Older posts.
Terraform State in 2026: S3 Locking Replaced DynamoDB, What Else Changed
What Terraform state is and how to run it in 2026: S3 native locking with use_lockfile (GA in 1.11, DynamoDB deprecated), backend choices, HCP Terraform per-resource pricing, OpenTofu state encryption, secrets in state, splitting state and Stacks.
13 minOct 20, 2026How to Import Existing Resources into Terraform and OpenTofu (2026)
Step-by-step guide to importing existing cloud resources into Terraform 1.16 or OpenTofu 1.13: import blocks with id or identity, -generate-config-out, terraform query for bulk discovery, for_each imports, cleaning generated HCL, proving a no-op plan, and fixing common import errors.
13 minOct 20, 2026SRE for LLM Apps in 2026: SLOs for TTFT, Provider Outages and Evals
How to apply Google SRE practice to LLM applications in 2026: SLIs for TTFT and time per output token, availability when your model provider had 15 major API incidents in 72 days, eval-based quality SLIs, error budgets that count fallbacks, and rate limits.
13 minOct 20, 2026How to Set Up SLO Burn Rate Alerts in Prometheus: Sloth, Pyrra (2026)
Step-by-step: define an SLI, write Prometheus recording rules, build multiwindow multi-burn-rate alerts (14.4x and 6x pages, 3x and 1x tickets), unit test them with promtool, generate them with Sloth or Pyrra, and fix noisy SLO alerts.
15 minOct 20, 2026Serverless in 2026: Lambda vs Cloud Run vs Workers, and When It Costs More
Serverless in 2026 explained: AWS Lambda Managed Instances, durable functions, SnapStart and the new Web Functions, Cloud Run GPUs and worker pools, Azure Container Apps, Cloudflare Containers and Vercel Fluid compute, with a list-price comparison and the workloads where serverless costs more.
14 minOct 20, 2026Self-Hosting vs SaaS in 2026: 37signals Saved $2M a Year. Should You?
A balanced look at self-hosting vs SaaS and cloud repatriation in 2026: 37signals' published cloud exit numbers, Ahrefs and Dropbox, what the surveys measure, Coolify, Dokploy and Kamal, the ops cost nobody invoices, and a break-even rule.
13 minOct 20, 2026Self-Hosting LLMs vs API Costs in 2026: The 62% Utilisation Break-Even
Self-hosting an open LLM vs paying per token in October 2026: H100 prices from $1.17 to $4.29 an hour, 8,973 tokens/s per GPU for gpt-oss-120b on vLLM, a $0.20 per million API price, the utilisation each price needs to break even, and the ops costs the spreadsheet leaves out.
13 minOct 20, 2026How to Self-Host n8n with Docker Compose in Queue Mode (2026)
Step-by-step n8n queue mode setup on Docker Compose: Postgres, Redis, a webhook processor, workers with task runner sidecars, the encryption key, N8N_WEBHOOK_URL, TLS with Caddy, backups, upgrades and patching. Tested on n8n 2.43.8.
16 minOct 20, 2026How to Deploy a Secure Remote MCP Server with OAuth (2026)
Step-by-step: run a remote MCP server over Streamable HTTP as an OAuth 2.1 resource server with Keycloak 26.8.1 and MCP Python SDK 2.3.0, validate audience and scopes per tool, add rate limits and audit logs, deploy to Cloud Run, and fix 401 and discovery errors.
16 minOct 20, 2026Secrets Sprawl 2026: 28.65M Leaked Keys and 64% Still Valid Years Later
What the 2026 secrets sprawl data says: 28.65M new secrets on public GitHub in 2025, AI service keys up 81%, AI-assisted commits leaking at twice the baseline, 24,008 secrets in MCP configs, 10,456 leaky Docker Hub images, and why 64% of old leaks still work.
13 minOct 20, 2026How to Stop Secrets Leaking Into Git: Gitleaks, Pre-commit, CI (2026)
Step-by-step guide to secret scanning in 2026: gitleaks 8.30.1 and TruffleHog 3.99.3 as pre-commit hooks, GitHub push protection, CI scanning with pinned actions, rotating a leaked key, and removing it from history with git filter-repo.
14 minOct 20, 2026Container Runtime Security in 2026: Falco vs Tetragon vs KubeArmor
Kubernetes runtime security in 2026: what Falco 0.45, Tetragon 1.7 and KubeArmor 1.7 actually do, detection versus in-kernel prevention, the runc, NVIDIA toolkit and containerd escape CVEs of 2025 and 2026, and where CNAPP vendors fit.
13 minOct 20, 2026How to Run a Local LLM With Ollama: Setup, GPU and API Guide (2026)
Step-by-step Ollama guide for 2026 (v0.40): install on macOS, Linux, Windows or Docker, confirm NVIDIA, AMD or Apple GPU use, pick a model that fits, set context length, write a Modelfile, call the OpenAI-compatible API, connect coding tools, and fix slow or out-of-memory runs.
14 minOct 20, 2026How to Run an AI Coding Agent in GitHub Actions Safely (2026)
Step-by-step hardening for claude-code-action v1.0.254 and codex-action v1.13: SHA pinning, least-privilege permissions, safe triggers, keeping prompt injection from issues away from secrets, tool allowlists, turn caps, rulesets and troubleshooting.
15 minOct 20, 2026How to Reduce Docker Image Size: Multi-Stage Builds Guide (2026)
Shrink Docker images with multi-stage builds, distroless or slim bases, .dockerignore, layer ordering and BuildKit cache mounts. Measured Go, Node, Python and Java examples: 343 MB to 3.4 MB, 423 MB to 56 MB, plus a troubleshooting table.
12 min