Infrastructure tutorials

Production-grade guides for Linux, servers, security and performance. Copy-paste commands, multi-distro support, written by engineers who run this in production.

Browse by topic

Most viewed

Configure Linux system time synchronization with chrony and NTP hardening

linux
866

Set up Node.js application security with Helmet and rate limiting

security
744

Install and configure Caddy web server with automatic HTTPS and reverse proxy

hosting
730

Install and configure Uvicorn ASGI server with systemd and reverse proxy for FastAPI applications

hosting
721

Install and configure PostgreSQL 17 with performance tuning and security hardening

databases
714

Recently published

Configure ModSecurity machine learning anomaly detection for automated threat protection

security
2 hours ago

Configure NGINX HTTP/2 server push and connection multiplexing

performance
2 hours ago

Configure NGINX SSL certificate automation with Certbot and renewal monitoring

hosting
2 hours ago

Monitor FastAPI applications with Prometheus and Grafana for production observability

monitoring
2 hours ago

Configure logrotate with Elasticsearch and Kibana integration for automated log management

monitoring
7 hours ago
"upstream" × Clear all
security Advanced

Implement Envoy proxy JWT authentication with OAuth2 integration

Configure Envoy proxy with JWT authentication filters integrated with Keycloak OAuth2 provider for secure microservices communication and advanced rate limiting policies.

45 min 4 distros 11 views
devops Advanced

Configure Apache Airflow high availability with CeleryExecutor and Redis clustering for production deployments

Set up Apache Airflow with CeleryExecutor and Redis clustering for high availability production deployments. Configure multiple workers, load balancing, monitoring, and automated failover to handle enterprise-scale workflow orchestration with zero downtime.

45 min 4 distros 51 views
networking Advanced

Configure advanced gRPC load balancing with Envoy Proxy health checks and circuit breakers

Set up Envoy Proxy with intelligent gRPC load balancing, health checks, and circuit breakers for production microservices. Includes SSL termination, monitoring integration, and security hardening.

45 min 4 distros 20 views
monitoring Intermediate

Configure NGINX monitoring with Prometheus and Grafana dashboards for real-time web server performance metrics

Set up comprehensive NGINX monitoring using Prometheus metrics collection and custom Grafana dashboards to track web server performance, request rates, and response times in real-time.

45 min 4 distros 44 views
devops Advanced

Configure Consul Connect with Kubernetes integration for secure service mesh communication

Set up Consul Connect as a service mesh on Kubernetes with Helm, enabling automatic mTLS encryption, service discovery, and traffic routing between microservices for secure inter-service communication.

45 min 4 distros 50 views
devops Advanced

Configure Apache Airflow data lineage tracking with OpenLineage for comprehensive workflow observability

Set up OpenLineage with Apache Airflow to track data lineage across workflows, providing comprehensive observability into data transformations, dependencies, and quality issues in production environments.

45 min 4 distros 13 views
security Advanced

Implement Consul Connect mTLS with Vault PKI backend for secure service mesh communication

Set up mutual TLS authentication for Consul Connect using HashiCorp Vault's PKI backend to secure service-to-service communication with automatic certificate management and rotation.

45 min 4 distros 56 views
performance Advanced

Optimize NGINX performance for high-traffic websites with advanced configuration and tuning

Configure NGINX for maximum performance with worker process optimization, advanced caching strategies, HTTP/2 tuning, and security hardening for high-traffic production environments.

45 min 4 distros 19 views
security Advanced

Set up Apache Airflow DAG security policies and data governance with RBAC and audit logging

Configure comprehensive security for Apache Airflow with role-based access control, DAG-level permissions, data lineage tracking, and audit logging for compliance monitoring in production environments.

45 min 4 distros 62 views
devops Intermediate

Configure Apache Airflow with SSL certificates and NGINX reverse proxy for secure production deployment

Set up Apache Airflow behind NGINX with SSL certificates, security headers, and reverse proxy configuration for production-grade deployments with HTTPS termination.

35 min 4 distros 25 views
networking Advanced

Configure Cilium BGP peering with MetalLB integration for Kubernetes load balancing

Set up Cilium CNI with BGP routing capabilities and integrate with MetalLB speaker components for bare-metal Kubernetes load balancing. This configuration enables external traffic routing and service discovery in on-premises environments.

45 min 4 distros 27 views
monitoring Intermediate

Configure Jaeger with NGINX reverse proxy and SSL termination

Set up Jaeger distributed tracing behind an NGINX reverse proxy with SSL termination and authentication. Learn to configure secure access, performance optimization, and production-ready monitoring for your microservices.

45 min 4 distros 27 views

Need help?

Don't want to manage this yourself?

We handle infrastructure for businesses that depend on uptime. From initial setup to ongoing operations.

Talk to an engineer