Berkay Bulut
Posts

ACME Challenges Deep Dive: The Friendly Guide to HTTP‑01, DNS‑01, and TLS‑ALPN‑01
So there I was, sipping a late coffee while a production deploy ticked away, when a message popped up: “Wildcard…

Nginx vs LiteSpeed for WooCommerce: What HTTP/3, Full‑Page Caching, and Resource Usage Really Feel Like in Production
So there I was, coffee going cold, watching a WooCommerce checkout page crawl while a client pinged me with “is…

Cloudflare Tunnel with cloudflared: The Calm, Zero‑Trust Way to Publish Apps Without Opening a Single Port
It started on a Tuesday afternoon when I was migrating a little internal dashboard for a client. Nothing mission critical,…

I Built a 3‑VPS HA K3s Cluster With Traefik, cert‑manager, and Longhorn — Here’s the Playbook
The moment I knew it was time to grow up my cluster It started with a very quiet Tuesday. One…

The CAA Records Deep Dive: How I Make Let’s Encrypt, ZeroSSL, issue/issuewild, iodef, and a Multi‑CA Strategy Play Nicely
The moment CAA clicked for me So there I was, late on a Thursday, sipping lukewarm coffee and staring at…

The PHP 8.x Upgrade Checklist: The Friendly Guide to Backwards Compatibility, OPcache Preload, and FPM Pool Tuning for WordPress/Laravel
So there I was, staring at a server dashboard at 2:17 a.m., sipping lukewarm coffee, watching the CPU graph dance…

Protect Your Origin Like You Mean It: The Friendly Guide to Cloudflare Authenticated Origin Pulls and mTLS
Ever had that moment when your site looks fine from the outside, but deep down you know the origin server…

Redundant ACME Automation That Just Works: acme.sh Fallback from Let’s Encrypt to ZeroSSL
It was one of those quiet Sundays when everything should have been boring. Coffee in hand, inbox under control, servers…

How I Run Multi‑Provider DNS with octoDNS (and Sleep Through Migrations)
So there I was, late one Tuesday, finger hovering over the button that would flip name servers for a high‑traffic…
