How to Test Terraform: terraform test, TFLint and Checkov (2026)
A step-by-step Terraform testing setup tested on Terraform 1.16.6: unit tests with terraform test and mock providers, integration tests, TFLint, Checkov and Trivy scans, Terratest v2, pre-commit-terraform and a SHA-pinned GitHub Actions pipeline, with real output and fixes for common errors.
13 minOct 20, 2026How to Fix Terraform 'Error acquiring the state lock' (2026)
Fix Terraform's Error acquiring the state lock safely: read the Lock Info, wait with -lock-timeout, force-unlock, clear stale S3 .tflock and DynamoDB locks, then repair state with moved and removed blocks, refresh-only plans and S3 version restores.
13 minOct 20, 2026How to Import Existing Resources into Terraform and OpenTofu (2026)
Step-by-step guide to importing existing cloud resources into Terraform 1.16 or OpenTofu 1.13: import blocks with id or identity, -generate-config-out, terraform query for bulk discovery, for_each imports, cleaning generated HCL, proving a no-op plan, and fixing common import errors.
13 minOct 20, 2026How to Set Up SLO Burn Rate Alerts in Prometheus: Sloth, Pyrra (2026)
Step-by-step: define an SLI, write Prometheus recording rules, build multiwindow multi-burn-rate alerts (14.4x and 6x pages, 3x and 1x tickets), unit test them with promtool, generate them with Sloth or Pyrra, and fix noisy SLO alerts.
15 minOct 20, 2026How to Self-Host n8n with Docker Compose in Queue Mode (2026)
Step-by-step n8n queue mode setup on Docker Compose: Postgres, Redis, a webhook processor, workers with task runner sidecars, the encryption key, N8N_WEBHOOK_URL, TLS with Caddy, backups, upgrades and patching. Tested on n8n 2.43.8.
16 minOct 20, 2026How to Deploy a Secure Remote MCP Server with OAuth (2026)
Step-by-step: run a remote MCP server over Streamable HTTP as an OAuth 2.1 resource server with Keycloak 26.8.1 and MCP Python SDK 2.3.0, validate audience and scopes per tool, add rate limits and audit logs, deploy to Cloud Run, and fix 401 and discovery errors.
16 minOct 20, 2026How to Stop Secrets Leaking Into Git: Gitleaks, Pre-commit, CI (2026)
Step-by-step guide to secret scanning in 2026: gitleaks 8.30.1 and TruffleHog 3.99.3 as pre-commit hooks, GitHub push protection, CI scanning with pinned actions, rotating a leaked key, and removing it from history with git filter-repo.
14 minOct 20, 2026How to Run a Local LLM With Ollama: Setup, GPU and API Guide (2026)
Step-by-step Ollama guide for 2026 (v0.40): install on macOS, Linux, Windows or Docker, confirm NVIDIA, AMD or Apple GPU use, pick a model that fits, set context length, write a Modelfile, call the OpenAI-compatible API, connect coding tools, and fix slow or out-of-memory runs.
14 minOct 20, 2026How to Run an AI Coding Agent in GitHub Actions Safely (2026)
Step-by-step hardening for claude-code-action v1.0.254 and codex-action v1.13: SHA pinning, least-privilege permissions, safe triggers, keeping prompt injection from issues away from secrets, tool allowlists, turn caps, rulesets and troubleshooting.
15 minOct 20, 2026How to Reduce Docker Image Size: Multi-Stage Builds Guide (2026)
Shrink Docker images with multi-stage builds, distroless or slim bases, .dockerignore, layer ordering and BuildKit cache mounts. Measured Go, Node, Python and Java examples: 343 MB to 3.4 MB, 423 MB to 56 MB, plus a troubleshooting table.
12 minOct 20, 2026How to Reduce Alert Fatigue with Alertmanager: Step-by-Step (2026)
A practical guide to cutting alert noise with Prometheus and Alertmanager v0.34: measure noise, alert on symptoms, set severity labels, then configure routing, grouping, inhibition, silences and time intervals, and fix Alertmanager not sending notifications.
15 minOct 20, 2026How to Build a RAG Pipeline With Postgres and pgvector (2026)
Step-by-step RAG pipeline on Postgres 18 and pgvector 0.8.7: install, schema, chunking, OpenAI embeddings, an HNSW index, hybrid search with full-text and reciprocal rank fusion, a Python example, retrieval evals, and fixes for slow queries and poor recall.
17 minOct 20, 2026How to Defend LLM Apps Against Prompt Injection: 8 Steps (2026)
A practical prompt injection defence guide for LLM apps and agents: break the lethal trifecta, split privileged and quarantined models, gate tool calls in code, sanitise output, add Prompt Guard 2 as a tripwire, and red team with garak 0.17.1 and promptfoo 0.124.1.
17 minOct 20, 2026How to Fix Prometheus High Cardinality: Find and Drop Series (2026)
Step-by-step guide to finding and fixing high cardinality in Prometheus 3.x: the TSDB status page and API, topk count by __name__, promtool tsdb analyze, metric_relabel_configs drop rules, native histograms, recording rules, sample_limit guardrails and Prometheus OOM fixes.
13 minOct 20, 2026How to Implement Multi-Tenancy with Postgres Row-Level Security (2026)
Step-by-step Postgres row-level security for multi-tenant SaaS: tenant_id schema design, FORCE RLS and non-owner roles, policies using current_setting, SET LOCAL with PgBouncer transaction pooling, indexes, CI isolation tests and fixes for common errors.
13 min