Infrastructure tutorials
Production-grade guides for Linux, servers, security and performance. Copy-paste commands, multi-distro support, written by engineers who run this in production.
Browse by topic
Linux
System administration, shell scripting, package management
Hosting & Servers
Web servers, reverse proxies, SSL, domains
Security
Firewalls, hardening, encryption, access control
Performance
Caching, optimization, profiling, load testing
Databases
MySQL, PostgreSQL, Redis, backups, replication
Networking
DNS, load balancing, VPN, TCP/IP, routing
DevOps
CI/CD, Docker, Kubernetes, automation
Monitoring
Logging, alerting, metrics, observability
Most viewed
Install and configure Deno for web development with systemd and reverse proxy
hostingInstall and configure Uptime Kuma for website monitoring with SSL and email alerts
monitoringInstall and configure Caddy web server with automatic HTTPS and reverse proxy
hostingInstall and configure TimescaleDB with PostgreSQL for high-performance time-series data
databasesInstall and configure Ollama for local AI models on Linux servers
devopsRecently published
Configure PostgreSQL 17 SSL encryption and certificate-based authentication
databasesSet up HAProxy SSL termination with Let's Encrypt certificates
networkingConfigure HAProxy with Consul for dynamic service discovery
networkingConfigure PostgreSQL 17 connection pooling with PgBouncer for high availability
databasesConfigure Kubernetes secrets management with External Secrets Operator and HashiCorp Vault
devopsConfigure NGINX rate limiting and DDoS protection with advanced security rules
Learn to configure production-grade NGINX rate limiting and DDoS protection with multiple security zones, advanced rules, and real-time monitoring to protect your web applications from malicious traffic and resource exhaustion attacks.
Implement comprehensive Apache Airflow DAG testing and validation strategies with pytest and best practices
Learn to implement production-grade testing for Apache Airflow DAGs using pytest, including unit tests for DAG structure validation, integration testing with test databases, and automated validation pipelines with CI/CD integration.
Configure Consul Connect service mesh with Envoy proxy for secure microservices communication
Set up Consul Connect service mesh with Envoy sidecar proxies to enable secure, encrypted service-to-service communication with mutual TLS authentication, traffic policies, and observability for your microservices architecture.
Install and configure Apache Airflow with PostgreSQL backend and secure production deployment
Learn to deploy Apache Airflow in production with PostgreSQL backend, systemd services, SSL/TLS encryption, and security hardening for enterprise workflow orchestration.
Install and configure Keycloak for enterprise authentication with clustering
Set up Keycloak as an enterprise identity provider with PostgreSQL backend, SSL encryption, and high availability clustering for OAuth2, OpenID Connect, and SAML authentication across your organization.
Install and configure Nexus Repository Manager for private Docker and Maven repositories
Set up Nexus Repository Manager OSS with SSL-enabled Docker registry, Maven repositories, and automated backups for secure artifact management in enterprise environments.
Install and configure MinIO object storage with SSL and clustering
Set up MinIO as a distributed S3-compatible object storage cluster with SSL/TLS encryption and production-grade security. This tutorial covers installation, clustering, access policies, and monitoring for high-availability storage infrastructure.
Install and configure NGINX with HTTP/3 and modern security headers
Set up NGINX with HTTP/3 and QUIC support for faster web performance. Configure SSL certificates, implement modern security headers like CSP and HSTS, and optimize for production workloads.
Don't want to manage this yourself?
We handle infrastructure for businesses that depend on uptime. Fully managed, with one fixed contact who knows your setup.
You get one fixed contact who knows your setup
Rotterdam 04:41 · reachable in a message, no ticket form