Found 42 results for: Code Completion
Official Supabase Docker stack on a clean Ubuntu sandbox: the pooler and Edge Functions crash-looped. Why, and a compose override that fixed both, with tests.
Building Prometheus from source on a host with older Go and Node than the repo asks for: what the build does, what warns, and how I verified the result.
Trivy exits 0 even with CRITICAL findings. I built it from source and made it a real CI gate, then found a secret-scan skip that a green result can hide.
How to remove common latency and connection-error causes in an Nginx or Kong API gateway: file limits, upstream keepalive, backlog, port range, logging and TLS.
How to confirm that MySQL 5.5 is stuck on disk I/O, and how to tune the I/O scheduler, ext4 mount options and InnoDB settings for flash or fast virtual storage.
How to move a large live PostgreSQL or MySQL database to a new server with streaming replication and a short write freeze, including the pitfalls in common…
Build an OpenVPN 2.2 gateway on CentOS 6 with a private CA, and fix the usual failures: missing TUN device, no forwarding or NAT, and iptables rule order.
How to run a private, key-only Git server with Gitolite 2.x on CentOS 6, with access rules kept in a Git repository. Covers latency, I/O, and backups.
Run containers as non-root, with a read-only filesystem, dropped capabilities and a default-deny NetworkPolicy, so one compromised app has little to work with.
Slow or timing-out Jenkins builds are often caused by iowait, swapping and a badly sized JVM heap. How to diagnose and tune each on a 2014-era Linux server.
Why plain FTP exposes credentials, and how to lock users into a directory with OpenSSH ChrootDirectory and internal-sftp on CentOS 5.
Cut disk waits on a MySQL 5.5 server on CentOS 6: convert tables to InnoDB, size the buffer pool and logs, set the flush policy, I/O scheduler and swappiness.
Pods lose DNS after an egress NetworkPolicy is applied. This article covers the wrong namespace label, the missing TCP port 53 rule and a tested-in-theory fix.
How to set up a single-node edge MQTT aggregator with K3s and WireGuard, and how to fix the faulty flags, units and sysctls that edge guides often repeat.
Why Apache prefork wastes RAM on static files and slow clients, and how a lighttpd front end plus tuned MaxClients and keep-alive fixes it on CentOS 5.
A Bun or Node.js service can be slow on a VPS because of CPU steal or slow disks. How to measure both, fix the host first, and then compare runtimes fairly.
A reference setup for Postfix on CentOS 6 (2012): fix mail rejected or sent to spam with matching DNS, restricted SMTP, TLS submission with SASL, SPF and DKIM.
How an Nginx API gateway with rate limiting and upstream keepalive, plus an opossum circuit breaker, limits cascading failures between microservices (2022…
Enforce CIS network sysctl baselines with Ansible, gate deployments on OpenSCAP results, and reject Ingress objects without TLS using an OPA admission policy.
How to build reports from raw Apache or Nginx access logs with AWStats on CentOS 6: log format, config, cron, protected access, and limits.
Put HAProxy 1.4 in front of web nodes on CentOS 6, tune the kernel and use Keepalived VRRP so the balancer itself is no single point of failure.
Dokku's nginx templates listen on [::] by default. Here is why nginx refuses to start on a host without IPv6, and how to fix it, including notes for…
Replace trust-by-network-location with encrypted, authenticated links: WireGuard between nodes, nginx client certificates and hardened SSH with a second factor.
A 2010-era baseline for CentOS 5 and Ubuntu 10.04: key-only SSH, a default-drop iptables policy, sysctl network settings and fewer listening services.
When to use Memcached or Redis 2.8 for caching and PHP sessions on CentOS 6. Covers persistence, eviction, AOF fsync stalls, and a split-instance setup.
How to link a hyperscaler workload to a database on a Norwegian VPS with WireGuard, what the tunnel does not fix, and the common mistakes in such setups.
Why asynchronous replication can lose committed transactions, and how MySQL 5.5 semisync and PostgreSQL 9.1 synchronous replication address it on a CentOS 6…
How to run a three-node NATS JetStream cluster (server 2.6, nats.go 1.13) with replicated streams, authentication, correct acks and sane OS limits.
How to replace hand-run kubectl apply with a pull-based GitOps flow: Argo CD, Kustomize overlays, Sealed Secrets and a CI job that only edits an image tag.
How to keep a local HAProxy in step with a ZooKeeper service registry: ephemeral znodes, a watcher that regenerates the config, and a graceful reload.