Kubernetes container orchestration, deployments, services, scaling and cluster management.
I run a lot of services across a lot of environments. ECS clusters in staging and production. Nomad jobs on bare metal. Docker Swarm on some older infrastructure. Kubernetes where the team insisted. Each environment has its own version of each service deployed. Some have drifted. Some are behind on...
Coder is the self-hosted platform for cloud development environments — reproducible workspaces defined in Terraform, running on Kubernetes, EC2, or Docker, connected through WireGuard tunnels. Coder Agents delegate coding to Claude Code in governed workspaces. AGPL-3.0, 14k stars.
We upgraded from Amazon Linux 2 to AL2023 and our containers started OOM killing. The culprit: AL2023 mounts /tmp as tmpfs by default, capped at 50% of host RAM. Applications writing heavily to /tmp exhausted memory instead of disk. Here's what changed, why it happened, and three ways to fix it.
CrowdSec is the collaborative open source IPS and WAF — detects brute-force, port scans and web exploits, blocks via bouncers at the firewall or reverse proxy. The community blocklist from 200,000+ installations means you block known attackers before they reach you. MIT, Go, free forever.
Trivy and SonarQube are both essential DevSecOps tools — but they scan different things. Trivy finds CVEs in containers, dependencies, and IaC. SonarQube finds bugs, code smells, and security hotspots in your source code. Here's what each does, where they overlap, and why serious teams run both.
Nomad is the orchestrator I reach for when Kubernetes is too much machine for the job. Here's what it is, how the Nomad Autoscaler handles both apps and cluster nodes, and where it fits.
Kubernetes feels intimidating at first — but it doesn't have to be. This hands-on guide walks you through deploying your first containerized app on a local cluster step by step.