Security

articles

July 19, 2026· ~3 min read

GitOps Secrets Management for Production Kubernetes

GitOps promises a single source of truth for infrastructure: all configuration in Git, automatically synced to production. Secrets break this promise

articles

July 13, 2026· ~4 min read

LPIC-1 102-500 Deep Dive: Shell Scripting, User Management, Networking, and Security

The LPIC-1 102-500 exam is the second of two exams required for the [LPIC-1 certification](/lpi/lpic-1-exam-guide/). It covers **shell scripting and

articles

July 13, 2026· ~3 min read

LPIC-2 202-450 Deep Dive: Directory Services, Web Hosting, File Sharing, and Security

The LPIC-2 202-450 exam is the second of two exams required for the [LPIC-2 certification](/lpi/lpic-2-exam-guide/). It covers **DNS and web services

articles

July 13, 2026· ~3 min read

LPIC-3 303: Security — Deep Dive Study Guide

The [LPIC-3 303: Security](/lpi/lpic-3-exam-guide/) exam covers cryptography, public key infrastructure, file and network security, PAM, SSH hardenin

articles

July 11, 2026· ~14 min read

NetworkPolicy Enforcement Deep Dive: eBPF (Cilium) vs iptables (Calico)

Kubernetes NetworkPolicy is the standard API for controlling traffic between pods — but the API spec is just a contract. **How** that contract gets e

articles

June 12, 2026· ~5 min read

Building a Stripe-Powered Store in Next.js: A DevOps Architecture Guide

## Why Build Your Own Checkout? When I set out to sell digital products on [graphwiz.ai](https://graphwiz.ai) and [tobias-weiss.org](https://tobias-

devopsarchitecture

articles

May 25, 2026· ~4 min read

SSL Reverse Proxy with Nginx, Let's Encrypt, and CrowdSec: Production Guide

## Why a Dedicated Reverse Proxy A dedicated reverse proxy layer is the single most impactful security investment you can make for a web application

articles

April 20, 2026· ~2 min read

SSH Cheatsheet

A practical quick-reference guide for Secure Shell operations. Commands are organized by category with common flags and realistic examples covering k

articles

April 16, 2026· ~6 min read

Buy, Wait, Weaponise: The Essential Plugin WordPress Supply Chain Attack

On 7 April 2026, WordPress.org permanently closed 31 plugins from the Essential Plugin author. Every single one had been compromised by the same atta

articles

April 15, 2026· ~6 min read

Comment and Control: Prompt Injection Attacks Against AI Coding Agents in GitHub Actions

When a security researcher opens a pull request with a carefully crafted title, and GitHub Actions spins up an AI coding agent to review it, and that

articles

March 26, 2026· ~4 min read

Kubescape 4.0: Kubernetes Security Meets the AI Agent Era

At KubeCon EU in Amsterdam on 26 March 2026, the Kubescape team released version 4.0 of the open-source Kubernetes security platform. The release gen

articles

March 17, 2026· ~7 min read

Container Building and Hardening: A Production-Ready Guide

## Introduction Building container images is easy. Building them **securely**, **efficiently**, and **reliably** at scale is not. Modern container w

articles

February 16, 2026· ~6 min read

MCPwn: How MCP Integration Turned nginx-ui Into a Remote Takeover

On 30 March 2026, the NVD published CVE-2026-33032, a vulnerability carrying a CVSS 9.8 score and a codename that tells you everything about why it m

articles

February 16, 2026· ~6 min read

MCPwn: How MCP Integration Turned nginx-ui Into a Remote Takeover

On 30 March 2026, the NVD published CVE-2026-33032, a vulnerability carrying a CVSS 9.8 score and a codename that tells you everything about why it m

articles

February 9, 2026· ~1 min read

Docker Multi-Stage Builds: Optimizing Production Images

Multi-stage builds are the single most impactful optimization for Docker images. They separate build dependencies from runtime, producing minimal, se

Cart

Wishlist

Your wishlist is empty

GitOps Secrets Management for Production Kubernetes

LPIC-1 102-500 Deep Dive: Shell Scripting, User Management, Networking, and Security

LPIC-2 202-450 Deep Dive: Directory Services, Web Hosting, File Sharing, and Security

LPIC-3 303: Security — Deep Dive Study Guide

NetworkPolicy Enforcement Deep Dive: eBPF (Cilium) vs iptables (Calico)

Building a Stripe-Powered Store in Next.js: A DevOps Architecture Guide

SSL Reverse Proxy with Nginx, Let's Encrypt, and CrowdSec: Production Guide

SSH Cheatsheet

Buy, Wait, Weaponise: The Essential Plugin WordPress Supply Chain Attack

Comment and Control: Prompt Injection Attacks Against AI Coding Agents in GitHub Actions

Kubescape 4.0: Kubernetes Security Meets the AI Agent Era

Container Building and Hardening: A Production-Ready Guide

MCPwn: How MCP Integration Turned nginx-ui Into a Remote Takeover

MCPwn: How MCP Integration Turned nginx-ui Into a Remote Takeover

Docker Multi-Stage Builds: Optimizing Production Images