Blog

Thoughts & Stories

Sharing my experiences, learnings, and adventures in tech and beyond.

Browse by Topic

DevOps & Cloud Infrastructure (116)Web Development (78)ERP Systems (66)Backend & APIs (50)AI & LLMs (45)Career Reflections (22)Software Development (19)Security (14)Product & SaaS (6)Cloud (5)AI / Machine Learning (5)University (1)Hackathons (1)

DevOps

June 202511 min read

SQL Injection Prevention with ORMs: Why Prisma and TypeORM Still Need Your Help

ORMs prevent most SQL injection but not all — learn the raw query pitfalls, Prisma safe patterns, and the real-world injection scenarios I test for in every ERP system.

DevOps

June 20259 min read

CORS Configuration for Next.js and NestJS: Getting It Right in Production

Properly configuring CORS for Next.js frontends and NestJS APIs — covering origins, credentials, preflight caching, and the misconfigurations that create real security holes.

DevOps

June 202510 min read

HTTPS and TLS Beyond Certbot: Hardening Your SSL Configuration

Go beyond basic Let's Encrypt setup — HSTS preloading, TLS 1.3, OCSP stapling, cipher suite hardening, and the SSL misconfigurations I find on production servers.

DevOps

June 202511 min read

API Security in NestJS Production: The Controls I Actually Deploy

Practical NestJS API security — rate limiting, input validation, security headers, audit logging, and the specific controls I configure for every production API deployment.

DevOps

June 202510 min read

Secret Scanning and Preventing Credentials Leaks in GitHub

How to prevent secrets from entering your git history — pre-commit hooks, GitHub Secret Scanning, gitleaks, and what to do when you have already committed credentials.

DevOps

June 202511 min read

Docker Container Security Scanning with Trivy: A Production Guide

Integrate Trivy container vulnerability scanning into your Docker workflow — covering CI/CD integration, base image selection, and reducing your container attack surface.

Showing 355–360 of 428 posts

Explore More

Projects

See the projects I've built

Experience

My professional career

Certifications

Professional certifications