The Wildcard That Wouldn't Fly: DNS-01, Traefik, and the .ovh Public Suffix List Trap
How a seemingly trivial DNS edge case turned a 5-minute Traefik setup into a deep dive into lego internals, and the exec provider workaround that finally fixed it.
Documentation on software architecture, performance benchmarks, and high-stakes engineering.
How a seemingly trivial DNS edge case turned a 5-minute Traefik setup into a deep dive into lego internals, and the exec provider workaround that finally fixed it.
Adding Redis to speed up your application makes sense, until you realize you've just traded database latency for network fragility.
Spinning up 15 local containers to change an endpoint doesn't make you faster. It makes you the SysAdmin of your own laptop. Time to trim the fat.
The race condition hiding in half the docker-compose.yml files out there, why depends_on alone doesn't guarantee service readiness, and how to actually fix it.
From scattered port numbers to clean URLs with automatic SSL—my journey of putting Traefik in front of 36 services.
A database migration story where the clock was ticking, the stakes were high, and mysqldump almost ended in disaster.
Writing grep commands under pressure is slow. I used an AI terminal to parse logs during a 30k RPM spike, but it only worked because I knew what to ask.
Why I refused to accept a traumatic rewrite and chose to build a silent bridge instead.
Why I stopped using the default bridge network to give my services their own identity on the LAN.
The WordPress official repository review is exhaustive, but it's the only free security audit you'll ever get.