Nginx with PCRE

How to enable Perl compatible regular expressions in Nginx

A CGI use case Imagine you’re working on a legacy website that’s being converted to purely static HTML pages. The project was originally built using CGI scripts (oh, the good old days) and now your boss wants all the old URLs ending in .cgi to redirect to their equivalent .html counterparts. Because your team has decided to use Nginx to serve the new website, you come up with the following nginx. [Read More]
docker  nginx  regex  web 

The Real Reason Cache Invalidation is so Hard

Did you cache that?

I could use some clarity here “There are only two hard things in Computer Science: cache invalidation and naming things.” Phil Karlton Yes, cache invalidation is hard, but do you know what’s harder? Figuring out what people mean when they say the word cache. And that, accidentally or not, can itself go under the naming things part of Phil Karlton’s famous quote. IT people have this tendency of slapping words together and expecting others to unscramble whatever they had in their minds when pronouncing them. [Read More]

CaaC: Container as a Condom

Protect your operating system from unintended consequences

First and foremost, let’s get one thing straight: this is not a dull blog, and I’m not a dull blogger. You can tell that from the blog’s name alone. If, in spite of that, you still feel uncomfortable with the word condom, don’t let it distract you—just replace it with garbage bag, lab coat, rain boots, or whatever else makes sense to you. I like the word because it makes for a nice metaphor and a pleasing acronym. [Read More]

What's Left of DevOps?

The cloud is eating everything, software included

Up up to the sky The cloud is eating more than just data centers and hosting companies—it’s also eating software, as contradictory as it sounds. Azure’s AKS, Amazon’s AWS Fargate, Google’s GCP Dataproc: those are a few of the many services that are pushing DevOps engineers’ daily activities farther away from the bare metal and closer to the ethereal heights of the clouds. As cloud providers add layers and layers of sugar on top of otherwise not so easy to master pieces of software, the nature of the work done in the cloud is changing as well, and that has direct consequences on the IT areas floating around cloud computing. [Read More]

Paranoid's Guide to Bookmarking

Bookmark stuff and keep it private with Buku

Paranoid’s guide Welcome to Paranoid’s Guide, a series of articles where I’ll show you how to live your life in this hyper tech-centric world without letting the nosy types out there peek into your sacred privacy. Maybe you have a good reason not to let powerful, abusive corporations get ahold of you personal information and keep you on an emotional leash that makes you feel like a slave of crushing, invisible hands. [Read More]

firewalld: a Gentle Introduction

Get that firewall right

Bumping the head against a closed door Have you ever installed a web server on a machine running Fedora 21+ or RHEL/Centos 7 and not been able to connect to it? You tried Firefox, then curl; you even tried a reboot. Nothing worked. Only after a while did you realize that something was blocking the connection, but you still couldn’t figure what. In despair, you ran a port scan against the computer to try to figure out who the heck was ruining your day: [Read More]

Slacking with Jenkins Like a Pro

Let the butler do the calling out

You’ve got mail If you work with Continuous Integration and Delivery pipelines, then you’ve certainly seen this before. You probably already know what I’m talking about: sending notifications that get ignored by the majority of the team. “I’ve crafted this beautiful pipeline and they don’t even check their emails. Ungrateful bastards!” It gets even more frustrating when those who ignore notifications are precisely those who usually break the builds. [Read More]

Static IP in the House

Pin a computer's IP to your router's wall

Moving target If you’re into home networking and DIY projects, you’ve probably been through bitter experiences where your devices get assigned a random IP address every so often, forcing you to spend precious time—15+ seconds—to find its new address in the local network. That’s unacceptable! One way to fix that intolerable annoyance is by making a DHCP reservation in your router, which is the most usual means of acquiring an unchanging IP address. [Read More]
diy  hardware  home  rpi  sbc  soho 

Caching and Fingerprinting

A short story about a great caching strategy

Security! Security! With a good chunk of the web moving to HTTPS for good, my previous team and I decided to join the trend and put all our front end applications behind the now fashionable security layer. You don’t wanna miss the S parteeeeeeey! We used to host our front end applications on Amazon S3, which is just a file system. As such, it doesn’t offer TLS/SSL on its own; you need to complement it with Amazon CloudFront if you want to have a static website behind HTTPS. [Read More]

SBC in the House with the Raspberry Pi

Set up a headless Raspbian Stretch in 20 minutes or less

In the house In this new series of articles, I’ll show you how to install all sorts of things in the comfort of your house. Yes, you’ve heard that right: the hardware will be located inside of your house. We’ll be installing software on things that we can actually see, touch and sometimes smell… How exciting is that? It’s like we’re back to 2003! Zero cloud, amigo. For the first installment of this series, I’ll talk about the most popular SBC (single-board computer) in the market today: the Raspberry Pi. [Read More]
diy  hardware  home  rpi  sbc