Blog

Write a Dockerfile simply: FROM node, COPY ., CMD run. It works, and for local tests this is often enough. But when such an image reaches CI/CD or, God forbid, production, problems begin: builds take forever, the image weighs gigabytes, and the security team grabs their heads.

The difference between “it works” and “it works correctly” is huge. Let’s go through four levels of optimization that separate a hobbyist hack from a reliable engineering solution.

If you do self-hosting, run a home lab, or manage a small VPS, you’re probably familiar with Portainer. It’s the de-facto standard: a powerful, all-encompassing “Swiss Army knife” for Docker.

But let’s be honest: sometimes the Swiss Army knife is too heavy when you just need to peel an apple.

Recently I discovered Dockge — a tool from the same developer as the popular Uptime Kuma. It made me completely rethink how I manage containers. In this article I’ll explain why Dockge can be the perfect replacement for Portainer in many scenarios.

Over the last ten years the web application deployment industry has evolved from FTP scripts and rsync to highly complex orchestration systems. Today developers and small teams increasingly face a difficult choice:

• either pay a significant premium for the convenience of PaaS platforms (Heroku, Render, Fly.io),
• or dive into the cognitive and operational complexity of Kubernetes.

Kamal offers a third way: the convenience of modern cloud services — on your own server.

In a world where data volume grows faster than GPU prices, the question “Where to store files?” becomes critical. Google Drive and iCloud are convenient but expensive and not unlimited. External hard drives are unreliable. Ready-made solutions from Synology or QNAP are good, but hit the wallet.

Enter TrueNAS. It’s an operating system that turns a regular computer into a powerful enterprise-grade network-attached storage (NAS).

Let’s figure out why TrueNAS is so popular, what challenges you’ll face, and whether this system is right for you.

If your business works with users from Russia, the question of where personal data is stored concerns you directly. Phones, names, email addresses, form submissions, employee data — all of this falls under strict localization requirements.

Many companies have lived for years in a “gray area”: data seemed to be stored both in Russia and abroad, and responsibility was blurred. But as of July 1, 2025 the rules changed so much that many common technical schemes are now considered a direct violation of the law.

Moving to the cloud or changing providers is always open-heart surgery. An engineer has to solve a lot of issues: how to move terabytes of data with minimal downtime? How to convert the schema? How to set up CDC (Change Data Capture) so as not to lose a single transaction during the switch?

Each major cloud provider has its own answer. Approaches are radically different: some provide just a “pipe” for data, some — a full ETL combine, some make migration serverless and as trouble-free as possible.

You deployed a new feature. Everything works perfectly on your local machine, and you’re happy with the result.
Then a message appears: “Nothing works for me.” You open the server logs — they’re empty. It turns out the error happened on the client side, from a user with an old browser version or unusual settings. And you might never have known about it.

This happens to almost everyone who deploys projects to production. It happened to me too, until I set up a tool that lets me see errors almost instantly — even if it’s the middle of the night and the problem occurred for a single user on the other side of the world.

Swap is virtual memory on disk that saves your VPS from crashing when RAM runs out. On low-cost servers, it’s an indispensable tool to avoid failures during short-term memory usage spikes. Setup is simple: create a file, enable it, and add it to autoload. But remember — it’s insurance, not a replacement for RAM.

Introduction

Modern VPSs are usually provisioned with enough RAM but often without swap (swap file or partition). This is a deliberate choice by providers who want you to quickly upgrade to a more expensive plan.

AWS Cognito and Microsoft Entra ID: Authentication as Part of the Ecosystem

Introduction

If Auth0 is the “hired expert” for authentication, then AWS Cognito and Microsoft Entra ID are the “system engineers” from tech giants. These services don’t just solve login — they are deeply integrated into their ecosystems and work best when you’re already using the cloud that created them.

AWS Cognito: Authentication for AWS-Native Applications

The Big Promise: AWS claims that Cognito is the “gateway” for your users into AWS. It’s designed to seamlessly integrate with other AWS services, such as Lambda for business logic or API Gateway for building APIs.

Auth0: Authentication as a Service, or “Just Pay”

Introduction

So far, we’ve discussed solutions that give you full control but demand effort. Auth0 offers a different path: outsourcing authentication entirely. “We’ll handle it for you,” says Auth0 — “just connect to our API.” It’s the perfect choice for those who don’t want to moonlight as DevOps engineers.

The Big Promise

The core message of Auth0 is simplicity. The service promises that you can add user login in minutes without writing a single line of backend code. Its key advantages: