Juanchi.dev
Digital Native · real systems
·
HomeCVBlogLabContact
Juanchi.dev
Digital Native · real systems
·
HomeCVBlogLabContact

Security and operations

45 posts on security and 40 on devops, organized around what you decide before something happens: where secrets live, how a backup gets restored, which dependency gets in.

  • Secrets and credentials

    Vault, secret proxies, and why environment variables are not enough.

  • Backups you can restore

    Postgres, barman, pgbackrest, and the restore drill almost nobody runs.

  • Supply chain

    How to evaluate a dependency before it becomes an incident.

Recommended reads

View more
Jul 08 2026

Node.js: the runtime that changed how we think about backend

Node.js isn't just "JavaScript on the server." It's a paradigm shift in how we handle I/O. Thirty years in tech taught me to recognize when something genuinely moves the ground beneath your feet.

Jul 08 2026 · 5′ · Experiments · javascript · node.js

5′
Jul 07 2026

Rate limiting in web apps: what to protect before picking a library

Rate limiting is not a dependency you drop into middleware and call it done. It's an abuse policy. Before you copy that snippet, you need to define what asset you're protecting, what abuse you're expecting, and what a false positive actually costs you.

Jul 07 2026 · 10′ · Tutorials · TypeScript · nextjs

10′
Jul 06 2026

Spring Boot Actuator: What to Expose, What to Hide, and What to Check Before Adding Endpoints

Actuator isn't the problem. The problem is enabling it without a clear exposure policy. A pragmatic guide to using it as an operational tool without turning it into unnecessary public attack surface.

Jul 06 2026 · 8′ · Tutorials · devops · backend

8′
Jul 02 2026

Sniffnet: monitor your network without losing your mind to tcpdump

Sniffnet is a cross-platform network traffic monitor written in Rust. Real UI, real-time charts, no security PhD required to understand what's actually going on.

Jul 02 2026 · 5′ · Experiments · networking · open source

5′
Jun 22 2026

Rate limiting in Next.js: what to protect before picking a library

Rate limiting isn't an npm dependency — it's an abuse policy. Before copying middleware, you need to define what asset you're protecting, what abuse pattern you expect, and what a false positive costs you. A guide with a decision matrix, real gotchas, and observability for Next.js.

Jun 22 2026 · 9′ · Tutorials · TypeScript · nextjs

9′
Jun 22 2026

npm Dependencies: How to Evaluate a Library Before Shipping It to Production

Adding an npm dependency isn't just installing code — it's taking on its maintenance, its attack surface, and its transitive deps. Here's the checklist I run before adding any package to a serious TypeScript project.

Jun 22 2026 · 9′ · Tutorials · TypeScript · pnpm

9′

Juanchi.dev is Juan Torchia’s public notebook — architecture, real systems and product decisions. Written and reviewed by hand in Buenos Aires. Built with Next.js, Prisma and PostgreSQL; deployed on Railway. No third-party trackers beyond aggregate analytics.

BlogUsesNowGitHubRSS© 2026 Juan Torchia · All rights reserved.