#Operations

Security · calendar_today Aug 18, 2026 · schedule 5 min read

Secrets Management: Life Beyond the .env File

The real leak vectors ranked, the non-negotiables at any size, a three-rung maturity ladder that mostly stops at rung two, and rotation as a rehearsed muscle with two-key overlap.

Database · calendar_today Jul 5, 2026 · schedule 5 min read

Schema Changes Without the Outage: Expand, Backfill, Contract

The prime directive (code and schema never jump together), batched backfills as jobs, each engine's locking personality — CONCURRENTLY, NOT VALID, gh-ost — and the destructive-change quarantine.

Search · calendar_today May 9, 2026 · schedule 5 min read

Elasticsearch in Production: Shards, Heap and the ILM Religion

Shard sizing between the two failure modes, the 50%/30GB heap rules and why the other half matters, master quorum and watermarks, ILM tiering for log workloads, and snapshots you have actually restored.

Database · calendar_today Apr 27, 2026 · schedule 5 min read

Redis in Production: The Config That Prevents the Pager

Organized by the incident it prevents: maxmemory and eviction policies, AOF vs RDB persistence blends, Sentinel vs Cluster reality, the fork-memory trap and the five-number dashboard.