Brute Force Protection and Rate Limiting for Login Endpoints
Protect login endpoints with layered defenses: rate limit by account and by source, slow down repeated failures progressively, require multi-factor...
Search
648 results for "Go"
TLS Configuration Best Practices for Public Web Servers
A solid TLS configuration for a public web server enables TLS 1.2 and 1.3, disables older protocols, uses modern cipher suites, automates certificate renewal,...
MySQL Online Schema Changes Without Locking Large Tables
Many schema changes on large MySQL tables can run online with InnoDB's native online DDL, using ALGORITHM=INPLACE or INSTANT and an explicit LOCK clause so the...
Linux Log Rotation Strategies for High Volume Application Logs
For high volume application logs, rotate by size as well as by time, compress old files, limit retention, and prefer telling the application to reopen its log...
MySQL Slow Query Log Analysis for Production Tuning
The MySQL slow query log records statements that run longer than a threshold, and analyzing it shows which queries cost the most in total time, not just which...
Linux Systemd Service Hardening Options for Network Daemons
Systemd can sandbox a network daemon with a few unit file options: run it as an unprivileged user, set NoNewPrivileges, make most of the filesystem read-only...
Git Branch Protection Rules Best Practices for Small Teams
Small teams should protect the main branch with a short list of rules: require pull requests, require passing status checks, block force pushes and deletions,...
Git Large File Handling Strategies for Binary Assets in Repositories
Git stores every version of every file forever, so large binary assets such as images, videos, and compiled artifacts make repositories slow to clone and hard...
Git Conventional Commits and Automated Changelogs for Release Notes
Conventional Commits is a lightweight convention for commit messages, such as feat or fix followed by a short description, that tools can parse to generate...