Infrastructure Recipes
Step-by-step production configuration playbooks and code snippets for robust, scalable infrastructure.
Production NGINX Config: Reverse Proxy, WebSockets & Rate Limiting
Deploy a production-grade NGINX reverse proxy featuring WebSocket support, HTTP/3, and robust rate limiting to protect backend services.
Production systemd Unit File: Sandboxing & Auto-Restart
Create highly secure systemd service unit files featuring resource limits, kernel sandboxing, and reliable auto-restart capabilities.
PostgreSQL Zero-Downtime Schema Migrations
Execute PostgreSQL schema migrations without downtime using safe DDL operations, lock timeouts, and concurrent index creation.
Kubernetes Ingress with cert-manager & Let's Encrypt
Automate SSL/TLS certificate provisioning and renewal in Kubernetes using Ingress-NGINX and cert-manager with Let's Encrypt.
Production GitHub Actions: Docker Buildx & Cache Mounts
Optimize CI/CD pipelines with GitHub Actions by implementing Docker Buildx, multi-platform builds, and aggressive layer caching.
Production Prometheus Alerting Rules: SLIs/SLOs
Deploy production-grade Prometheus alerting rules covering CPU, Memory, Disk saturation, and latency SLO violations.
OpenTelemetry Collector Pipeline: Tempo & Mimir
Configure an OpenTelemetry Collector pipeline to route distributed traces to Grafana Tempo and metrics to Grafana Mimir.
Modern Linux Firewall: nftables Hardening
Secure your Linux servers using modern nftables firewall rulesets tailored for Web, Database, and SSH hardening.
WireGuard Site-to-Site Mesh VPN for VPC Peering
Set up a highly performant, secure WireGuard site-to-site mesh VPN to connect hybrid cloud VPCs and on-premise networks.
PostgreSQL Change Data Capture (CDC) with Debezium
Implement real-time Change Data Capture (CDC) using PostgreSQL Logical Replication, Kafka, and Debezium.
Production Terraform: Multi-AZ AWS VPC
Provision a highly available, multi-tier AWS VPC architecture using Terraform, featuring public subnets, private subnets, and NAT Gateways.
High-Availability Redis: Sentinel Auto-Failover
Configure a High-Availability Redis architecture utilizing Master-Replica replication and Redis Sentinel for automatic failover.
FFmpeg HLS Video Transcoding & Adaptive Bitrate
Build a high-speed FFmpeg pipeline for transcoding video files into HTTP Live Streaming (HLS) format with adaptive bitrate.
Apache Kafka Exactly-Once Processing
Implement Apache Kafka Idempotent Producers and Exactly-Once transactional consumers for critical financial pipelines.
Elasticsearch ILM: Hot-Warm-Cold Architecture
Design an Elasticsearch Index Lifecycle Management (ILM) policy featuring Hot-Warm-Cold architecture and rollover triggers.