Infrastructure tutorials

Production-grade guides for Linux, servers, security and performance. Copy-paste commands, multi-distro support, written by engineers who run this in production.

Browse by topic

Most viewed

Configure Linux system time synchronization with chrony and NTP hardening

linux
869

Set up Node.js application security with Helmet and rate limiting

security
753

Install and configure Caddy web server with automatic HTTPS and reverse proxy

hosting
732

Install and configure Uvicorn ASGI server with systemd and reverse proxy for FastAPI applications

hosting
725

Install and configure PostgreSQL 17 with performance tuning and security hardening

databases
714

Recently published

Configure OSSEC active response for automated threat blocking

security
9 minutes ago

Configure CockroachDB 24.3 multi-region deployment with high availability clustering

databases
11 minutes ago

Set up Fail2ban with Cloudflare API integration for automatic IP blocking and enhanced security

security
14 minutes ago

Configure keepalived with HAProxy backend health monitoring for high availability load balancing

networking
16 minutes ago

Configure ModSecurity machine learning anomaly detection for automated threat protection

security
5 hours ago
"NAT" × Clear all
security Advanced

Implement Consul Connect mTLS with Vault PKI backend for secure service mesh communication

Set up mutual TLS authentication for Consul Connect using HashiCorp Vault's PKI backend to secure service-to-service communication with automatic certificate management and rotation.

45 min 4 distros 56 views
devops Advanced

Configure Podman secrets management with HashiCorp Vault integration

Set up secure container secrets management by integrating Podman with HashiCorp Vault. Configure dynamic secret injection, automated rotation, and production-ready monitoring for containerized applications.

45 min 4 distros 55 views
monitoring Intermediate

Set up InfluxDB alerting with Kapacitor and notifications

Configure comprehensive alerting for InfluxDB using Kapacitor with email, Slack, and webhook notifications. Set up real-time monitoring, thresholds, and automated responses for time-series data anomalies.

25 min 4 distros 14 views
monitoring Intermediate

Integrate TimescaleDB with Telegraf for metrics collection and time-series monitoring

Set up TimescaleDB with PostgreSQL and configure Telegraf to collect system and application metrics. Create continuous aggregates and monitoring dashboards for comprehensive time-series analysis and alerting.

25 min 4 distros 35 views
databases Intermediate

Configure TimescaleDB automated data retention policies for efficient storage management

Set up automated data retention and compression policies in TimescaleDB to optimize storage usage and maintain database performance. Learn to configure drop_chunks and compression policies with monitoring.

25 min 4 distros 32 views
devops Advanced

Integrate Jaeger with Kubernetes and Istio service mesh for distributed tracing

Deploy Jaeger operator on Kubernetes with Istio telemetry integration for comprehensive distributed tracing across microservices. Configure Elasticsearch backend for production-grade trace storage and implement automated service discovery.

45 min 4 distros 20 views
monitoring Intermediate

Configure Fluentd with Kubernetes DaemonSet and log routing for centralized collection

Deploy Fluentd as a DaemonSet on Kubernetes for centralized log collection with multi-format parsing, routing to multiple outputs, and RBAC security. Includes configuration for Elasticsearch, S3, and custom log sources.

45 min 4 distros 20 views
devops Intermediate

Configure Apache Airflow with SSL certificates and NGINX reverse proxy for secure production deployment

Set up Apache Airflow behind NGINX with SSL certificates, security headers, and reverse proxy configuration for production-grade deployments with HTTPS termination.

35 min 4 distros 26 views
networking Advanced

Configure Cilium BGP peering with MetalLB integration for Kubernetes load balancing

Set up Cilium CNI with BGP routing capabilities and integrate with MetalLB speaker components for bare-metal Kubernetes load balancing. This configuration enables external traffic routing and service discovery in on-premises environments.

45 min 4 distros 27 views
monitoring Intermediate

Configure Jaeger with NGINX reverse proxy and SSL termination

Set up Jaeger distributed tracing behind an NGINX reverse proxy with SSL termination and authentication. Learn to configure secure access, performance optimization, and production-ready monitoring for your microservices.

45 min 4 distros 29 views
devops Advanced

Set up Nomad multi-node cluster with TLS encryption and Consul integration

Deploy a production-ready HashiCorp Nomad cluster with server and client nodes, TLS encryption, and Consul integration for service discovery. Includes workload deployment and monitoring configuration.

45 min 4 distros 38 views
devops Intermediate

Install and configure ArgoCD Image Updater for automatic Kubernetes deployments with GitOps automation

Set up ArgoCD Image Updater to automatically monitor container registries and update Kubernetes deployments when new image versions are available. Configure GitOps workflows with automated Git commits and Prometheus monitoring for seamless CI/CD integration.

25 min 4 distros 30 views

Need help?

Don't want to manage this yourself?

We handle infrastructure for businesses that depend on uptime. From initial setup to ongoing operations.

Talk to an engineer