ArduMaker blog

How things actually work underneath and how we solve them: servers, deploys, databases, networking and AI agents. 336.

All articles

Emails, cron tasks and automations: completing an app built with AI: How to turn a demo into a functional service using transactional email, queues, cron, webhooks and n8n with retries. 2026-10-27
Real payments in an AI-built app: Stripe, webhooks and idempotency: How to complete payments for a Lovable app or vibe coding: server confirmation, signed webhooks, reservations, and secure retries. 2026-10-27
Security for apps created with Lovable and AI: secrets, roles, RLS and JWT: How to audit an AI-generated app: authentication, permissions, RLS, JWT, API keys, CORS, uploads, and per-user tests. 2026-10-27
Checklist: 30 checks before publishing an app made with Lovable or AI: 30 steps to launch an application created with Lovable, Bolt, Cursor or ChatGPT: security, backups, payments, DNS and rollback. 2026-10-27
Deploying AI-created Next.js on a VPS: SSR, API Routes and Node.js: Next.js on VPS from v0 or AI: build, Node runtime, reverse proxy, SSL, API Routes, systemd, logs and rollback. 2026-10-27
From simulated data to real PostgreSQL: completing the database of an app built with AI: How to turn a prototype with mocks into a secure PostgreSQL app: schema, integrity, migrations, transactions, and backups. 2026-10-27
AI-generated Node.js Express: publishing a stable API without crashes: How to take Node Express made with AI to production: validation, logs, systemd, Nginx, private variables, and rate limiting. 2026-10-27
Python API made with AI: moving FastAPI or Django from development to production: How to deploy FastAPI and Django created with AI: ASGI, WSGI, Postgres, migrations, HTTPS proxy, and business tests. 2026-10-27
Migrating Base44 to your own hosting: exported code and missing backend: How to exit Base44: what is exported, what happens with authentication, functions, storage, and APIs, and how to budget for refactoring. 2026-10-27
React + Vite created with AI: publishing a SPA with Nginx, SSL and domain: How to deploy React Vite from Lovable or Bolt: npm ci, build dist, try_files Nginx, HTTPS, variables and 404 errors. 2026-10-27
From Google AI Studio or Gemini to a real app: deploying API, frontend, and data: Taking a Gemini/Google AI Studio app to production: hiding API keys, controlling costs, quotas, files, backend and server. 2026-10-27
Ten vibe coding mistakes that appear when an app gets real customers: The 10 most common mistakes when taking an AI-built application to production and how to detect them before losing data. 2026-10-27
Taking Cursor-created code to production: from the editor to an app that doesn't crash: Checklist for deploying projects made with Cursor: architecture, Git, tests, secrets, Docker, VPS, and real maintenance. 2026-10-27
From ChatGPT or Codex to your own website: publishing AI code in production: How to transform an app written with ChatGPT/Codex into a real site: structure, builds, GitHub, API, VPS, SSL and testing. 2026-10-27
Deploying an app built with Claude Code: GitHub, servers, domains and backups: Steps to turn Claude Code code into production software: CI/CD, systemd, secrets, VPS, testing, and rollback. 2026-10-27
How to take a v0 app to Next.js in production outside Vercel: From v0 to a VPS: export Next.js, review components, SSR, APIs, private variables, and publish via Git with HTTPS. 2026-10-27
Migrate data from Bolt Cloud to PostgreSQL: orders, users, and storage: How to plan a Bolt Cloud to PostgreSQL migration: model, export, data integrity, Auth, functions, and testing. 2026-10-27
Migrate Replit Agent to your VPS: processes, secrets, GitHub, and custom domain: From Replit Agent to a VPS with GitHub, systemd processes, Nginx proxy, environment variables, databases, and HTTPS. 2026-10-27
From Bolt.new to production: GitHub, server, and stable deployment with ArduMaker: How to move a Bolt.new app to your own hosting: export to GitHub, identify Bolt Cloud backend and configure VPS, SSL and deployments. 2026-10-27
Leaving Lovable without losing users: OAuth, sessions, and security when migrating: How to migrate Lovable authentication: accounts, OAuth, callbacks, sessions, password reset, RLS, and permission testing. 2026-10-27
Move a website from Lovable to a VPS: Nginx, SSL and a professional domain: How to publish a Lovable app on an ArduMaker VPS: Nginx, HTTPS, SPA Vite or TanStack Start server, and route verification. 2026-10-27
Migrate the Lovable domain without losing SEO or interrupting an application: DNS guide to exit Lovable: custom domain, HTTPS, Search Console, redirects, canonicals, TTL, and deployment rollback. 2026-10-27
