Two servers linked by purple paths through a sealed certificate card, with a small shield.
Technology

mTLS for Microservices with Nginx and Caddy

10 November 2025

Use one verified identity and application policy across both proxies, with explicit certificate profiles, safe encoding, upstream mTLS and access removal.

Illustration depicting WordPress on Docker Compose, Without the Drama: Nginx, MariaDB, Redis, Persistent Volumes, Auto‑B...
Technology

WordPress on Docker Compose, Without the Drama: Nginx, MariaDB, Redis, Persistent Volumes, Auto‑Backups, and a Calm Update Flow

10 November 2025

So there I was, staring at yet another WordPress site that had quietly grown from a simple blog into a real business. Traffic was good. Sales were happening. The owner was excited. And then, predictably, came the question: “Can you make it run like a proper system? I don’t want surprises.” I smiled because I’ve…

A backup vault, a simple clock and a board with three dots representing a rehearsed recovery plan.
Technology

Disaster Recovery Plan: RTO, RPO and Runbooks

10 November 2025

Set recovery objectives, protect usable backup points and map dependencies. Build runbooks with explicit checks, then measure recovery time and data loss in realistic drills.

A sealed certificate card and simple administration screen connected to a padlock by a purple path.
Technology

Protect an Admin Panel with Nginx mTLS

10 November 2025

Configure client verification in the correct Nginx scope, with an explicit CA/CRL workflow, serial allowlist, controlled distribution and acceptance tests.

Technology

Tracing That Feels Like a Conversation With Your App

It started on a Tuesday afternoon, right when the team swore everything “looked good in logs.” The site wasn’t down, exactly—just excruciatingly slow for a handful of requests. Our Laravel app was fine on its own, the Node.js worker insisted it was innocent, and the external API was apparently returning in record time. Classic he-said-she-said…

10 November 2025

WordPress Hardening Checklist: The Friendly Way to Lock Down File Permissions, Salt Keys, XML-RPC, and UFW/Fail2ban

The Morning I Realized My WordPress Needed a Bodyguard I still remember the morning a client pinged me with the kind of message that makes your coffee suddenly taste like battery acid: “Our site is slow, weird logins, and I can’t save posts.” We’d all been there—plugin updates that went sideways, login spam that looked…

10 November 2025

DV, OV, EV and Wildcard SSL for E-Commerce and SaaS

Choose validation level separately from hostname coverage. Assess documented identity requirements, wildcard limits, ACME prerequisites and private-key authority.

10 November 2025

So Your Domain Expired—Now What? Grace Periods, Redemption Fees, and the Calm Way Back

It was 8:12 a.m. when my phone lit up with a panicked message: “The site is down. Did the server explode?” I took a breath, opened the domain panel, and there it was in a quiet little line of gray text—Expired. Not the servers, not the code, not the CDN. Just the domain. If you’ve…

10 November 2025

The 1–5 Second Miracle: How Nginx Microcaching Makes PHP Feel Instantly Faster

So there I was, coffee getting cold, watching a PHP app crumble under a perfectly normal Monday morning traffic spike. You know that feeling when graphs look like mountains and your error logs start reading like a horror story? The requests weren’t doing anything wild—just a homepage, a few category pages, and a handful of…

9 November 2025

The Friendly Way to Serve WebP/AVIF Without Breaking Your Site (or Your SEO)

So there I was, late one Tuesday night, staring at a waterfall chart and wondering why an image-heavy homepage still felt sluggish on a crisp fiber connection. I had rolled out WebP and AVIF earlier that week, feeling pretty smug about the savings. But something was off. Safari users were pinging me with “image downloads”…

9 November 2025
↑