeScript microservices with the Bun runtime on Ubuntu 24.04, securing processes with systemd sandboxing and Caddy.
App Deployment6 min read
Modern nftables Ruleset Design: Sets, Maps, and Stateful Firewalls
Replace slow linear iptables rules with high-performance nftables interval sets, verdict maps, and connection tracking on production Linux.
Linux Networking8 min read
Hierarchical Agent Supervisors: Designing Deterministic Finite State Machines
Prevent infinite looping and context drift in complex agent systems by decoupling task planning from worker execution through typed state machines.
AI Agents8 min read
Persistent Storage in Kubernetes: Configuring Local Path Provisioner on VPS
Deploy fast, reliable stateful workloads on Kubernetes using the Local Path Provisioner mapped directly to high-speed SSD VPS storage.
Kubernetes8 min read
Practical Blue-Green Deployments with Nginx and Systemd Sockets
Achieve zero-packet-loss blue-green releases on a single Linux VPS using dual systemd service instances and atomic Nginx upstream reloads.
App Deployment7 min read
Linux Traffic Control and CAKE: Eliminating Bufferbloat
Eliminate latency spikes and packet buffering bottlenecks under high load by deploying CAKE queue discipline via Linux tc.
Linux Networking7 min read
Scaling Milvus Vector Search on Enterprise NVMe SSDs for Billion-Scale RAG
Tune HNSW index graphs, memory-mapped vector segments, and disk-ann partitions for million-query-per-minute semantic retrieval architectures.
AI Infrastructure6 min read
Implementing Kubernetes Network Policies for Strict Pod-to-Pod Isolation
Enforce zero-trust pod communication within your Kubernetes cluster using declarative NetworkPolicy rules to block unauthorized ingress and egress.
Kubernetes7 min read