Migrate Lovable Cloud to your own Supabase: users, data, files, and functions: Migration from Lovable Cloud to Supabase: how to recover tables, RLS, users, storage, Edge Functions, OAuth, and secrets without data loss. 2026-10-27
How to export Lovable to GitHub and deploy the code outside Lovable in 2026: Export Lovable to GitHub: Git sync, ZIP, Vite or TanStack Start, dependencies, variables and tests to migrate without breaking the app. 2026-10-27
From Lovable to production with ArduMaker: how to have your own stable and maintainable website: Guide to migrating a Lovable app to production: code, hosting, database, domain, SSL, deployments, support, and real costs. 2026-10-27
Who discovers a CVE and what happens from the report to the patch?: Practical guide to vulnerability discovery: researchers, CNA, coordinated disclosure, CVE, patches, and false alarms. 2026-10-27
CVE-2024-21892 in Node.js: how a process can inherit more privileges than it should: CVE-2024-21892 explained with defensive examples: Linux capabilities, impact on Node.js, privilege review and update. 2026-10-27
CVE-2024-7592 in Python: how cookie parsing can consume CPU: A DoS in Python's http.cookies: what quadratic complexity is, how it was detected, where it affects, and what to update. 2026-10-27
CVE-2026-109619 in PHP: reused global state, sessions, and code execution: Practical analysis of CVE-2026-109619: what fails in PHP workers, patched versions, official temporary mitigation, and how to update. 2026-10-27
CVE-2026-109618 in PHP: critical memory failure, real risk and urgent update: CVE-2026-109618 explained: discovery, affected PHP versions, RCE risk due to OOM memory, and official measures from October 21, 2026. 2026-10-27
CVE-2025-29927 in Next.js: why middleware should not be your only access barrier: Middleware bypass in Next.js explained with real-world scenarios, hosting scope, patches, and authorization recommendations. 2026-10-27
CVE-2024-42005 in Django: a hidden SQL injection behind JSONField: How a SQL injection flaw arose in Django QuerySet, which versions it affected, when there is exposure, and what to correct. 2026-10-27
CVE-2025-49844 in Redis: why a Lua flaw can end up in remote execution: What RediShell means in Redis, who reported it, access requirements, patched versions, and measures to protect a service. 2026-10-27
CVE-2025-1094 in PostgreSQL: when an escape function can allow SQL injection: We explain the SQL injection case in PostgreSQL escape functions, precise scope, fixed versions, and mitigations. 2026-10-27
CVE-2024-10924 in WordPress: when a security plugin allows entry as administrator: The real case of Really Simple Security: how it was discovered, who was exposed, how to fix it and review access. 2026-10-27
CVE-2024-22019 in Node.js: how an HTTP request can saturate your server: Explanation of CVE-2024-22019: denial of service, affected Node.js servers, discovery, detection, and mitigation. 2026-10-27
CVE-2023-24329 in Python: Manipulated URLs and failing security controls: A urllib.parse vulnerability explained without technical jargon: detection, possible abuses, fixed versions, and best practices. 2026-10-27
CVE-2024-4577 in PHP: how the critical PHP-CGI vulnerability in Windows works: What is CVE-2024-4577, who discovered it, when it affects PHP on Windows, how it is exploited, and how to protect your website or server. 2026-10-27
Git cherry-pick: how to move a commit to another branch without copying everything: Move a specific fix between branches with Git cherry-pick 2026-10-26
Deployment checklist: how to update a website and roll back if it fails: Practical deployment plan, smoke tests, migrations, and rollback 2026-10-26
Why your API is slow: measuring p95, SQL queries, and external calls: Investigate real latency with logs, tracing, and percentiles 2026-10-26
Health checks of an API: why a 200 OK does not guarantee that it works: Designing liveness and readiness checks without saturating the database 2026-10-26
Prometheus and Grafana on a VPS: three metrics worth monitoring: CPU, memory, disk, and alerts for production applications 2026-10-26
How much does it cost to use an AI API: calculating tokens and controlling budget: Token estimation, cache, limits, and user spending monitoring 2026-10-26
Hybrid RAG: combining semantic and keyword search without invented answers: Hybrid search, filters, and citations for AI assistants with documents 2026-10-26
Secure n8n webhooks: validate signatures, avoid duplicates, and retry: Automations with webhooks, idempotency, and error handling 2026-10-26
HTTP 429 errors: retries with exponential backoff without saturating an API: Retry-After, jitter and idempotency in HTTP clients 2026-10-26
