Skip to content
DERKONLINE

The Journal

Notes from the build.

Field notes from an AI-native studio on performance, security, deliverability, infrastructure, and the craft of shipping software that stays up. Written by the people who build it.

14 of 150 pieces

Aisle of black server racks with red and blue cabling in a data centerInfrastructure

Harden SSH Without Locking Yourself Out of Production

Key-only auth, Fail2ban tuning, and an access protocol that stops one wrong login from banning your own deploy box.

8 min read
Close-up of teal network cables plugged into server ports with status lights glowingInfrastructure

How to Ship Next.js Updates With Zero Downtime Using PM2

Build to a fresh release, health-check it, then reload PM2 worker by worker so users never see a 502 on deploy.

8 min read
Macro of fiber-optic patch panel with organized teal cablesInfrastructure

Run Your Own Signed Release Channel for Self-Hosted App Updates

Build, Ed25519-sign, and publish update zips so self-hosted customers pull verified releases no attacker can forge.

8 min read
A dark server rack with rack-mounted units, status lights and an orange patch cableInfrastructure

Build a Deploy That Rolls Back When Health Checks Fail

Capture the good commit, curl the health endpoint with retries, and restore the last working build automatically when a deploy goes bad.

7 min read
Dark server racks laced with amber and teal network cables and green status LEDsInfrastructure

The PM2 Multi-Daemon Trap That Breaks Your Next Deploy

Start an app under the wrong user and your deploy can never restart it; here is how PM2_HOME ownership actually works.

7 min read
Server racks with neatly bundled orange and teal patch cables and green status LEDs in a dark data centerInfrastructure

Turn Noisy Server Logs Into Alerts You Actually Trust

Read the error body, not the alert headline. JSON logs and tuned, specific alerts cut the noise so one investigation finds the root cause.

7 min read
Row of clean dark server racks in a data centerInfrastructure

Never Fix Production by Hand: Scripts Are the Truth

Every 11pm manual fix is a time bomb of config drift. Encode fixes in deploy scripts so any server rebuilds from zero, identically.

7 min read
Glowing blue fiber-optic strands forming a dense connected network on a dark backgroundNetworking

Expose an Internal App Publicly Without Opening a Single Port

Cloudflare Tunnel reaches out from your server instead of letting the world reach in, so your origin IP and firewall stay invisible.

7 min read
Clean data center corridor lined with dark server racks and a polished floorInfrastructure

Self-Hosting vs Managed Cloud: The True Cost Founders Miss

A clear-eyed model of when running your own servers wins on margin and control, and when managed infrastructure is the cheaper bet.

7 min read
A server rack full of equipment with cables and status lights in a dim roomInfrastructure

Give Autonomous Fixes Guardrails Before They Touch Production

Approval gates, dry-runs, and blast-radius limits that let an AI act on your servers without turning automation into the outage.

8 min read
Close-up of a network patch panel with blue and grey ethernet cables in numbered portsInfrastructure

Hand Your Deploy Pipeline to an Agent and Still Sleep at Night

Wrap build, health-check, and auto-rollback so an agent ships safely, with destructive actions gated behind human approval.

7 min read
Dark server racks threaded with amber and teal network cables and status LEDsInfrastructure

How AI Site Reliability Cuts Your On Call Burden To Near Zero

What an autonomous SRE catches and fixes automatically, and which incidents still need a human at three in the morning.

6 min read
A single white toggle light switch on a clean white wall with generous negative spaceInfrastructure

Roll Out Risky Features Behind Flags You Can Kill in One Click

Progressive delivery with targeting, one-click kill switches, and cleanup discipline so a bad release never becomes a midnight rollback.

8 min read
Aisle of dark server racks with red and blue cabling receding into a data centerInfrastructure

Instrument Your App to Find Root Cause in Minutes

Structured logs, distributed traces, and correlation IDs that turn a vague outage report into an exact line of code in minutes.

8 min read

Where to next

What we doThe nine services
See the workShipped, in production
Start a projectDesign it live
Journal · DERKONLINE