TLS Certificate Lifetimes in 2026: 200 Days Now, 47 Days by 2029
CA/Browser Forum ballot SC-081 cut public TLS certificates to 200 days on 15 March 2026, then 100 days in 2027 and 47 days in 2029. What changed, what Let's Encrypt did (no OCSP, 6-day certs, ACME profiles, 45 days), and how ARI keeps renewals safe.
11 minOct 20, 2026How to Test Terraform: terraform test, TFLint and Checkov (2026)
A step-by-step Terraform testing setup tested on Terraform 1.16.6: unit tests with terraform test and mock providers, integration tests, TFLint, Checkov and Trivy scans, Terratest v2, pre-commit-terraform and a SHA-pinned GitHub Actions pipeline, with real output and fixes for common errors.
13 minOct 20, 2026How to Fix Terraform 'Error acquiring the state lock' (2026)
Fix Terraform's Error acquiring the state lock safely: read the Lock Info, wait with -lock-timeout, force-unlock, clear stale S3 .tflock and DynamoDB locks, then repair state with moved and removed blocks, refresh-only plans and S3 version restores.
13 minOct 20, 2026Terraform State in 2026: S3 Locking Replaced DynamoDB, What Else Changed
What Terraform state is and how to run it in 2026: S3 native locking with use_lockfile (GA in 1.11, DynamoDB deprecated), backend choices, HCP Terraform per-resource pricing, OpenTofu state encryption, secrets in state, splitting state and Stacks.
13 minOct 20, 2026How to Import Existing Resources into Terraform and OpenTofu (2026)
Step-by-step guide to importing existing cloud resources into Terraform 1.16 or OpenTofu 1.13: import blocks with id or identity, -generate-config-out, terraform query for bulk discovery, for_each imports, cleaning generated HCL, proving a no-op plan, and fixing common import errors.
13 minOct 20, 2026Serverless in 2026: Lambda vs Cloud Run vs Workers, and When It Costs More
Serverless in 2026 explained: AWS Lambda Managed Instances, durable functions, SnapStart and the new Web Functions, Cloud Run GPUs and worker pools, Azure Container Apps, Cloudflare Containers and Vercel Fluid compute, with a list-price comparison and the workloads where serverless costs more.
14 minOct 20, 2026Self-Hosting vs SaaS in 2026: 37signals Saved $2M a Year. Should You?
A balanced look at self-hosting vs SaaS and cloud repatriation in 2026: 37signals' published cloud exit numbers, Ahrefs and Dropbox, what the surveys measure, Coolify, Dokploy and Kamal, the ops cost nobody invoices, and a break-even rule.
13 minOct 20, 2026How to Self-Host n8n with Docker Compose in Queue Mode (2026)
Step-by-step n8n queue mode setup on Docker Compose: Postgres, Redis, a webhook processor, workers with task runner sidecars, the encryption key, N8N_WEBHOOK_URL, TLS with Caddy, backups, upgrades and patching. Tested on n8n 2.43.8.
16 minOct 20, 2026How to Reduce Docker Image Size: Multi-Stage Builds Guide (2026)
Shrink Docker images with multi-stage builds, distroless or slim bases, .dockerignore, layer ordering and BuildKit cache mounts. Measured Go, Node, Python and Java examples: 343 MB to 3.4 MB, 423 MB to 56 MB, plus a troubleshooting table.
12 minOct 20, 2026How to Implement Multi-Tenancy with Postgres Row-Level Security (2026)
Step-by-step Postgres row-level security for multi-tenant SaaS: tenant_id schema design, FORCE RLS and non-owner roles, policies using current_setting, SET LOCAL with PgBouncer transaction pooling, indexes, CI isolation tests and fixes for common errors.
13 minOct 20, 2026OWASP Top 10 for LLMs 2026 and Agentic Apps: 20 Risks, Real Incidents
The OWASP Top 10 for LLM Applications 2026 and the Agentic Top 10 explained risk by risk: what moved since 2025, the real incidents behind each entry (EchoLeak, Amazon Q, postmark-mcp, Replit), and the infrastructure controls that contain them.
13 minOct 20, 2026Multi-Tenant SaaS Architecture Explained: Silo, Pool, Bridge, Cells (2026)
Multi-tenant SaaS architecture explained: the AWS SaaS Lens silo, pool and bridge models, database-per-tenant vs shared schema with row-level security, noisy neighbours, cell-based architecture, and how to work out cost per tenant, with real examples.
12 minOct 20, 2026How to Build Multi-Region Failover with Route 53 and Cloud DNS (2026)
Step-by-step multi-region failover: active-passive vs active-active, Route 53 health checks and failover records in Terraform, ARC routing controls, Cloud DNS failover policies, Aurora Global Database and Spanner, failover testing, and fixes for DNS TTL and caching problems.
16 minOct 20, 2026AI-Generated Terraform in 2026: Benchmarks, Failure Modes, Guardrails
Can you trust an LLM to write Terraform, Kubernetes YAML or Helm? What IaC-Eval, DPIaC-Eval and three 2025 to 2026 papers measured (19% to 30% first-try success, 8.4% policy compliance), the failure modes they found, and the plan, policy and review gates that make AI-written IaC safe.
12 minOct 20, 2026How to Troubleshoot Linux Performance in 60 Seconds (2026 Checklist)
A step-by-step Linux performance troubleshooting guide for 2026: Brendan Gregg's 60-second checklist (uptime, dmesg, vmstat, mpstat, pidstat, iostat, free, sar, top), how to read each output, PSI, the USE method, then bpftrace 0.27 and BCC one-liners.
13 min