MCP Security: minimum permissions for an AI to manage a VPS: Design secure MCP tools with scopes, approvals, and auditing 2026-10-26
MCP tools, resources and prompts: what each piece of an MCP server can do: Explain the MCP protocol and how to choose tools, resources, and prompts 2026-10-26
GitHub Actions secrets: deploy without publishing passwords or keys: Configure CI secrets and minimum permissions in GitHub Actions 2026-10-26
Supabase RLS with examples: how to prevent a user from seeing other users' data: Practical RLS policies with auth.uid and permission tests 2026-10-26
SQLite vs PostgreSQL: when to migrate an app and what changes: Choosing embedded database or PostgreSQL server for a backend 2026-10-26
Redis and caching: how to invalidate data without showing outdated information: TTL, keys and cache invalidation patterns when caching APIs 2026-10-26
PostgreSQL JSONB vs regular columns: when each option is worth it: SQL modeling and queries on flexible fields without losing performance 2026-10-26
Duplicate reservations in PostgreSQL: transactions and locks to prevent it: Avoid double booking and race conditions with SQL transactions 2026-10-26
pg_dump and pg_restore: how to create and verify PostgreSQL backups: Logical copy and restore in PostgreSQL with secure commands 2026-10-26
EXPLAIN ANALYZE in PostgreSQL: finding slow queries step by step: Execution plan and PostgreSQL indexes to optimize APIs 2026-10-26
curl for APIs: testing headers, JSON, timings, and certificates from the terminal: Useful curl commands for investigating web and HTTP errors 2026-10-26
TCP handshake vs TLS handshake: what happens before opening an HTTPS website: SYN sequence and TLS, and slow connection diagnostics 2026-10-26
Subnets /24, /26 and /27: learning CIDR with practical examples: Calculate IPv4 ranges and number of usable addresses 2026-10-26
UFW vs nftables: how to configure the firewall of a Linux VPS: Ubuntu access rules, SSH and API ports with least privilege 2026-10-26
SSH Tunnel for PostgreSQL: connect without opening port 5432: Secure remote access to Postgres via ssh -L on a VPS 2026-10-26
Certbot and Let's Encrypt: renew HTTPS automatically without breaking your website: Free certificates, automatic renewal and TLS diagnostics in Nginx 2026-10-26
dig and nslookup: how to diagnose a domain that does not resolve: Query DNS servers, records, and cache from terminal 2026-10-26
DNS A, AAAA, CNAME, MX and TXT records: examples of when to use each one: Types of DNS records and common errors when connecting web and email 2026-10-26
DNS TTL: how long an IP change really takes and how to prepare for it: Change DNS records without breaking a website or losing traffic 2026-10-26
Docker Compose in production: volumes, networks and secrets without surprises: Example of Compose with API and database, persistence and logs 2026-10-26
Nginx 502 Bad Gateway: how to find the real error on your server: Guide to diagnosing 502 between Nginx, Gunicorn, and FastAPI 2026-10-26
Nginx reverse proxy with FastAPI: publishing an API with HTTPS: Configure Nginx and Uvicorn on a VPS with TLS and local upstream 2026-10-26
Secure Bash scripts: set -euo pipefail, trap and exit codes: Avoid deployment scripts that fail silently on Linux 2026-10-26
chmod and chown: how to fix Linux permissions without using 777: Unix permissions users groups and file security on servers 2026-10-26
Full disk on Ubuntu: differences between df, du and inodes: Diagnosis of space and small files on a Linux VPS 2026-10-26
How to know which process occupies a port in Linux with ss and lsof: Discover occupied ports and services listening on Ubuntu 2026-10-26
journalctl explained with examples: finding errors from a Linux app: Search service logs by unit, priority, and date with journalctl 2026-10-26
systemctl failed: how to discover why a Linux service won't start: Debugging systemd services with status, journalctl and permissions 2026-10-26
Cron vs systemd timers: how to schedule tasks on a Linux server: Differences between cron and systemd timers for backups and automation 2026-10-26
grep, sed and awk: three commands to find problems in logs: Useful examples with grep sed awk to investigate errors on servers 2026-10-26
WSL2 vs virtual machine: which is better for programming with Linux on Windows: Practical comparison of WSL2, Docker, and VMs for Linux development 2026-10-26
How to configure ssh-agent on Windows and use SSH keys without repeating passwords: SSH agent Windows 11, keys and remote authentication on VPS 2026-10-26
How to test a REST API with PowerShell and Invoke-RestMethod: GET POST requests, JSON, authentication and diagnostics from Windows 2026-10-26
PowerShell Test-NetConnection: check ports and connections on Windows: Diagnose connectivity to an API, SSH, or PostgreSQL with PowerShell 2026-10-26
