DevOps Blog
Real-world experiences, lessons learned, and technical insights from building production infrastructure. Stories from the trenches of DevOps, Kubernetes, cloud platforms, and platform engineering.
Migrating From dotenv.org to 1Password in Kubernetes Deployment
dotenv.org recently increased its pricing, and at the same time our organization was already consolidating secrets into **1Password** for engineering, operations, and automation workflows. Maintaining
Extending Our Tailscale Setup with a Terraform-Managed Bastion
In [my previous post](./2025/06/25/swapping-vpn-for-tailscale-a-five-day-internal-infra-upgrade/), I wrote about how we replaced a traditional VPN with Tailscale to connect engineers to Kubernetes ser
Reviving Doraemon: A Slack Bot’s Second Life in Kubernetes
Some projects stick with you. For me, it was a little Slack bot I hacked together at a previous job—something that could talk to our infrastructure and give quick answers without switching tools. I ne
Replatforming Airbyte: From Developer Laptop to EKS
In early-stage engineering teams, it's natural for tools to start out simple — often running on a single developer machine, just to get things moving. That’s how our Airbyte setup began: quick to spin
Swapping VPN for Tailscale: A Five-Day Internal Infra Upgrade
"How we started replacing our VPN with Tailscale, improved onboarding and access control, and reduced costs—all in five days."
Goodbye Nginx, Hello Traefik! Effortless HTTPS with Let's Encrypt and Docker
If you've struggled with Nginx reverse proxy configs, certbot timers, and `nginx -s reload`, it's time to meet Traefik — a modern reverse proxy built for dynamic containerized environments.
Building a Reusable Terraform Static Site Module with CloudFront, S3, and Route 53
A common need in modern cloud infrastructure is hosting static websites — whether it's marketing sites, documentation portals, or Single Page Applications (SPAs) built with React, Vue, or Svelte.
Automated TLS and DNS in Kubernetes with ExternalDNS, Ingress, and Let's Encrypt
Managing DNS and TLS certificates for Kubernetes applications can be tedious and error-prone. Thankfully, tools like **ExternalDNS**, **Ingress**, and **Cert-Manager** automate the entire process — fr
Automatically Renew AWS SSO Session and Refresh Kubeconfig for EKS Access
Working with AWS EKS clusters via AWS SSO is secure but sometimes frustrating.
Setting Up Turborepo Remote Cache with S3 and GitHub Actions
Setting up a production-grade remote cache for [Turborepo](https://turbo.build/) using self hosted remote cache with AWS S3 and Lambda helps improve monorepo performance, especially in CI/CD pipelines
Bootstrapping My Linux Desktop and MacBook for Dev Work
After transitioning through two new jobs recently, I had the opportunity (and challenge) to set up fresh dev environments on both a Linux desktop and a MacBook. Here’s my comprehensive checklist and s
Setting Up Docker, SSL, and DuckDNS on Oracle Server
This guide will walk you through the process of setting up Docker, configuring SSL certificates, and setting up DuckDNS on an Oracle server (Oracle Linux 9).