Infrastructure tutorials

Production-grade guides for Linux, servers, security and performance. Copy-paste commands, multi-distro support, written by engineers who run this in production.

Browse by topic

Most viewed

Install and configure Deno for web development with systemd and reverse proxy

hosting
10,410

Install and configure Uptime Kuma for website monitoring with SSL and email alerts

monitoring
6,196

Install and configure Caddy web server with automatic HTTPS and reverse proxy

hosting
5,241

Fix apt update E: Repository no longer has a Release file

linux
4,970

Install and configure TimescaleDB with PostgreSQL for high-performance time-series data

databases
4,774

Recently published

Implement Kibana 8 custom threat hunting dashboards for security incident response

monitoring
7 hours ago

Configure Logstash 8 security pipelines with threat intelligence enrichment

monitoring
1 week ago

Configure Ansible Vault integration with HashiCorp Vault for secrets management

devops
1 week ago

Implement Thanos Ruler for distributed alerting and recording rules across Prometheus clusters

monitoring
2 weeks ago

Set up Thanos Query and Compactor for distributed metrics querying

monitoring
2 weeks ago
"sql" × Clear all
devops Advanced

Configure Ansible Vault integration with HashiCorp Vault for secrets management

Learn how to combine Ansible Vault with HashiCorp Vault using the community.hashi_vault collection, AppRole authentication, and least-privilege policies for production-grade secrets management in playbooks.

45 min 4 distros 200 views
security Advanced

Implement HAProxy WAF integration with ModSecurity 3 for advanced threat protection

Deploy ModSecurity 3 as a Stream Processing Offload Agent in front of HAProxy to inspect HTTP traffic with the OWASP Core Rule Set. This tutorial covers SPOA compilation, SPOE filter configuration, detection versus blocking modes, and production tuning.

75 min 4 distros 320 views
databases Advanced

Configure PostgreSQL 17 SSL encryption and certificate-based authentication

Set up a private CA, issue server and client certificates, enforce TLS 1.2+ with strong ciphers, and configure pg_hba.conf for mutual TLS client certificate authentication in PostgreSQL 17.

45 min 4 distros 350 views
databases Intermediate

Configure PostgreSQL 17 connection pooling with PgBouncer for high availability

Deploy PgBouncer in front of PostgreSQL 17 with session, transaction and statement pooling modes, SCRAM-SHA-256 authentication, keepalived-based HA, and Prometheus monitoring for production workloads.

45 min 4 distros 487 views
devops Advanced

Configure Kubernetes secrets management with External Secrets Operator and HashiCorp Vault

Learn how to deploy External Secrets Operator on Kubernetes, integrate it with HashiCorp Vault using the Kubernetes auth method, and sync secrets via SecretStore and ClusterSecretStore resources with production-grade RBAC and monitoring.

75 min 4 distros 553 views
monitoring Intermediate

Configure ScyllaDB cluster monitoring with Prometheus and Grafana dashboards

Set up comprehensive monitoring for ScyllaDB clusters using Prometheus metrics collection and Grafana visualization dashboards. Configure alerting rules for performance monitoring and health checks.

45 min 4 distros 823 views
security Intermediate

Implement Docker network security with custom bridge networks and container isolation

Secure your Docker deployments by creating isolated custom bridge networks, implementing container segmentation, and configuring network access controls to prevent unauthorized communication between containers.

25 min 4 distros 774 views
security Advanced

Set up container runtime security with Falco and Sysdig for threat detection

Configure Falco for runtime security monitoring and Sysdig Agent for container visibility to detect threats in Kubernetes environments. Implement behavioral analysis, custom security rules, and threat detection policies for production container workloads.

45 min 4 distros 746 views
performance Intermediate

Configure Cherokee caching and compression for improved performance

Set up Cherokee web server with advanced caching modules and gzip compression to dramatically improve page load times and reduce bandwidth usage for high-traffic websites.

25 min 4 distros 762 views
devops Advanced

Configure Spark on Kubernetes with cluster autoscaling for dynamic workloads

Deploy Apache Spark 3.5 on Kubernetes with automatic cluster scaling, dynamic resource allocation, and comprehensive monitoring for production data processing workloads.

45 min 4 distros 1,008 views
databases Intermediate

Implement MariaDB backup encryption with Mariabackup and automated restoration

Set up encrypted MariaDB backups using Mariabackup with AES encryption, automated scheduling, and verified restoration procedures for secure database protection.

45 min 4 distros 756 views
devops Advanced

Implement Kubernetes secrets management with HashiCorp Vault integration

Set up HashiCorp Vault with Kubernetes to dynamically inject secrets into pods using the Vault Secrets Operator. This tutorial covers authentication configuration, operator deployment, and automated secret injection with annotations.

45 min 4 distros 965 views

Don't want to manage this yourself?

We handle infrastructure for businesses that depend on uptime. Fully managed, with one fixed contact who knows your setup.

You get one fixed contact who knows your setup

Rotterdam 18:55 · reachable in a message, no ticket form

+31 10 477 5362 WhatsApp