Deploy keys, SSH and tokens on GitHub: which credential to use for deployment: Secure server access to GitHub repositories without sharing accounts 2026-10-26
Git fetch vs pull: how to update your repository without surprises: Differences between downloading references and merging changes in Git 2026-10-26
Git tags and releases: how to know which version is in production: Version deployments and recover the exact commit of an app 2026-10-26
How to use .gitignore and avoid uploading secrets to GitHub: gitignore patterns, already versioned files, and secret rotation 2026-10-26
Git bisect: find the commit that broke your application: Binary search for the change that introduced a production failure 2026-10-26
Git revert, reset and restore: what to use to undo changes without losing work: Choosing between reverting a commit, moving HEAD, or recovering a file 2026-10-26
Git stash: how to save changes without making a commit: Save temporary work in Git without losing files or mixing branches 2026-10-26
Cloudways vs RunCloud: managed hosting or server panel: Cloudways vs RunCloud in WordPress and PHP projects 2026-10-26
HestiaCP vs CyberPanel: which one to choose to manage a VPS: HestiaCP vs CyberPanel with PHP, email, and maintenance 2026-10-26
cPanel vs Plesk: differences, features, and project types: cPanel and Plesk compared for hosting and applications 2026-10-26
AWS Lightsail vs DigitalOcean: differences between their VPS: Lightsail vs DigitalOcean Droplets for web projects 2026-10-26
Linode vs DigitalOcean: differences for developers: Linode or DigitalOcean to run web backend 2026-10-26
DigitalOcean vs Vultr: which one to choose to host an application: DigitalOcean vs Vultr on a website with PostgreSQL 2026-10-26
VPS without panel vs managed VPS: what really changes: Operational comparison of bare metal servers and ArduMaker 2026-10-26
Hostinger vs OVHcloud: which one is better for hosting an application: Hostinger vs OVHcloud with API, PostgreSQL, and real traffic 2026-10-26
Hetzner vs Contabo: performance, resources and VPS costs: Hetzner and Contabo comparison by server load 2026-10-26
How to migrate Docker applications from Coolify to ArduMaker: Migrating Coolify to ArduMaker VPS: Compose, volumes, DB, and HTTPS 2026-10-26
Cloudron vs Coolify: ready-to-use apps or deploy your own code: Cloudron vs Coolify: self-hosting apps or developing services 2026-10-26
CapRover vs Dokku: deploy with Git or use a panel: CapRover vs Dokku: Git flow, terminal and panel 2026-10-26
Coolify vs Easypanel: which one is better for managing a VPS: Comparison Coolify Easypanel: permissions, Docker and costs 2026-10-26
Coolify vs Dokploy: differences for managing Docker applications: Technical guide and practical examples: Coolify vs Dokploy: differences for managing Docker applications. Comparison with ArduMaker. 2026-10-26
How to combine Vercel with a backend and PostgreSQL on ArduMaker: Frontend Vercel and Django or FastAPI backend with PostgreSQL on VPS 2026-10-26
How to migrate an application from Railway to a VPS without losing data: Migrating from Railway to a VPS with backups, PostgreSQL, and DNS 2026-10-26
Fly.io vs Railway: regions, machines, scaling and costs: Fly.io vs Railway: regional availability, machines, and data 2026-10-26
Heroku vs Railway: differences in deployment, databases, and workers: Heroku vs Railway with backend and PostgreSQL example 2026-10-26
Vercel vs Netlify: differences for Next.js, Astro, and static pages: Vercel or Netlify: frontend differences and VPS alternative 2026-10-26
Railway vs Render: which one is better for publishing Django, FastAPI and PostgreSQL: Practical analysis of railway vs render: which is better for publishing django, fastapi and postgresql; examples, operating costs and VPS alternative. 2026-10-26
What is Portainer and how to manage Docker containers from a web interface: Portainer for Docker: visual panel, stacks, volumes and limits 2026-10-26
What is RunCloud and how to manage PHP servers: RunCloud to connect VPS and manage PHP, Nginx and websites 2026-10-26
What is Cloudways and how managed hosting works: Cloudways for WordPress and PHP: managed hosting versus VPS 2026-10-26
What is 1Panel and how to manage Docker and web applications: Technical guide and practical examples: What is 1Panel and how to manage Docker and web applications. Comparison with ArduMaker. 2026-10-26
What is HestiaCP and how to manage websites and emails on a VPS: HestiaCP for hosting and email: installation, limits and alternatives 2026-10-26
What is CyberPanel and how it works with OpenLiteSpeed: CyberPanel and OpenLiteSpeed: sites, caching, and administration 2026-10-26
What is Plesk and how to manage multiple websites: Plesk to manage domains, WordPress, and servers in one panel 2026-10-26
What is cPanel and what is it used for on a hosting server: Technical guide and practical examples: What is cPanel and what is it used for on a hosting server. Comparison with ArduMaker. 2026-10-26
What is AWS Lightsail and how does it differ from Amazon EC2: AWS Lightsail vs EC2: a simple VPS or tailored infrastructure 2026-10-26
What is Scaleway and what services it offers for developers: Scaleway: instances, storage and cloud services with web example 2026-10-26
What is Linode (Akamai Cloud) and what it is used for: Linode and Akamai Cloud: VPS, web development and operations 2026-10-26
What is Vultr and how its Cloud Compute servers work: Vultr Cloud Compute, instances, regions and practical scenarios 2026-10-26
What is DigitalOcean and how to publish an application on a Droplet: DigitalOcean Droplets, SSH, firewall and web deployment for developers 2026-10-26
What is Kamatera Cloud and how to set up a custom server: Technical guide and practical examples: What is Kamatera Cloud and how to configure a custom server. Comparison with ArduMaker. 2026-10-26
What is OVHcloud and how to use a VPS to publish applications: Practical analysis of what ovhcloud is and how to use a VPS to publish applications; examples, operational costs, and VPS alternative. 2026-10-26
What is Contabo and what types of projects its VPS are suitable for: Technical guide and practical examples: What is Contabo and what types of projects its VPS are suitable for. Comparison with ArduMaker. 2026-10-26
What is Hostinger VPS and what it includes for hosting applications: Hostinger VPS Guide: setup, resources, access, and comparison 2026-10-26
What is Hetzner Cloud and how to use its VPS servers: Hetzner servers, SSH, firewalls, and what changes when using ArduMaker 2026-10-26
What is Cloudron and how to install self-hosted applications: Cloudron and self-hosted app catalog: updates, backups, and limits 2026-10-26
What is Dokku and how to deploy an application with Git Push: Dokku as a self-hosted PaaS: commands, deployment, plugins and examples 2026-10-26
What is CapRover and how to create your own application server: Practical guide on what CapRover is and how to create your own application server with examples and infrastructure comparison. 2026-10-26
What is Dokploy and how to deploy projects using Docker: Technical guide and practical examples: What is Dokploy and how to deploy projects using Docker. Comparison with ArduMaker. 2026-10-26
What is Easypanel and how it simplifies Docker application management: How Easypanel works for apps, domains, databases, and its comparison with ArduMaker 2026-10-26
What is Coolify and how to publish applications on your own server: What Coolify installs, how it deploys Docker, and when a VPS with an included panel is worth it 2026-10-26
What is Fly.io and how application deployment by regions works: Fly.io and its distributed machines: latency, data, region, and comparison with VPS 2026-10-26
What is Netlify and what type of websites it is suitable for: Netlify for static sites, deploy previews and functions; when to use ArduMaker 2026-10-26
What is Heroku, how dynos work and what it is for: Practical guide on what Heroku is, how dynos work, what it is used for with examples and infrastructure comparison. 2026-10-26
How to publish a FastAPI API on Render step by step: Publish FastAPI on Render with Git, variables, service health, and VPS alternative with ArduMaker 2026-10-26
How to deploy Next.js on Vercel: advantages, limits, and alternatives: Practical guide on how to deploy Next.js on Vercel: advantages, limits, and alternatives with examples and infrastructure comparison. 2026-10-26
How to deploy Django and PostgreSQL on Railway: practical guide: A human guide to publishing Django with PostgreSQL on Railway, reviewing common failures, and understanding how to do it also on a VPS with ArduMaker. 2026-10-26
What is a SQL index and when does it speed up a query?: Database indexes explained: searches, EXPLAIN, writes, and errors when indexing everything. 2026-10-26
What is connection pooling and why does a database become saturated?: Connection pooling explained: how to reuse connections, limits, queues, and PgBouncer. 2026-10-26
What is a database migration and how to apply it without losing information?: Schema migrations: columns, indexes, compatible changes, backups, and rollback. 2026-10-26
What is a feature flag and how to activate functions without redeploying?: Feature flags explained with examples: gradual rollouts, testing, and technical debt. 2026-10-26
What is a zero-downtime deployment and how to avoid outages when updating a website?: Zero-downtime deployments: health checks, load balancers, compatible versions, and rollbacks. 2026-10-26
What is the Linux OOM Killer and why does it close processes?: How Linux reacts when memory runs out, what the OOM Killer does, and how to diagnose an app that disappears. 2026-10-26
What is SLAAC and how does your computer obtain an IPv6 address?: SLAAC explained: IPv6 autoconfiguration, router advertisements, DHCPv6 and address privacy. 2026-10-26
What is DNSSEC and what attacks can it help prevent?: DNSSEC explained: DNS signatures, response validation, chain of trust, and limitations compared to HTTPS. 2026-10-26
FTP vs SFTP: differences and how to transfer files securely: What is the difference between FTP, FTPS, and SFTP, how files travel, and what to choose for a Linux server. 2026-10-26
What is HSTS and why does it protect HTTPS connections?: HSTS explained: how it forces the browser to use HTTPS, configuration risks, and when it makes sense to enable preload. 2026-10-26
What is WebAssembly and what it is used for within a browser: WebAssembly from scratch: binary modules, JavaScript, performance, real-world cases, and limitations. 2026-10-26
Cookies, localStorage and sessionStorage: what to store in each one: Differences between cookies and web storage, expiration, security, sessions, XSS and CSRF explained. 2026-10-26
What do HTTP errors 400, 401, 403, 404, 429 and 500 mean: Practical guide to HTTP response codes to find out what fails between browser, API, authentication, and server. 2026-10-21
What is uptime monitoring and why can a website be down even if the server is still on?: Availability monitoring: HTTP checks, latency, alerts, regions, and false positives explained. 2026-10-21
What is Grafana and how to create dashboards that are useful for investigating problems?: Grafana explained: data sources, dashboards, alerts, and errors when visualizing metrics without context. 2026-10-21
What is Prometheus and how does it monitor servers and applications?: Prometheus explained with metrics, exporters, scraping, labels, alerts, and cardinality errors. 2026-10-21
What is OpenTelemetry and how does it help find errors between services?: OpenTelemetry explained with examples: traces, spans, metrics, distributed context, and instrumentation limits. 2026-10-20
What is observability and how do logs, metrics, and traces differ?: Observability explained: what logs, metrics, and traces tell you, how to investigate errors, and when it makes sense to combine them. 2026-10-20
What is a honeypot and what is it used for in cybersecurity?: What is a honeypot, how it helps observe attack attempts, what its limitations are, and why it must be isolated. 2026-10-20
What is privilege escalation and how is it prevented in Linux?: Privilege escalation explained from a defensive perspective: permissions, services, updates, and access auditing. 2026-10-20
What is a CVE and how to interpret a CVSS score?: What identifies a CVE, what CVSS evaluates, why severity does not mean immediate risk, and how to prioritize updates. 2026-10-20
What is a man-in-the-middle attack and how can it intercept connections?: Man-in-the-middle attacks explained: insecure networks, TLS, certificates, browser warnings, and protection measures. 2026-10-20
What is a WAF and what difference does it have with a normal firewall?: What is a web application firewall, how it filters HTTP requests, false positives, and why it does not replace fixing vulnerabilities. 2026-10-20
SSR vs SSG: when to generate a page on the server or at build time: What SSR and SSG are, performance, SEO, personalization, caching differences, and when to choose each strategy. 2026-10-20
What is CSRF and how is an application protected against forged requests?: CSRF attacks explained with cookies, involuntary actions, anti-CSRF tokens, SameSite and server-side defenses. 2026-10-20
What is a JWT and why you shouldn't store secrets inside it?: JWT explained from scratch: header, payload and signature, differences with encryption, expiration and security precautions. 2026-10-20
What is OAuth 2.0 and how does it connect applications without sharing passwords?: OAuth 2.0 explained with an example of delegated permissions, scopes, redirects, and differences between authorization and identity. 2026-10-20
Authentication vs authorization: what changes between logging in and having permissions: Authentication confirms who you are and authorization decides what you can access: examples, failures, and ways to test permissions. 2026-10-20
What is rate limiting and how to protect an API from excessive requests?: What is rate limiting, user and IP limits, 429 responses, time windows, and when it can harm legitimate users. 2026-10-20
