Blog

Thoughts & Stories

Sharing my experiences, learnings, and adventures in tech and beyond.

Browse by Topic

DevOps & Cloud Infrastructure (193)AI & LLMs (142)Backend & APIs (102)Web Development (90)ERP Systems (77)Security (65)Software Development (58)Cloud (29)Career Reflections (28)AI / Machine Learning (18)Product & SaaS (12)University (1)Hackathons (1)

SecurityJuly 202610 min read

Software Supply Chain Security: SBOMs and Sigstore

How to generate SBOMs, sign artifacts with Sigstore and cosign, verify SLSA provenance, and enforce all of it as a CI gate.

SecurityJuly 20269 min read

Automated Secrets Rotation: A Strategy That Survives Audits

A practical blueprint for rotating credentials automatically, using short-lived and dynamic secrets, dual-secret cutovers, and fast leak detection so audits stop being a scramble.

SecurityJuly 20268 min read

Encrypting Secrets in Git with SOPS and age

How to keep API keys and database credentials safely inside a Git repository using SOPS and age, with per-environment keys and CI decryption.

CareerJuly 20267 min read

Building in Public as an Indonesian Developer

What sharing my work openly actually did for my engineering career from Indonesia, the awkward parts nobody mentions, and a realistic playbook to start this week.

CareerJuly 20268 min read

Growing an Engineering Blog with SEO: What Actually Worked

How I took a bilingual engineering blog from zero organic visits to steady long-tail search traffic using structured data, disciplined metadata, and internal linking, not guesswork.

DevOpsJuly 202610 min read

Prometheus Cardinality: Recording Rules That Save Your TSDB

High-cardinality labels quietly eat your Prometheus server's RAM until it OOMs. Here is how recording rules, label hygiene, and relabeling keep the TSDB small and PromQL fast.

Showing 547–552 of 816 posts

Explore More

Projects

See the projects I've built

Experience

My professional career

Certifications

Professional certifications