Hello, welcome 👋
A personal notebook on backend engineering, infrastructure, and self-hosting. Mostly Linux, PostgreSQL, nginx, and Docker.
Recent posts
-
Setting up nginx with TLS 1.3
Apr 2, 2025 · 6 min read
Step-by-step Let's Encrypt automation with strict ciphers and OCSP stapling.
-
Tuning PostgreSQL for OLTP workloads
Mar 18, 2025 · 9 min read
Connection pooling, shared_buffers, vacuum tuning and effective indexes.
-
Docker image best practices in 2025
Feb 27, 2025 · 7 min read
Multi-stage builds, distroless bases, SBOM, and supply-chain hygiene.
-
Systemd service hardening cheatsheet
Feb 5, 2025 · 5 min read
Practical sandboxing directives that actually pay off in production.
-
Monitoring stack with Prometheus and Grafana
Jan 12, 2025 · 8 min read
A minimal observability setup that scales from one node to a small fleet.