What is API pagination and why does it prevent huge responses?: API pagination with limit/offset and cursors: how to return large lists, handle data changes, and avoid performance errors. 2026-10-20
What is CORS and why does the browser block a request to your API?: What is CORS, how the preflight OPTIONS works, difference with authentication and how to configure it without allowing any origin. 2026-10-20
What is Git rebase and when is it better to use it instead of merge?: Git Rebase explained with examples: linear history, identifier changes, differences with merge, and how to avoid rewriting shared branches. 2026-10-20
What is a merge conflict in Git and how to resolve it without losing changes?: How Git conflicts appear, what conflict markers mean, and how to resolve them with tests and without discarding work. 2026-10-20
What is a commit in Git and what information does it actually store?: What a Git commit does, why it has an identifier, how to write useful messages, and what mistakes to avoid when saving changes. 2026-10-20
What is a job queue and why does your application need one?: What is a task queue, how workers work, retries, idempotency, and what to do with failed jobs. 2026-10-20
What is PocketBase and why does it use SQLite to create a small backend?: PocketBase explained from scratch: SQLite, authentication, real-time API, limits, and use cases. 2026-10-20
What is Appwrite and what does it offer as a ready-to-use backend?: What Appwrite is, what authentication, databases, storage, and functions are for, and when it makes sense to self-host it. 2026-10-20
What is an MCP tool and how can an AI perform real actions?: What an MCP tool offers, how it differs from an API, what permissions it needs, and why AI should not have unlimited access. 2026-10-20
What is a vector database and what is it used for in artificial intelligence?: Vector bases explained with examples: embeddings, semantic search, RAG and limitations compared to SQL. 2026-10-20
What is a cache and why can it speed up an application so much?: What is a cache, how hits, misses, TTL and invalidation work, and when it really helps a website. 2026-10-20
Shared hosting, VPS or dedicated: differences and how to choose: Shared hosting, VPS and dedicated server: control, maintenance, resources and costs explained with practical cases. 2026-10-20
What is Railway and what type of projects is it suitable for?: Railway explained with examples: deploying apps from Git, variables, services, databases and differences with a VPS. 2026-10-20
What is Render and when is it worth using to host an application?: What Render does, how application and database deployment from Git works, and what is worth comparing with a VPS. 2026-10-20
What is a REST API and what do GET, POST, PUT and DELETE mean?: REST API explained with examples of clients and products: resources, HTTP methods, status codes and differences with any API. 2026-10-20
What is Supabase Auth and how do its users and sessions work?: Supabase Auth explained: login, registration, JWT, sessions, refresh token, account recovery, and relationship with RLS policies. 2026-10-20
What is Row Level Security (RLS) and how does it protect each row of PostgreSQL?: RLS explained with an example of orders and users: row-level policies, SQL permissions, auth.uid(), service role and common security errors. 2026-10-20
What is a thread and how does it differ from a process?: Threads and processes explained with examples: shared memory, concurrency, parallelism, locks, and when it is convenient to use each one. 2026-10-20
What is a process in Linux and why do so many appear on a server?: Linux processes explained: PID, CPU, memory, ps, top, signals and difference between a process and a program. 2026-10-20
What is an environment variable and what is it used for on a server?: Environment variables explained: PATH, PORT, API keys, .env files, security, and production application configuration. 2026-10-20
What is APT and how to install and update programs in Ubuntu?: APT on Ubuntu and Debian explained: apt update, install, upgrade, repositories, dependencies and tips for updating servers without errors. 2026-10-20
What is PowerShell and what is it used for in Windows and servers?: PowerShell explained: cmdlets, objects, pipelines, scripts, Windows administration, and differences with CMD and Bash. 2026-10-20
What is Bash and how does it differ from the Linux terminal?: Bash explained from scratch: shell, terminal, commands, pipes, scripts, variables, and errors worth avoiding on a server. 2026-10-20
What is latency and why can the Internet be slow even with many megabits?: Latency explained: milliseconds, ping, RTT, jitter, packet loss, bandwidth and tips for measuring a connection. 2026-10-20
