Infrastructure tutorials

Production-grade guides for Linux, servers, security and performance. Copy-paste commands, multi-distro support, written by engineers who run this in production.

Browse by topic

Most viewed

Configure Linux system time synchronization with chrony and NTP hardening

linux
656

Install and configure CockroachDB cluster with high availability and distributed SQL

databases
647

Configure network interface monitoring with ICMP ping and connectivity testing

networking
628

Install and configure PostgreSQL 17 with performance tuning and security hardening

databases
623

Install and configure ArgoCD for GitOps continuous deployment with RBAC and SSL

devops
609

Recently published

Implement Podman pod security with network policies and microsegmentation

security
4 hours ago

Configure Apache Airflow high availability with CeleryExecutor and Redis clustering for production deployments

devops
4 hours ago

Configure advanced gRPC load balancing with Envoy Proxy health checks and circuit breakers

networking
4 hours ago

Configure custom Grafana plugins for specialized monitoring requirements

monitoring
9 hours ago

Configure NGINX monitoring with Prometheus and Grafana dashboards for real-time web server performance metrics

monitoring
9 hours ago
"bun" × Clear all
databases Intermediate

Configure TimescaleDB backup and recovery with pgBackRest for automated PostgreSQL protection

Set up pgBackRest with TimescaleDB for automated backups, point-in-time recovery, and database protection. Includes configuration for local and remote repositories, scheduled backups, and comprehensive restore procedures.

25 min 4 distros 38 views
security Advanced

Configure Apache Airflow DAG security and secrets management with RBAC policies and encryption

Implement comprehensive security for Apache Airflow DAGs using role-based access control, HashiCorp Vault integration, and encrypted secrets management. Configure granular permissions, audit logging, and isolation policies for production workflows.

45 min 4 distros 9 views
security Intermediate

Configure Falco runtime security for Kubernetes threat detection with eBPF monitoring

Set up Falco with eBPF monitoring to detect runtime security threats in Kubernetes clusters. Configure custom rules, integrate Prometheus metrics, and establish comprehensive threat detection for container workloads.

45 min 4 distros 29 views
security Advanced

Implement Consul Connect mTLS with Vault PKI backend for secure service mesh communication

Set up mutual TLS authentication for Consul Connect using HashiCorp Vault's PKI backend to secure service-to-service communication with automatic certificate management and rotation.

45 min 4 distros 38 views
devops Advanced

Configure Podman secrets management with HashiCorp Vault integration

Set up secure container secrets management by integrating Podman with HashiCorp Vault. Configure dynamic secret injection, automated rotation, and production-ready monitoring for containerized applications.

45 min 4 distros 43 views
security Intermediate

Configure Podman image scanning with Trivy security vulnerability detection

Set up automated container image security scanning using Trivy with Podman to detect vulnerabilities, misconfigurations, and security issues before deploying containers to production.

45 min 4 distros 39 views
monitoring Intermediate

Configure Prometheus Blackbox Exporter for endpoint monitoring with SSL and alerting

Set up Prometheus Blackbox Exporter to monitor HTTP, HTTPS, DNS, TCP, and ICMP endpoints with SSL certificate validation and automated alerting for comprehensive uptime monitoring.

25 min 4 distros 32 views
monitoring Intermediate

Set up Prometheus and Grafana monitoring stack with Docker Compose

Deploy a complete monitoring solution using Prometheus for metrics collection and Grafana for visualization with Docker Compose. This setup provides comprehensive system monitoring, alerting capabilities, and customizable dashboards.

25 min 4 distros 26 views
monitoring Intermediate

Set up InfluxDB alerting with Kapacitor and notifications

Configure comprehensive alerting for InfluxDB using Kapacitor with email, Slack, and webhook notifications. Set up real-time monitoring, thresholds, and automated responses for time-series data anomalies.

25 min 4 distros 10 views
monitoring Intermediate

Configure Grafana dashboards for TimescaleDB analytics with real-time metrics and alerting

Build comprehensive Grafana dashboards for TimescaleDB analytics with time-series visualizations, custom queries, and automated alerting for performance monitoring and data insights.

45 min 4 distros 19 views
performance Advanced

Optimize ClickHouse performance for high-throughput workloads with advanced tuning and memory management

Learn how to optimize ClickHouse for high-throughput analytics workloads through advanced memory configuration, query performance tuning, storage engine optimization, and connection pooling strategies.

45 min 4 distros 18 views
databases Advanced

Set up TimescaleDB high availability with streaming replication and automatic failover

Configure TimescaleDB with PostgreSQL streaming replication for high availability. Set up primary and standby servers with hot standby mode, implement automatic failover with pg_auto_failover, and monitor replication status for production-ready time-series database clustering.

45 min 4 distros 15 views

Need help?

Don't want to manage this yourself?

We handle infrastructure for businesses that depend on uptime. From initial setup to ongoing operations.

Talk to an engineer