Categories

How to Install

How to install Uptime Kuma for basic monitoring

Uptime Kuma installs with Docker Compose in about ten minutes: define a service with the official louislam/uptime-kuma image, a persistent volume at /app/data and port 3001, bring the container up with docker compose up -d, then create the admin user on first access from the browser.

Tools

Dokku: the small PaaS that never dies

Dokku is a single-server open-source PaaS that reproduces Heroku's git push deploy flow using Docker, buildpacks and an automatic SSL reverse proxy. Jeff Lindsay started it in 2013 and it is still actively maintained: release 0.35, from mid-2025, added Cloud Native Buildpack improvements and Caddy as an alternative to nginx.

Architecture

Agent-to-agent protocols: the next open layer

With MCP solving the agent-to-tool layer, a parallel problem surfaces: how do two agents from different vendors communicate with each other. Google's Agent2Agent protocol, donated to the Linux Foundation in June 2025, tries to fill that gap with an open standard.

Artificial Intelligence

Phi-3 on the edge: Microsoft’s SLM in 2025

Phi-3 is Microsoft Research's family of small language models aimed at the edge, and it competes directly with Llama 3.2, Gemma 2 and Qwen 2.5. Phi-3-mini holds 3.8B parameters and, quantized to 4 bits, fits in about 2 GB, running on a CPU with a neural accelerator, an integrated GPU or an NPU.

How to Install

How to install restic for encrypted backups

restic is the encrypted, deduplicated, incremental backup tool I run in production on several servers. A practical guide to installing it on Debian, setting up an S3-compatible repository, automating daily backups with systemd, and verifying that restore actually works before you need it.

Artificial Intelligence

LLM guardrails: frameworks and their real cost

Guardrails frameworks promise to filter language-model inputs and outputs to block data leaks, harmful content, or hallucinations. After evaluating four of the most popular ones in production, I cover what they actually do, what latency and billing cost they add, and when they pay off over simpler controls.

Artificial Intelligence

AI agent observability: tools and what to instrument first

Agents that chain calls to models, tools and memory are hard to debug without instrumentation designed for them. After a long year running agents in production, I cover what to measure first, which standards are consolidating, and which costly mistakes are avoided by getting the traces right from the start.

Architecture

gVisor: sandboxing for multi-tenant containers

gVisor isolates containers by inserting Sentry, a kernel written in Go, between the container process and the real host kernel, shrinking the system-call surface a hostile tenant can reach. Its OCI-compatible runsc runtime drops in where runc used to sit. Use systrap mode, the default since 2023: portable, no special hardware required.