Infrastructure tutorials

Production-grade guides for Linux, servers, security and performance. Copy-paste commands, multi-distro support, written by engineers who run this in production.

networking Advanced

Configure HAProxy with Consul for dynamic service discovery and automatic backend updates

Build a self-updating load balancer by integrating HAProxy with Consul service discovery, consul-template, and health checks so backends register and deregister automatically without manual reloads.

75 min 4 distros 42 views
security Advanced

Implement HAProxy WAF integration with ModSecurity 3 for advanced threat protection

Deploy ModSecurity 3 as a Stream Processing Offload Agent in front of HAProxy to inspect HTTP traffic with the OWASP Core Rule Set. This tutorial covers SPOA compilation, SPOE filter configuration, detection versus blocking modes, and production tuning.

75 min 4 distros 57 views
networking Intermediate

Set up HAProxy SSL termination with Let's Encrypt certificates

Learn how to terminate SSL/TLS at HAProxy using Let's Encrypt certificates, redirect HTTP to HTTPS, automate renewal with deploy hooks, and harden your cipher suites for production load balancing.

35 min 4 distros 268 views
hosting Intermediate

Setup Caddy automatic SSL certificates with Let's Encrypt and DNS challenges

Configure Caddy 2 web server with automatic SSL certificate provisioning using Let's Encrypt and DNS challenge authentication for secure HTTPS automation.

25 min 4 distros 1,934 views
hosting Intermediate

Setup NGINX SSL certificates with PM2 clustering for Node.js applications

Configure NGINX as a reverse proxy with SSL certificates and load balancing for PM2 clustered Node.js applications. Set up automatic SSL certificate management with Let's Encrypt, implement health checks, and optimize performance for production environments.

45 min 4 distros 668 views
security Intermediate

Configure Apache SSL hardening with perfect forward secrecy and modern security protocols

Harden Apache HTTP server with modern SSL/TLS configuration, perfect forward secrecy cipher suites, and security headers to protect against common web vulnerabilities and ensure compliance with security standards.

25 min 4 distros 497 views
hosting Intermediate

Setup Tomcat SSL certificates with Let's Encrypt automation

Configure Apache Tomcat 11 with automated SSL certificate management using Let's Encrypt and Certbot. Set up HTTPS connector, Java keystore integration, and automatic certificate renewal for production environments.

25 min 4 distros 641 views
security Intermediate

Implement Nginx SSL certificate automation with Let's Encrypt using Certbot

Set up automated SSL certificate management for Nginx using Let's Encrypt and Certbot. Configure automatic certificate renewal, implement SSL security hardening, and monitor certificate health for production websites.

35 min 4 distros 650 views
security Intermediate

Configure Node.js SSL certificates and HTTPS security hardening for production servers

Set up production-grade SSL/TLS encryption for Node.js applications with certificate management, secure cipher suites, and comprehensive security headers including HSTS implementation.

45 min 4 distros 580 views
performance Intermediate

Optimize Varnish 7 cache storage with memory tuning and persistence configuration

Configure Varnish 7 memory allocation and storage backends for optimal cache performance. Set up file-based persistence and tune memory parameters for high-traffic workloads with monitoring.

25 min 4 distros 720 views
security Intermediate

Set up NGINX rate limiting and security headers for DDoS protection

Configure NGINX with comprehensive rate limiting zones, security headers, and DDoS protection rules to secure your web applications against malicious traffic and automated attacks.

25 min 4 distros 1,164 views
hosting Intermediate

Configure NGINX SSL termination with Certbot for Let's Encrypt certificates

Set up NGINX with automatic SSL certificate management using Let's Encrypt and Certbot, including security headers and automated renewal for production-ready HTTPS termination.

25 min 4 distros 646 views

Don't want to manage this yourself?

We handle infrastructure for businesses that depend on uptime. Fully managed, with one fixed contact who knows your setup.

You get one fixed contact who knows your setup

At their desk in Rotterdam 14:33 · reachable in a message, no ticket form