Container Network Isolation: Bridging Namespaces and Custom IPAM on Linux
Explore how Linux network namespaces, veth pairs, and custom Docker bridge networks isolate frontend services from backend databases.
Containers & Orchestration8 min read
NetBay journal
Guides for operators
Practical guides for Linux, containers, CI/CD, self-hosting, and running VPS infrastructure from Netbay Engineering.
599 articles · 24 topics
AllLinuxLinux AdministrationWindowsLinux SecurityLinux NetworkingContainersContainers & OrchestrationKubernetesCI/CDGitHubSelf-HostingBackups & DataDatabasesApp DeploymentDNS & TLSObservabilityEmailAI AgentsAI InfrastructureAPI & AutomationProxiesCloud ArchitectureHardware & PerformanceDevOps Practices
Point-in-Time Recovery with pgBackRest and Continuous WAL Streaming
Configure pgBackRest on Ubuntu for continuous PostgreSQL 16 WAL archiving, non-blocking asynchronous push, and precise point-in-time database restores.
Backups & Data8 min read
Event-Driven CQRS Architecture on High-Throughput VPS Nodes with NATS JetStream
Scale read/write decoupled microservices using NATS JetStream persistent log streams, avoiding Kafka cluster management overhead on dedicated cloud servers.
Cloud Architecture6 min read
Linux Kernel Crash Dump Setup: Configuring kdump and crash
Configure kexec-tools, reserve crashkernel memory, and inspect vmcore memory dumps with the crash utility to diagnose server panics.
Linux Administration7 min read
Lightweight Workload Orchestration with HashiCorp Nomad on a Linux VPS
Run containerized and raw binary microservices effortlessly on a single VPS with HashiCorp Nomad, cutting memory overhead compared to full Kubernetes.
Containers & Orchestration7 min read
Automated Encrypted Backups with Restic and Systemd Timers
Implement zero-trust, deduplicated, client-side encrypted server backups using Restic 0.17+, managed reliably with systemd service and timer units.
Backups & Data7 min read
Logrotate Production Mastery: Size Limits, Compression, Signals
Master production log rotation on busy Linux nodes using copytruncate, postrotate daemon signaling, and zstd/gzip compression.
Linux Administration6 min read
Building Production Model Context Protocol (MCP) Gateways for AI Agents
Standardize secure agent tool calling, resource inspection, and schema reflection using Anthropic's Model Context Protocol over Unix domain sockets.
AI Agents7 min read
Deploying a Secure Private Container Registry on a Single Linux VPS
Step-by-step guide to hosting a private OCI-compliant container registry using Podman or Docker with TLS termination, htpasswd authentication, and automated garbage collection.
Containers & Orchestration6 min read
Distributed SQLite Replication with LiteFS and FUSE on Linux
Run distributed SQLite across multiple VPS nodes using LiteFS FUSE filesystem mounts for microsecond read latency and automated leader failover.
Databases6 min read
Declarative Fleet Management: GitOps for Bare Linux Nodes with Ansible Pull
Turn standalone VPS fleets into self-converging infrastructure using periodic ansible-pull daemon execution triggered by cryptographic commit tags.
DevOps Practices7 min read
Production systemd Socket Activation and On-Demand Daemons
Harden production Linux servers and minimize idle memory by converting background services into on-demand systemd socket activations.
Linux Administration5 min read