Posts
Easier Alternative to Nginx + Let’s Encrypt with Caddy Docker Proxy
2 min readManaging SSL certificates and proxying Docker applications has traditionally required a combination of Nginx and Let’s Encrypt. While effective, this setup can feel overly complex …
Running K3s in an IPv6-Only Environment with Cilium
6 min readMost guides for Kubernetes focus on IPv4 by default, but IPv6 is no longer a second-class citizen. In this post, I walk through configuring a K3s cluster using only IPv6, with …
Dockerfile Best Practices: A Comprehensive Guide for 2025
3 min readLearn how to write efficient, secure, and maintainable Dockerfiles following industry best practices and proven patterns.
Mitigating CVE-2025-1974 in RKE2 Clusters: A Comprehensive Guide to Updating ingress-nginx
10 min readThe recent discovery of CVE-2025-1974, a critical vulnerability in the ingress-nginx controller with a CVSS score of 9.8, has sent Kubernetes administrators scrambling to patch …
Enterprise Backup and Disaster Recovery: Comprehensive Automation Framework for Production Infrastructure and Business Continuity
20 min readEnterprise backup and disaster recovery require sophisticated automation frameworks, comprehensive business continuity planning, and robust data protection strategies that ensure …
Critical Kubernetes Vulnerability: ingress-nginx CVE-2025-1974 Mitigation Guide
8 min readA critical vulnerability in the widely-used ingress-nginx controller was recently disclosed that could allow attackers to compromise Kubernetes clusters with minimal effort. With a …
Kubernetes Apply: Client-Side vs. Server-Side - Choosing the Right Strategy
9 min readExplore the nuances of kubectl apply, including client-side and server-side strategies, to optimize configuration management and prevent conflicts in Kubernetes.
Advanced Linux Compiler and Language Runtime Development: Building Custom Programming Languages and Execution Engines
17 min readAdvanced Linux compiler and language runtime development requires deep understanding of language design, code generation, virtual machines, and execution optimization. This …