Infrastructure tutorials

Production-grade guides for Linux, servers, security and performance. Copy-paste commands, multi-distro support, written by engineers who run this in production.

devops Advanced

Configure Ansible Vault integration with HashiCorp Vault for secrets management

Learn how to combine Ansible Vault with HashiCorp Vault using the community.hashi_vault collection, AppRole authentication, and least-privilege policies for production-grade secrets management in playbooks.

45 min 4 distros 344 views
monitoring Advanced

Set up Thanos Query and Compactor for distributed metrics querying

Deploy Thanos Sidecar, Query, and Compactor to unify multiple Prometheus instances into a single global query view with long-term S3-backed storage. Covers deduplication, TLS, and production troubleshooting.

75 min 4 distros 312 views
databases Advanced

Configure PostgreSQL 17 SSL encryption and certificate-based authentication

Set up a private CA, issue server and client certificates, enforce TLS 1.2+ with strong ciphers, and configure pg_hba.conf for mutual TLS client certificate authentication in PostgreSQL 17.

45 min 4 distros 524 views
devops Advanced

Configure Kubernetes secrets management with External Secrets Operator and HashiCorp Vault

Learn how to deploy External Secrets Operator on Kubernetes, integrate it with HashiCorp Vault using the Kubernetes auth method, and sync secrets via SecretStore and ClusterSecretStore resources with production-grade RBAC and monitoring.

75 min 4 distros 695 views
devops Advanced

Integrate Jaeger with Istio service mesh for distributed tracing

Learn how to integrate Jaeger with Istio service mesh to get end-to-end distributed tracing across Kubernetes microservices, including sidecar injection, trace sampling, and ingress gateway access to the Jaeger UI.

60 min 4 distros 636 views
monitoring Advanced

Configure Consul Connect service mesh monitoring with distributed tracing

Set up comprehensive monitoring for Consul Connect service mesh with Prometheus metrics, Grafana dashboards, Jaeger distributed tracing, and Envoy proxy observability for production-grade service mesh operations.

45 min 4 distros 1,710 views
monitoring Advanced

Configure Jaeger with Elasticsearch backend security and encryption

Set up secure communication between Jaeger and Elasticsearch using TLS encryption, authentication, and production-grade security hardening for distributed tracing infrastructure.

45 min 4 distros 920 views
monitoring Intermediate

Configure Jaeger distributed tracing on Kubernetes cluster with Helm charts and Elasticsearch backend

Deploy Jaeger distributed tracing on Kubernetes using Helm charts with Elasticsearch backend storage. Configure ingress, SSL certificates, and Prometheus integration for production-ready distributed tracing observability.

45 min 4 distros 906 views
databases Advanced

Configure InfluxDB 2.7 clustering for high availability with data replication and automated failover

Set up a production-ready InfluxDB Enterprise cluster with automatic data replication, failover mechanisms, and comprehensive monitoring using Grafana dashboards for time-series workloads.

45 min 4 distros 930 views
performance Intermediate

Configure Varnish ESI (Edge Side Includes) for dynamic content optimization

Set up Varnish Cache 7 with Edge Side Includes to fragment and cache dynamic content separately. ESI allows you to cache static page parts while keeping dynamic sections fresh, improving performance for complex applications with mixed content types.

25 min 4 distros 1,218 views
monitoring Intermediate

Monitor Node.js applications with Prometheus and Grafana for comprehensive performance metrics

Set up comprehensive Node.js application monitoring with Prometheus metrics collection and Grafana dashboards. Configure alerting rules for performance issues, memory usage, and error tracking in production environments.

45 min 4 distros 1,061 views
networking Advanced

Implement network monitoring with SNMP and BGP metrics using FRRouting and Prometheus

Set up comprehensive network monitoring with SNMP daemon, FRRouting BGP metrics, and Prometheus collection for real-time infrastructure visibility and alerting.

45 min 4 distros 898 views

Don't want to manage this yourself?

We handle infrastructure for businesses that depend on uptime. Fully managed, with one fixed contact who knows your setup.

You get one fixed contact who knows your setup

Rotterdam 03:29 · reachable in a message, no ticket form