Platform Engineering
9 min readStandardising CI/CD pipelines across teams
Reusable GitHub Actions workflows, Environment-scoped OIDC, and digest promotion so several teams ship without each inventing a private release path.
Notes
Practical notes from cloud architecture, platform engineering, security, and production operations.
Featured
Platform Engineering
8 min readTerraform module patterns for multi-environment cloud estates
Terraform module boundaries, environment roots, isolated state per account, and pinned promotion, so teams can extend a cloud estate without breaking it.
Cloud Architecture
5 min readMulti-cloud network topology decisions
Why VPC and VNet models diverge across AWS, Azure, GCP, and Alibaba Cloud, and how to decide what to standardise versus what to leave provider-native.
Security and Compliance
8 min readRBAC in production cloud estates
Role design, OIDC for pipelines, SSO for people, access reviews, and time-boxed break-glass: production access that stays auditable across cloud accounts.
Security and Compliance
8 min readGolden image architecture for Linux baselines
Packer golden images: bake vs configure boundaries, promotion pipelines, launch-template enforcement, and baseline hardening checks across AWS, Azure, and GCP.
All notes
Self-hosting n8n on Synology DSM with Docker Compose
Platform Engineering13 min readRunning the n8n Assistant code sandbox on Synology DSM
Platform Engineering8 min readPlaywright smoke tests as a deploy gate in GitHub Actions
Platform Engineering9 min readZero-downtime database migrations with GitHub Actions
Platform Engineering9 min readWhy is my WordPress admin slow? A technical diagnosis guide
Operations and Performance13 min readPractical multi-cloud cost optimisation
Operations and Performance4 min readCloud migration without operational risk
Cloud Architecture4 min readBlock outgoing URL calls with iptables on Linux
Security and Compliance3 min readHow outbound plugin calls added 16 seconds to WordPress admin
Operations and Performance5 min readServe Let's Encrypt ACME challenges on Nginx
Security and Compliance3 min readHardening WordPress on LAMP (Apache)
Security and Compliance4 min readHardened WordPress on Ubuntu 18.04 LEMP
Security and Compliance12 min readFixing Chef cluster issues
Platform Engineering3 min readConfiguring UTF-8 collation for MySQL or MariaDB on Docker
Platform Engineering2 min readInstalling MongoDB on Ubuntu 15.04
Operations and Performance2 min readCSV UTF-8 encoding issues in Excel
Operations and Performance2 min readMarketing vanity URLs
Platform Engineering3 min readAvoid duplicate-content SEO issues on Cloudflare origin subdomains
Cloud Architecture2 min readGit tips and tricks
Platform Engineering3 min readLazy loading images with JavaScript
Operations and Performance2 min readGet in touch
Get in touch
Send a note to start a conversation, or reach out directly by email.
Contact