Skip to content
John Nessime
Search this website

Infrastructure

  1. Home>
  2. Infrastructure
Read more about the article Metrics, Logs and Traces: What Each One Answers

Metrics, Logs and Traces: What Each One Answers

  • Post category:DevOps/System Administration/Web Performance

Metrics tell you that something is wrong. Traces tell you where. Logs tell you why. Use them in that order and each step narrows the search — start with logs and you are grepping a firehose. Here is what each one is actually for, and the field that connects all three.

Continue ReadingMetrics, Logs and Traces: What Each One Answers
Read more about the article CDN Setup Without Breaking Dynamic Content

CDN Setup Without Breaking Dynamic Content

  • Post category:DevOps/Web Performance/Web Security

Put a CDN in front of a dynamic site carelessly and it will cache one user's personalised page and serve it to everyone — invisibly, because your logged-in browser looks fine. Here is how to classify routes, set cache headers that hold, and run the two curl commands that catch the leak.

Continue ReadingCDN Setup Without Breaking Dynamic Content
Read more about the article Cleaning Up Docker Disk Usage Safely

Cleaning Up Docker Disk Usage Safely

  • Post category:DevOps/Linux/System Administration

The top search result tells you to run docker system prune -a --volumes. It frees the space and deletes your database. Here is how to measure Docker disk usage properly, reclaim it from safest to most destructive, and fix the logs that Docker never reports on.

Continue ReadingCleaning Up Docker Disk Usage Safely
Read more about the article A Secure-by-Default AWS Account Baseline in Terraform

A Secure-by-Default AWS Account Baseline in Terraform

  • Post category:Cloud Computing/DevOps/Web Security

A fresh AWS account ships wide open by default. Here are the seven decisions that make one defensible from the start — OIDC instead of static keys, encrypted state, an isolated database tier, free gateway endpoints — with a working Terraform reference implementation on GitHub.

Continue ReadingA Secure-by-Default AWS Account Baseline in Terraform
Read more about the article Prometheus + Grafana From Scratch on One Server

Prometheus + Grafana From Scratch on One Server

  • Post category:DevOps/Linux/System Administration

Two static binaries, a package and four systemd units. How to install Prometheus and Grafana on a single server from scratch, wire in node_exporter, put nginx and TLS in front, and keep the ports that have no authentication off the public internet.

Continue ReadingPrometheus + Grafana From Scratch on One Server
Read more about the article Pulumi vs Terraform: Choosing a Lane

Pulumi vs Terraform: Choosing a Lane

  • Post category:Cloud Computing/DevOps/Technical Guides

The licence changed, the community forked, IBM bought HashiCorp, CDKTF was archived, and Pulumi started speaking HCL. Here is an honest read of where Pulumi vs Terraform actually stands in 2026, and how to pick a lane you will not regret.

Continue ReadingPulumi vs Terraform: Choosing a Lane
Read more about the article Docker Issues & Troubleshooting: Real-World Solutions

Docker Issues & Troubleshooting: Real-World Solutions

  • Post category:Articles/Cloud Computing/DevOps/Docker/Linux/Tutorials

Docker containers rarely fail without leaving clues. This practical guide explores common Docker issues involving networking, storage, permissions, ports, logs, health checks, reverse proxies, and resource usage—and explains how to troubleshoot them methodically.

Continue ReadingDocker Issues & Troubleshooting: Real-World Solutions

Recent Posts

  • Green Check, Broken Build: How to Build a Fail Fast Pipeline That Explains Why
  • Metrics, Logs and Traces: What Each One Answers
  • CDN Setup Without Breaking Dynamic Content
  • Cleaning Up Docker Disk Usage Safely
  • A Secure-by-Default AWS Account Baseline in Terraform

Recent Comments

No comments to show.
© 2025 · John Nessime · Cairo, Egypt · All rights reserved