Infrastructure tutorials
Production-grade guides for Linux, servers, security and performance. Copy-paste commands, multi-distro support, written by engineers who run this in production.
Browse by topic
Linux
System administration, shell scripting, package management
Hosting & Servers
Web servers, reverse proxies, SSL, domains
Security
Firewalls, hardening, encryption, access control
Performance
Caching, optimization, profiling, load testing
Databases
MySQL, PostgreSQL, Redis, backups, replication
Networking
DNS, load balancing, VPN, TCP/IP, routing
DevOps
CI/CD, Docker, Kubernetes, automation
Monitoring
Logging, alerting, metrics, observability
Most viewed
Install and configure Deno for web development with systemd and reverse proxy
hostingInstall and configure Caddy web server with automatic HTTPS and reverse proxy
hostingInstall and configure Ollama for local AI models on Linux servers
devopsInstall and configure Uvicorn ASGI server with systemd and reverse proxy for FastAPI applications
hostingInstall and configure Uptime Kuma for website monitoring with SSL and email alerts
monitoringRecently published
Set up centralized logging with Winston and Elasticsearch for Node.js applications
monitoringConfigure GitLab backup automation with GPG encryption
devopsConfigure Node.js SSL certificates and HTTPS security hardening for production servers
securityImplement Node.js application monitoring with Prometheus metrics collection and Grafana dashboards
monitoringConfigure advanced nftables logging and monitoring for network security
securityImplement Kubernetes network policies for pod-to-pod security and traffic isolation
Set up granular network security in Kubernetes using Calico CNI with default-deny policies and pod-to-pod communication rules for microsegmentation.
Configure Kubernetes ingress controller with NGINX and SSL certificates using cert-manager
Set up NGINX Ingress Controller with automated SSL certificate management using cert-manager for secure routing of external traffic to your Kubernetes services. Configure custom domains, SSL automation, and advanced routing rules for production workloads.
Configure Lighttpd 1.4 load balancing with multiple backend servers for high availability
Set up Lighttpd with mod_proxy to distribute traffic across multiple backend servers, implement health checks for automatic failover, and configure SSL termination for a robust high availability web infrastructure.
Set up Kubernetes monitoring with Prometheus Operator and custom metrics
Deploy a production-grade monitoring stack with Prometheus Operator, configure ServiceMonitor resources for automatic scraping, and create custom alerting rules with Grafana dashboards for comprehensive Kubernetes cluster observability.
Implement Istio observability with Jaeger tracing and Kiali dashboard for Kubernetes service mesh
Configure comprehensive observability for your Kubernetes service mesh with Jaeger distributed tracing, Kiali visualization, and Prometheus metrics integration. Get complete visibility into microservice communication patterns, performance bottlenecks, and service dependencies.
Configure Redis 7 cluster sharding with SSL/TLS authentication and security hardening
Set up a production-ready Redis 7 cluster with automatic sharding, SSL/TLS encryption, authentication, and comprehensive security hardening for high availability and data protection.
Optimize OpenResty performance with advanced caching strategies and Lua optimization
Configure high-performance caching with Redis integration, implement microcaching strategies, and optimize Lua scripts for memory management in production OpenResty deployments.
Configure Kubernetes network policies for enhanced cluster security
Implement granular network security controls in Kubernetes using Calico CNI. Learn to create ingress and egress policies, namespace isolation, and label-based microsegmentation for production clusters.
Set up Kubernetes persistent volume snapshots and backup automation
Configure CSI snapshot controllers, create persistent volume snapshots, and implement automated backup strategies with Velero for production Kubernetes environments.
Implement Kafka Streams exactly-once processing semantics with Java applications
Configure Kafka cluster and Java applications for exactly-once processing semantics with transaction state management, idempotent producers, and EOS isolation levels for reliable stream processing.
Set up Alertmanager with email and Slack notifications for monitoring alerts
Configure Prometheus Alertmanager with email SMTP and Slack webhook integrations for comprehensive monitoring notifications. Set up alert routing rules and test notification delivery.
Implement OpenResty rate limiting and API protection with Lua middleware
Build production-grade API protection using OpenResty's Lua middleware with advanced rate limiting algorithms, request throttling, and comprehensive security policies for high-traffic web applications.
Need help?
Don't want to manage this yourself?
We handle infrastructure for businesses that depend on uptime. From initial setup to ongoing operations.
Talk to an engineer