Infrastructure tutorials

Production-grade guides for Linux, servers, security and performance. Copy-paste commands, multi-distro support, written by engineers who run this in production.

security Advanced

Set up Kubernetes container image security scanning with Trivy and admission controllers

Implement automated security scanning for Kubernetes container images using Trivy scanner and admission controllers to block vulnerable images before deployment.

45 min 4 distros 90 views
security Advanced

Integrate ClamAV cluster with file upload APIs for scalable malware scanning

Set up a clustered ClamAV deployment with REST API endpoints for automated malware scanning of file uploads. Configure load balancing, authentication, and monitoring for high-availability antivirus scanning in production environments.

45 min 4 distros 133 views
security Intermediate

Configure Apache SSL hardening with perfect forward secrecy and modern security protocols

Harden Apache HTTP server with modern SSL/TLS configuration, perfect forward secrecy cipher suites, and security headers to protect against common web vulnerabilities and ensure compliance with security standards.

25 min 4 distros 124 views
databases Advanced

Optimize MongoDB 8.0 performance with advanced indexing strategies and aggregation pipelines

Master MongoDB 8.0 performance optimization through strategic index design, aggregation pipeline efficiency, and production-ready monitoring. Covers compound indexes, query analysis, memory management, and security hardening for high-throughput database workloads.

45 min 4 distros 98 views
security Advanced

Configure CockroachDB SSL encryption and security hardening

Set up SSL/TLS encryption, authentication, and advanced security policies for CockroachDB 24.3 in production environments with certificate management and cluster monitoring.

45 min 4 distros 133 views
security Intermediate

Configure FastAPI rate limiting and security middleware with Redis and authentication

Set up production-ready FastAPI applications with Redis-backed rate limiting, security middleware, and JWT authentication to protect against abuse and secure your API endpoints.

45 min 4 distros 175 views
devops Advanced

Configure Kubernetes secrets management with Vault integration for secure container orchestration

Set up HashiCorp Vault Agent Injector to automatically inject secrets into Kubernetes pods without storing sensitive data in container images or configuration files. This production-grade approach replaces hardcoded secrets with dynamic, secure credential management.

45 min 4 distros 187 views
monitoring Advanced

Monitor Kubernetes network policies with Prometheus and Grafana for enhanced cluster security

Set up comprehensive monitoring for Kubernetes network policies using Prometheus and Grafana. Configure CNI metrics collection, create security dashboards, and implement alerting for policy violations and traffic anomalies.

45 min 4 distros 143 views
hosting Intermediate

Setup Tomcat SSL certificates with Let's Encrypt automation

Configure Apache Tomcat 11 with automated SSL certificate management using Let's Encrypt and Certbot. Set up HTTPS connector, Java keystore integration, and automatic certificate renewal for production environments.

25 min 4 distros 151 views
security Intermediate

Configure Node.js SSL certificates and HTTPS security hardening for production servers

Set up production-grade SSL/TLS encryption for Node.js applications with certificate management, secure cipher suites, and comprehensive security headers including HSTS implementation.

45 min 4 distros 154 views
performance Advanced

Configure Nginx Redis cluster caching for high availability and performance optimization

Set up Nginx with Redis cluster caching to achieve high availability and optimized performance. This advanced configuration includes cluster setup, failover testing, and performance tuning for production environments.

45 min 4 distros 158 views
monitoring Intermediate

Configure custom SNMP MIBs for vendor-specific monitoring with SNMP v2c and v3

Learn to install and configure custom vendor MIB files for specialized network device monitoring using both SNMP v2c and v3 protocols with authentication and encryption.

45 min 4 distros 121 views

Need help?

Don't want to manage this yourself?

We handle infrastructure for businesses that depend on uptime. From initial setup to ongoing operations.

Talk to an engineer