Tag: devops

Container Security: Scan and Sign Your Images Like You Mean It

Pulling unscanned images onto your server is a gamble. Trivy finds the CVEs. Cosign proves the image hasn't been swapped out. Here's how to add both to your workflow.

Gitea vs Forgejo vs GitLab CE: Self-Hosted Git Without the Existential Crisis

You want to self-host your git. Noble. Responsible, even. But now you're staring down three options and a Reddit thread that's somehow both 4 years old and still being argued about. Gitea, Forgejo, GitLab CE — let's cut through the noise and figure out which one won't ruin your weekend.

Loki vs ELK: Centralized Logging Without the RAM Tax

ELK does everything and wants all your memory. Loki does logging the Prometheus way — label indexes, not content — and runs on a fraction of the resources. Here's the honest comparison.

Vault vs Infisical: Secrets Management for Teams Who've Learned the Hard Way

Your database password is in 14 different `.env` files across three repos, one of which is public on GitHub. Somewhere out there, a bot is already trying it. It's time to fix the secrets sprawl problem — and pick the right tool to do it without spending three weeks on setup.

Cockpit vs Webmin: Web Admin Panels That Don't Make You Cry

Cockpit is the modern systemd-native Linux admin panel. Webmin is the veteran that configures everything. Here's which one should be on your servers — and which shouldn't.

Trivy + Cosign: Scan and Sign Your Images

You're pulling container images from strangers on the internet. Trivy scans them for CVEs. Cosign proves they haven't been tampered with. Use both.

Prometheus + Grafana: Monitoring That Doesn't Lie to You

Prometheus scrapes metrics. Grafana makes them pretty. Alertmanager wakes you up at 2 AM. Here's how to wire all three together into a monitoring stack that actually works.

Gitea vs Forgejo vs GitLab CE: Self-Hosted Git

GitLab CE does everything and wants all your RAM. Gitea and Forgejo run on a Raspberry Pi. Here's which self-hosted git platform actually fits your setup.

Docker BuildKit: Stop Building Images the Slow Way

Cache mounts, secret mounts, parallel stages — BuildKit turns your Dockerfile from a slow linear disaster into something that actually respects your time.

Docker Networking Demystified

Docker networking confuses everyone at first. Here's the practical breakdown of bridge, host, overlay, and macvlan — with real Compose examples.

Lazydocker & Dive: Fix Your Docker CLI

Learn how lazydocker and dive make Docker manageable from your terminal. TUI dashboards, image layer analysis, CI integration, and optimization tips.

EmDash: WordPress Done Right, Finally

Cloudflare rebuilt WordPress from scratch in TypeScript using AI agents. Sandboxed plugins, Astro themes, self-hostable. It's called EmDash and it's actually interesting.