Latest

From Metric Overload to Victoria: Simplifying My Observability Stack

Or: how I stopped worrying and learned to love fewer containers The Problem With "Best Practice" Stacks There's a certain kind of infrastructure creep that happens to every DevOps engineer who's been around long enough. You start with a simple goal — "I want

Validating Docker Builds with .rego Policies: Because "It Works on My Machine" Isn't a Security Strategy

We've all been there. It's 2 AM, the CI pipeline is green, and you ship your container to production feeling like a DevOps rockstar. Then Monday morning rolls around and someone discovers that your Dockerfile pulled a base image from some-dude-on-the-internet/totally-legit-node:latest. Oops. In the

DHI Customizations - building base Docker Images without a Dockerfile

Because sometimes the best Dockerfile is no Dockerfile at all. The Never-Ending Quest for Smaller Attack Surfaces One of the biggest challenges in modern infrastructure is minimizing the attack surface. In the container world, that essentially means picking the right base image with the smallest imaginable attack vector. If your

Monitoring Applications with OpenTelemetry, Grafana Alloy, Loki, Tempo & Mimir — A Complete Self-Hosted Observability Stack

Modern observability tooling makes big promises. Deploy your .NET services into Azure App Services, tick the right boxes, and the platform conveniently hands you metrics, logs, and traces. Azure Monitor, Application Insights, Log Analytics – they all integrate neatly as long as you never leave the hyperscaler's garden. Move

How I Built an Uber-like API for Lithuanian Taxi Provider Without Breaking the Bank

TL;DR: I replaced expensive third-party routing and geocoding APIs with a self-hosted stack using OSRM for routing and Nominatim for geocoding. Running on a single €15/month Hetzner ARM instance, this solution reduced potential mapping costs from hundreds of euros monthly to predictable VPS bills—while maintaining production-level performance

We Are Developers: Docker Offload, Docker Model Runner & more...

Today, At We Are Developers conference in Berlin, Docker Inc. announced a lot of news, which should be interesting for developers building AI based apps. (and not only them) In short * Docker Offload - A single command to switch between your local development environment and cloud resources, granting you access

Your personal offline coding assistant with Docker Model Runner and Zed Editor

Docker has just released a new build of Docker Desktop for Mac users, featuring an exciting new AI capability called "Docker Model Runner". This feature allows you to run large language models (LLMs) directly on your MacBook as easily as running a Docker container. As someone who isn’

Docker Bake is here!

Docker just announced that Docker Bake has reached the GA. And that is huge news! As a docker captain and containers fan in general, I've already experimented with it in the past, and in my personal view, it's amazing. In this blog post, I'm

Deploying Docker Registry with Granular Access Control, TLS & S3

Deploying a self-hosted Docker registry might seem like a simple task, and there are many guides available on how to do it. However, most of these guides cover only the basics. One of the biggest limitations I encountered was the inability to configure different access rights for each user. This

Kubernetes on a Budget: Running a Robust Cluster for Under 80€ a Month with K3S

Kubernetes is often seen as a powerful but expensive platform for orchestrating containers. However, with the right approach and choice of tools, it's possible to run a fully functional Kubernetes cluster without breaking the bank. In this blog post, I'll share how I run a Kubernetes

This Month's Indie App Progress: Expenses, Bug Squashing, and a Backend Switch

Hey everyone, I'm back with an update on my indie app! I apologise for missing last month's post – my full-time projects got a bit hectic and ate into my indie development time more than expected. The good news: progress is happening! This month, I focused on

Starting My Indie Developer Journey: Building a personal finance tracking app

As I take my first steps into the world of indie development, I find myself at a familiar crossroads. While I've previously crafted software and apps, this venture marks a significant departure: I'll be the sole owner, with no external funding. This time, it's

Certified K8S Administrator (CKA)

I've finally took the CKA Exam and passed it successfully from first try. From my personal view - exam was really easy one. Most tasks relatively simple ones, only a few of them was a bit more complex. Maybe, it's because I use it daily for

K8S Web Operator - Part 1 (Git)

In previous post, I've mentioned a plan to build K8S Based Web Management system with git-based deployment model in place. Something similar to how Heroku works. If you haven't read about the plan, it's mentioned in the end of this article: Move from OVH