5 posts
Your commit history is the only documentation that never lies. Here is why atomic commits, conventional messages, and interactive rebase are not vanity — they are survival tools for production debugging.
Ten lines of HTTP headers do more to protect your users than most firewalls. From CSP to HSTS, here is the complete security header configuration every site needs before it goes live.
Most Docker images are 900MB obesity epidemics. Here is how multi-stage builds, distroless images, and non-root users shrink your attack surface to near zero while cutting startup time to milliseconds.
Every deployment starts with a shell script. set -euo pipefail, trap for cleanup, and proper quoting separate scripts that work from scripts that fail silently at 3 AM.
100% coverage means nothing if you only test happy paths. Here is how to write unit tests that verify behavior not mocks, integration tests with real databases, and property-based tests that find edge cases you never imagined.
