I know I got you wondering how to secure Grafana so that you can check your dashboards on public 4G LTE. And not need to worry about IP-whitelisting. I am assuming by now you are thinking, Yes Alex! I know that Fail2ban, and a CDN is exactly what I need.
Amazon’s CloudFront is one of the most widely used Content Delivery Networks (CDNs) on the internet. A huge portion of the public-facing web relies on CDNs to move content closer to users, reduce latency, and absorb traffic spikes that would otherwise overwhelm origin servers. And Amazon CloudFront is now free.
Vector search using Celery and LangChain where OpenAI embedding clients live inside Celery workers. Startup signals and lazy resource loading.
A look at adding vector search to a Django service with pgVector and OpenAI embeddings, how Celery keeps embedding workloads scalable.
Moreover, we set it up as a relay using AWS SES for outgoing messages. Without SES, most servers like gmail.com will reject our messages by default.
It was impossible to find a guide that explains how to set up Dovecot for a multi-domain email server, so I made one to remind myself.
Tutorials on email servers are sparse. Everyone wants to deploy a Vercel app, but nobody is standing up Postfix servers. Even more so for configuring multiple domains on a single VM. We need four things:
I wanted to manage my email accounts without paying for Google Workspace. Here is how I set up OpenLDAP for multi-domain email.
Keeping your Apache configuration up to date with the latest AWS CloudFront IP ranges can be surprisingly important. If you’re using CloudFront as a CDN or reverse proxy in front of your Apache server, you need to tell Apache which proxies are trusted.
I did not plan on writing a series about hardening Django on EC2. It actually started before I deployed anything. I spent enough years setting up Linux servers that I developed a reflex: whenever I build a new machine, I install a firewall, lock down SSH, and turn on Fail2ban