Infrastructure tutorials

Production-grade guides for Linux, servers, security and performance. Copy-paste commands, multi-distro support, written by engineers who run this in production.

monitoring Advanced

Set up Thanos Query and Compactor for distributed metrics querying

Deploy Thanos Sidecar, Query, and Compactor to unify multiple Prometheus instances into a single global query view with long-term S3-backed storage. Covers deduplication, TLS, and production troubleshooting.

75 min 4 distros 312 views
monitoring Advanced

Configure Kubernetes network monitoring with Hubble and Cilium for traffic visibility

Enable Hubble on Cilium to get real-time eBPF-based flow visibility, deploy Hubble UI and Relay, and integrate flow metrics with Prometheus and Grafana for full Kubernetes network observability.

75 min 4 distros 404 views
devops Advanced

Implement Istio multi-cluster canary deployments and traffic splitting

Build a primary-remote Istio multi-cluster mesh with shared trust domain, then run progressive canary rollouts using DestinationRule subsets, weighted VirtualServices and metrics-based promotion across clusters.

90 min 4 distros 491 views
devops Advanced

Configure Kubernetes secrets management with External Secrets Operator and HashiCorp Vault

Learn how to deploy External Secrets Operator on Kubernetes, integrate it with HashiCorp Vault using the Kubernetes auth method, and sync secrets via SecretStore and ClusterSecretStore resources with production-grade RBAC and monitoring.

75 min 4 distros 696 views
devops Intermediate

Implement Kubernetes RBAC with service accounts and role-based access control

Configure Kubernetes role-based access control (RBAC) with service accounts, roles, and role bindings to enforce secure access policies and namespace isolation in your cluster.

45 min 4 distros 1,140 views
devops Advanced

Setup ArgoCD ApplicationSets for multi-environment GitOps workflows with automated deployment pipelines

Configure ArgoCD ApplicationSets to automate deployments across multiple environments using GitOps patterns. Learn to create templates, generators, and automated promotion workflows for production-grade Kubernetes deployments.

45 min 4 distros 982 views
devops Intermediate

Configure ArgoCD Image Updater for automated container deployments

Set up ArgoCD Image Updater to automatically detect and deploy new container image versions in your GitOps workflow. Includes Git repository integration, webhook configuration, and monitoring setup.

25 min 4 distros 879 views
networking Advanced

Implement OSPF multi-area design with FRRouting and advanced routing policies

Deploy multi-area OSPF networks with FRRouting, configure area types and LSA filtering, implement advanced routing policies with route maps, and integrate BGP redistribution for enterprise network design.

45 min 4 distros 1,072 views
security Advanced

Configure advanced nftables logging and monitoring for network security

Set up comprehensive nftables logging with structured syslog integration, Prometheus metrics collection, and ELK stack analysis. Configure Grafana dashboards for real-time firewall monitoring and automated alerting for security events.

45 min 4 distros 1,198 views
databases Advanced

Configure Elasticsearch cross-cluster replication for disaster recovery

Set up Elasticsearch cross-cluster replication (CCR) to replicate indices between clusters for disaster recovery. Configure remote clusters, create follower indices, and monitor replication status for high availability.

45 min 4 distros 1,117 views
hosting Intermediate

Configure NGINX SSL termination with Certbot for Let's Encrypt certificates

Set up NGINX with automatic SSL certificate management using Let's Encrypt and Certbot, including security headers and automated renewal for production-ready HTTPS termination.

25 min 4 distros 968 views
devops Intermediate

Configure Kubernetes ingress controller with NGINX and SSL certificates using cert-manager

Set up NGINX Ingress Controller with automated SSL certificate management using cert-manager for secure routing of external traffic to your Kubernetes services. Configure custom domains, SSL automation, and advanced routing rules for production workloads.

25 min 4 distros 887 views

Don't want to manage this yourself?

We handle infrastructure for businesses that depend on uptime. Fully managed, with one fixed contact who knows your setup.

You get one fixed contact who knows your setup

Rotterdam 06:22 · reachable in a message, no ticket form