Oct 24, 2025 · 3 min read
When Netlify killed my free tier: a 15-minute migration to Dokploy
Netlify suspended five free-tier sites of mine one Tuesday night. The 15-minute migration to Dokploy on a €3/month VPS that bought everything back.
Page 3 of 3
The Blog
Oct 14, 2025 · 8 min read
How I took down 30% of production with one TLS fingerprinting rule
Deployed a TLS fingerprinting rule that seemed reasonable. Blocked every Chrome 119 user on Windows. The incident report was not fun to write.
Jan 12, 2025 · 2 min read
My watchlist: from 70s basements to Victorian crime scenes
What I rewatch when the day's debugging is done: That 70's Show, Arrested Development, HIMYM, and the detective canon from Holmes to Poirot.
Dec 20, 2024 · 6 min read
GitHub Actions vs GitLab CI: a practical comparison
Two years running GitHub Actions and GitLab CI across 50 microservices side by side. Here's the CI/CD comparison data and which one I'd reach for and when.
Dec 18, 2024 · 7 min read
Prometheus and Grafana: from zero to production monitoring
A practical guide to setting up Prometheus and Grafana for production monitoring. No theory, just battle-tested configurations that work.
Dec 15, 2024 · 5 min read
Five Kubernetes debugging tricks that saved my production
Five Kubernetes debugging tricks from real 3 AM pages: kubectl logs --previous, ephemeral debug containers, scheduler events, and fixes that saved…
Dec 10, 2024 · 10 min read
Docker security: stop running everything as root
Your containers are probably insecure. Here's how I learned to harden Docker containers the hard way, and the security mistakes that almost cost us.
Dec 5, 2024 · 10 min read
AWS cost optimization: how we cut our bill by 60%
Our AWS bill hit $50k/month. Here's exactly how EC2 rightsizing, Reserved Instances, S3 lifecycle rules, and CloudWatch retention cut it to $20k in six…
Nov 28, 2024 · 5 min read
Infrastructure as code: mistakes I made so you don't have to
Terraform mistakes I made so you don't have to: hardcoded AMIs, lost local state, a 2000-line main.tf, an unpinned provider, and a stray terraform destroy.