Infrastructure tutorials

Production-grade guides for Linux, servers, security and performance. Copy-paste commands, multi-distro support, written by engineers who run this in production.

Browse by topic

Most viewed

Install and configure Deno for web development with systemd and reverse proxy

hosting
2,059

Install and configure Caddy web server with automatic HTTPS and reverse proxy

hosting
1,624

Install and configure Uvicorn ASGI server with systemd and reverse proxy for FastAPI applications

hosting
1,459

Install and configure Ollama for local AI models on Linux servers

devops
1,263

Configure Linux system time synchronization with chrony and NTP hardening

linux
1,170

Recently published

Configure Kubernetes network policies for enhanced cluster security

security
2 hours ago

Set up Kubernetes persistent volume snapshots and backup automation

devops
7 hours ago

Implement Kafka Streams exactly-once processing semantics with Java applications

devops
12 hours ago

Implement ClickHouse backup automation with compression and S3 integration

databases
21 hours ago

Install and configure Filebeat 8.15 for efficient log shipping to ELK stack

monitoring
1 day ago
"rate limiting" × Clear all
devops Advanced

Implement Istio circuit breaker and retry policies for microservices resilience and fault tolerance

Configure Istio destination rules with circuit breaker patterns, implement retry policies with exponential backoff, and set up comprehensive fault injection testing for microservices resilience in Kubernetes service mesh environments.

45 min 4 distros 157 views
devops Intermediate

Setup Kubernetes ingress controller with cert-manager and Helm for automated SSL certificate management

Deploy NGINX Ingress Controller and cert-manager using Helm to automatically provision and manage SSL certificates for your Kubernetes applications with Let's Encrypt integration.

25 min 4 distros 139 views
security Advanced

Configure advanced iptables firewall rules with logging, port knocking, and DDoS protection

Build a production-grade iptables firewall with connection tracking, rate limiting, and port knocking. Includes automated DDoS protection, detailed logging, and security hardening for enterprise environments.

45 min 4 distros 158 views
security Intermediate

Configure Keycloak OAuth2 integration with web applications using OIDC and JWT tokens

Set up Keycloak as an OAuth2 identity provider with OIDC authentication flows. Configure client applications, implement JWT token validation, and secure NGINX reverse proxy with lua-resty-openidc for production web applications.

45 min 4 distros 194 views
monitoring Intermediate

Configure NGINX log analysis with Loki and Grafana for centralized monitoring

Set up Loki log aggregation with Promtail agent to collect NGINX logs and create Grafana dashboards for comprehensive web server monitoring and analysis.

45 min 4 distros 151 views
networking Intermediate

Setup HAProxy with Docker container backends for dynamic load balancing

Configure HAProxy 2.8 to automatically discover and load balance traffic across Docker containers with health checks, service discovery, and SSL termination for production-grade dynamic routing.

35 min 4 distros 211 views
security Advanced

Secure Docker containers with Traefik reverse proxy and Authelia authentication

Set up a production-grade security stack using Traefik v3 reverse proxy with SSL automation and Authelia for multi-factor authentication. This tutorial covers Docker hardening, LDAP integration, and container security monitoring.

45 min 4 distros 166 views
hosting Intermediate

Configure NGINX reverse proxy with load balancing and SSL termination

Set up NGINX as a reverse proxy with multiple backend servers, SSL termination, and health monitoring. Perfect for distributing traffic across application instances while handling encryption at the edge.

45 min 4 distros 201 views
networking Advanced

Configure HAProxy advanced routing with ACLs and maps for intelligent traffic management

Set up sophisticated traffic routing in HAProxy using Access Control Lists (ACLs) and map files for dynamic backend selection, SSL SNI routing, and intelligent request distribution based on headers, paths, and custom conditions.

45 min 4 distros 189 views
monitoring Intermediate

Set up NGINX log analysis and monitoring with Prometheus and Grafana dashboards

Configure comprehensive NGINX monitoring with Prometheus exporters, structured log parsing, and real-time Grafana dashboards for web server observability and performance analysis.

45 min 4 distros 559 views
networking Intermediate

Configure WireGuard site-to-site VPN connections with advanced routing and security

Set up secure network-to-network VPN tunnels using WireGuard with advanced routing, firewall rules, and monitoring for connecting multiple office locations or data centers.

45 min 4 distros 173 views
devops Intermediate

Configure Traefik with Consul service discovery for dynamic load balancing

Set up Traefik 3.1 reverse proxy with Consul service discovery to automatically route traffic to services without manual configuration. Learn dynamic routing, SSL automation, health checks, and monitoring setup for production environments.

25 min 4 distros 172 views

Need help?

Don't want to manage this yourself?

We handle infrastructure for businesses that depend on uptime. From initial setup to ongoing operations.

Talk to an engineer