Infrastructure tutorials

Production-grade guides for Linux, servers, security and performance. Copy-paste commands, multi-distro support, written by engineers who run this in production.

security Intermediate

Configure Apache security headers and Content Security Policy for enhanced web application protection

Configure essential security headers including HSTS, CSRF protection, and Content Security Policy (CSP) in Apache to protect your web applications from common attacks like XSS, clickjacking, and data injection vulnerabilities.

25 min 4 distros 110 views
hosting Intermediate

Setup NGINX SSL certificates with PM2 clustering for Node.js applications

Configure NGINX as a reverse proxy with SSL certificates and load balancing for PM2 clustered Node.js applications. Set up automatic SSL certificate management with Let's Encrypt, implement health checks, and optimize performance for production environments.

45 min 4 distros 124 views
security Intermediate

Configure Apache SSL hardening with perfect forward secrecy and modern security protocols

Harden Apache HTTP server with modern SSL/TLS configuration, perfect forward secrecy cipher suites, and security headers to protect against common web vulnerabilities and ensure compliance with security standards.

25 min 4 distros 109 views
databases Advanced

Optimize MongoDB 8.0 performance with advanced indexing strategies and aggregation pipelines

Master MongoDB 8.0 performance optimization through strategic index design, aggregation pipeline efficiency, and production-ready monitoring. Covers compound indexes, query analysis, memory management, and security hardening for high-throughput database workloads.

45 min 4 distros 63 views
security Advanced

Configure ClamAV cluster with Kubernetes deployment for high availability antivirus scanning

Deploy a distributed ClamAV antivirus cluster on Kubernetes with persistent storage, load balancing, and monitoring for enterprise-grade threat detection and scanning.

45 min 4 distros 91 views
security Advanced

Configure CockroachDB SSL encryption and security hardening

Set up SSL/TLS encryption, authentication, and advanced security policies for CockroachDB 24.3 in production environments with certificate management and cluster monitoring.

45 min 4 distros 97 views
databases Intermediate

Set up MySQL point-in-time recovery with binary logs for database backup and restore

Configure MySQL binary logging and implement automated point-in-time recovery procedures for comprehensive database backup and restore operations with monitoring.

45 min 4 distros 96 views
security Intermediate

Configure FastAPI rate limiting and security middleware with Redis and authentication

Set up production-ready FastAPI applications with Redis-backed rate limiting, security middleware, and JWT authentication to protect against abuse and secure your API endpoints.

45 min 4 distros 130 views
devops Advanced

Configure Kubernetes secrets management with Vault integration for secure container orchestration

Set up HashiCorp Vault Agent Injector to automatically inject secrets into Kubernetes pods without storing sensitive data in container images or configuration files. This production-grade approach replaces hardcoded secrets with dynamic, secure credential management.

45 min 4 distros 138 views
monitoring Advanced

Monitor Kubernetes network policies with Prometheus and Grafana for enhanced cluster security

Set up comprehensive monitoring for Kubernetes network policies using Prometheus and Grafana. Configure CNI metrics collection, create security dashboards, and implement alerting for policy violations and traffic anomalies.

45 min 4 distros 125 views
databases Advanced

Set up CockroachDB backup and disaster recovery automation with systemd timers and monitoring

Configure automated backup strategies for CockroachDB with systemd timers, implement comprehensive disaster recovery procedures, and set up monitoring with Prometheus and Grafana for production-grade database infrastructure.

90 min 4 distros 105 views
security Intermediate

Implement Nginx SSL certificate automation with Let's Encrypt using Certbot

Set up automated SSL certificate management for Nginx using Let's Encrypt and Certbot. Configure automatic certificate renewal, implement SSL security hardening, and monitor certificate health for production websites.

35 min 4 distros 105 views

Need help?

Don't want to manage this yourself?

We handle infrastructure for businesses that depend on uptime. From initial setup to ongoing operations.

Talk to an engineer