Engineering, explained
as I ship it
Notes from real production work, payments, AI agents, architecture, and why each decision was made.
Browse by topic
Writing
The tests were already written. Nothing ever ran them.
A regression reached production, and the test that would have caught it was already in the repo. There was no test script, and the only CI workflow never triggered on a push. How I wired it up.
Read articleDocker bypassed my firewall: the database port was open to the internet
My host firewall blocked port 5432. It was reachable from the internet anyway, because Docker writes its own iptables rules that your INPUT and ufw rules never see. Why it happens, and how to actually close it.
The MCP servers that actually earn their keep with Claude Code
Not a directory of 200 MCP servers: the three I still use after a month of real work, how to wire them cleanly, and the ones I removed.
The docker build that filled the disk and took down production prod-ops Shipping a SaaS on one VPS with Docker Compose: an honest audit prod-ops Sharing a Claude Code config across a team ai A practical playbook for running a remote dev team team The cart timer expired while they were paying. Now what? webdev Multiple accounts in Claude Code: the complete setup ai Cloudflare under the hood: how it works and how attackers try to get around it cloudflare Stop refunding payments you should never have charged webdev Sharing cookies across subdomains locally cookies Architecture matters more than clean code architecture Debugging is more important than features devops Why the perfect code is less maintainable architecture Stripe alternatives in the EU webdev Social previews in React: UA detection webdev AI-powered git branch diff summaries devtools Testing Lambda + EventBridge locally devops AI infrastructure: a maintenance nightmare devops How to check your AI's actual context window ai Token economy: cutting context waste ai