DevOps. Self-hosted. Security.
RSS FeedNotes on DevOps, infrastructure, self-hosting and cybersecurity — practical guides from real-world operations.
Read the posts below or head over to the About page.
Recent Posts
-
Trivy in CI: catch vulns and generate an SBOM before prod
One pipeline step blocks vulnerable images from shipping and hands you an SBOM on the way. What Trivy scans, how to gate on severity, how to quiet the noise with .trivyignore and VEX, and how it ties into keyless signing.
-
Sentry: catch prod errors before your users do
Logs say 'something broke'; Sentry says what, for whom, and in which release. Error grouping, breadcrumbs, releases and source maps, how to quiet the noise, and how to self-host it.
-
Gateway API over Ingress: migrating before ingress-nginx dies
kubernetes/ingress-nginx hit End-of-Life on March 24, 2026 — the repo is frozen, no bugfixes, no security patches. A walkthrough of the Gateway API resource model, converting with ingress2gateway 1.0, and the migration traps, with a canary-routing example.
-
Backstage in a weekend: an IDP and golden paths for a small team
An Internal Developer Platform isn't only for enterprises: a minimal Backstage in docker-compose with one Software Template gives a service catalog and a 'new service in one click' win already at 3-5 engineers. What it takes and where the traps are.