Go (Golang) is a statically typed, compiled systems programming language developed by Google. Its primary design goals are simplicity, fast compilation, and excellent concurrency support through goroutines and channels. Go compiles to a single statically linked binary with no runtime dependencies — deploying a Go application means copying a single binary to the target server. […]
The Linux kernel exposes hundreds of tunable parameters through the sysctl interface that control network behavior, memory protection, and file system security. Many of these defaults prioritize compatibility over security. By writing a hardening configuration to /etc/sysctl.d/, you can reduce the kernel attack surface, enable mitigations against common network attacks, and enforce memory safety features […]
Uptime Kuma is a self-hosted monitoring tool that provides a clean web dashboard for tracking uptime across HTTP endpoints, TCP ports, DNS records, Docker containers, and more. On RHEL 9, you can run it directly with Node.js and PM2 for process management, or deploy it instantly via Docker. This tutorial walks through both approaches, firewall […]
ArgoCD is a declarative, GitOps-based continuous delivery tool for Kubernetes. In the GitOps model, Git is the single source of truth for both application code and infrastructure configuration — when a developer pushes a change to a Git repository, ArgoCD automatically detects the change and applies it to the Kubernetes cluster, keeping the live cluster […]
ClamAV is an open-source antivirus engine widely used on Linux servers to detect malware in files destined for Windows users — such as email attachments, uploaded documents, and shared network storage. While Linux systems are largely immune to the Windows malware that ClamAV detects, running it is a responsible practice wherever Linux servers act as […]
Prometheus Alertmanager handles routing, deduplication, and delivery of alerts fired by Prometheus to external notification channels. On RHEL 9, integrating Alertmanager with PagerDuty and Slack allows teams to receive critical pages and contextual chat notifications from a single alert pipeline. This tutorial walks through downloading the Alertmanager binary, configuring a complete route tree, setting up […]
Log files are the primary diagnostic tool for server administrators — but without rotation they become a problem in their own right. An unrotated /var/log/nginx/access.log on a busy server can grow to tens of gigabytes within weeks, filling the filesystem, crashing the logging application, and making the log itself unusable because no tool can efficiently […]
PostgreSQL does not include built-in primary election or automatic failover — that is where Patroni comes in. Patroni is a Python-based template for HA PostgreSQL using a distributed configuration store (DCS) such as etcd to coordinate which node is the primary at any given time. When the primary fails, Patroni automatically elects a new primary […]
iptables has been the standard Linux packet-filtering firewall for over two decades, and while RHEL 9 ships with nftables and firewalld as the preferred tools, iptables remains available and is widely understood by seasoned administrators. Learning iptables gives you deep insight into how Linux netfilter works and is valuable for managing legacy systems or containers […]
Graylog is an open-source centralised log management platform that collects, indexes, and analyses log data from across your infrastructure in one place. On RHEL 9, deploying Graylog 5.x gives operations teams powerful search, alerting, and dashboarding capabilities without relying on cloud-based log services. Graylog depends on MongoDB for metadata storage and OpenSearch (or Elasticsearch) for […]
