There's no universal winner. Barman wins on simplicity and real-time WAL streaming with low operational overhead. pgBackRest wins on volume and restore speed. The criteria matter more than the tool.
Jul 13 2026 · 9′ · Tutorials · devops · produccion
Actuator isn't the problem. The problem is enabling it without a clear exposure policy. A pragmatic guide to using it as an operational tool without turning it into unnecessary public attack surface.
Jul 06 2026 · 8′ · Tutorials · devops · backend
Actuator isn't the problem. Enabling it without a clear exposure policy is. A practical guide to using it as an operational tool without turning it into unnecessary public attack surface.
Jun 17 2026 · 8′ · Tutorials · devops · backend
Zod sells itself as "define once, validate everywhere." In Next.js 16 with Server Actions, edge middleware, and API routes, that's only partially true. Three concrete failure modes and the pattern that prevents them.
Jun 13 2026 · 8′ · Tutorials · TypeScript · produccion
Actuator isn't the problem. The mistake is adding it to a project with no clear exposure policy. Here I break down which endpoints to enable, which to block, and what decisions to make before the first deploy.
Jun 01 2026 · 7′ · Tutorials · backend · produccion
strict: true is not enough — and it's not the whole story. A flag-by-flag breakdown of what each strict mode option actually does, what bugs it prevents, and the order to enable them in an existing codebase.
May 31 2026 · 8′ · Tutorials · TypeScript · backend
A system prompt isn't documentation for the model — it's a contract. After several redesigns, I landed on a format with fixed sections, explicit limits, and dynamically injected context. Here's what survived and why.
May 29 2026 · 9′ · Tutorials · TypeScript · produccion
A low p95 with a 97% error rate isn't a fast pool — it's a pool that fails fast. I built a reproducible experiment with Spring Boot 3, PostgreSQL, and k6 to understand which signals actually matter — and which ones deceive you.
May 15 2026 · 13′ · Experiments · Performance · backend
Locking down Actuator endpoints isn't enough. After the incident, I rebuilt the authorization model from scratch: explicit SecurityFilterChain, separate health groups, roles for /metrics and /env, and real validation with curl. This is what's still standing.
May 12 2026 · 7′ · Experiments · devops · backend
Architecture, real systems, product decisions and technical lessons. Everything reviewed with my own judgment before it ships.
213 articles published