All Capsules
Real experiences turned into learning.
In AWS, opening too much is expensive
The first time I set up a project on AWS, I gave everything broad permissions to make it work fast. It was a time bomb.
2026-07-27
Basic VPS Security: what nobody tells you when you start
Did you know your VPS receives unauthorized access attempts from the first minute you turn it on?
2026-07-21
Nobody breaks main. Not even me. Now it's a rule.
I applied 7 branch protection rules with no exceptions — not even for the admin. No change reaches develop or main without a PR, approval, and green checks.
2026-07-20
I audited a VPS and found a worm that had been inside for 6 days
145 stolen CPU hours. A TeamTNT botnet worm operating in silence. And it got in without asking for a password.
2026-07-15
The First Guardian of the Repo
A guardian that never tires, never forgets, and never has bad days. How I implemented GitHub Actions Workflows to protect the main branches of the project.
2026-07-13
Analytics without giving your data to Google
I installed Umami on my own VPS in under 30 minutes. 100% my data, no third-party cookies, and a 2Kb script that doesn't hurt performance.
2026-07-08
My containers on AWS have no open port to the internet
A container receiving real traffic without being exposed to the internet. Cloudflare Tunnel turns the container's outbound connection into the traffic's inbound path.
2026-07-07
Without structured logs, you don't have infrastructure. You have a black box.
A LuminHealth service went down in production. I went straight to the logs. But they were plain text — reconstructing what happened took me twice as long as necessary.
2026-07-02
If your backups live on the same server as your app… you have no backups
Disk space shrinks with every backup. And if the server goes down, you lose the app AND the backups at the same time. No way to restore.
2026-06-30
Docker is not "wrapping your app". It's stopping saying "it works on my machine"
When I deployed LuminHealth on the VPS, I had three services running together. Without Docker, that would have been chaos of dependencies, versions and manual configs.
2026-06-25
LuminHealth: a personal project in production
I designed the backend. Built the frontend. Configured the server. Launched the product. And today it has real users.
2026-06-22
VPS or Cloud: not a philosophy, it's a technical decision
I had two projects in production at the same time. One on VPS, one on AWS. Same person. Completely different decisions.
2026-06-20
Nginx is not just "the web server"
Your API runs on port 3000. But your users should never know that.
2026-06-18
From Developer to DevOps: out of necessity
Nobody learns DevOps because they want to. You learn it because you need to solve something real.
2026-06-16