What is a network switch and how does it differ from a router?: Ethernet Switch explained: how it connects devices on a LAN, MAC addresses, managed switches, VLANs, and when you need one. 2026-10-20
What is a router and what does it do when you access the Internet?: What is a router, how it decides packet routes, differences with Wi-Fi, modem and switch, and how to diagnose a connection. 2026-10-20
What is a zero-day vulnerability and why can it be dangerous?: Zero-day vulnerabilities explained: discovery, exploitation, patches, difference with CVE, and how to protect systems without a fix available. 2026-10-20
What is a brute force attack and how to protect your passwords?: Brute force, password spraying and credential stuffing: differences, defenses with MFA, attempt limits and login security. 2026-10-20
What is ransomware and how to protect your files and servers?: Ransomware explained from scratch: file hijacking, data theft, backups, warning signs, and what to do in case of an incident. 2026-10-20
What is CRUD and why does it appear in almost all applications?: CRUD explained with everyday examples: create, read, update and delete data, relationship with REST APIs, permissions and common errors. 2026-10-20
What is an AI agent and how does it differ from a chatbot?: AI agents explained: models, tools, permissions, planning, examples, and limitations compared to a traditional chatbot. 2026-10-20
What is an automated test and how to prevent a change from breaking your website?: Automated testing explained: unit, integration, and end-to-end tests, examples with Python, coverage, and common mistakes. 2026-10-20
What is GitHub Actions and how does it automate testing and deployments?: GitHub Actions explained: workflows, events, jobs, runners, secrets and an example of testing before publishing code. 2026-10-20
What is serverless and why are there still servers behind it?: Serverless explained: what on-demand functions are, when they run, limits, cold starts, costs, and differences with a VPS. 2026-10-20
What is a load balancer and when does your website need one?: Load balancer explained with examples: how it distributes requests between servers, difference between load balancing and failover, health checks and sessions. 2026-10-20
What is XSS and how to prevent code from executing on your website?: Cross-Site Scripting explained: differences between text and code, cases in comments and forms, contextual escaping and safe sanitization. 2026-10-20
What is SQL injection and how to avoid it when creating a website?: SQL injection explained for beginners: what happens when queries and data are mixed, why parameterized queries work, and how to reduce risks. 2026-10-20
What is TLS and what does the HTTPS padlock really protect?: TLS explained without mystery: how HTTPS protects data in transit, certificates, keys, authentication, and what the browser padlock means — and what it doesn't. 2026-10-20
What is two-factor authentication and why does it protect your accounts?: 2FA and MFA explained: TOTP codes, SMS, passkeys, physical keys, recovery, and which methods resist phishing best. 2026-10-20
What is a worker and why do applications use background tasks?: Workers explained with examples: queues, Celery, emails, PDFs, delayed jobs, retries and idempotency without blocking a web. 2026-10-20
What is RAG and how can an AI respond using your documents?: RAG explained with examples: how an AI searches for information in documents, what embeddings are, why it cites sources, and where it can go wrong. 2026-10-20
What is a pull request on GitHub and what is it for to review it?: What is a pull request, how to propose changes, review differences, run tests, and merge without losing control of the project. 2026-10-20
What is JSON and why does it appear in almost all APIs?: JSON explained for beginners: objects, lists, strings, numbers, real example of an API and errors that prevent it from being read correctly. 2026-10-20
What is Redis and what is it used for? Caching, sessions, and queues explained: Redis explained from scratch: what it stores in memory, when to use it for caching, sessions or queues, and why it doesn't automatically replace PostgreSQL. 2026-10-20
What is a subnet and what does a mask like 255.255.255.0 mean?: Subnets and CIDR masks explained from scratch: what /24 means, how networks are separated, and how to avoid errors when configuring servers. 2026-10-20
What is NAT and why do multiple devices share a public IP?: NAT explained with examples: public and private IP, port translation, outbound connections, port forwarding and CGNAT limitations. 2026-10-20
What is DHCP and why does your computer receive an IP automatically?: DHCP explained without technical jargon: how the router assigns IP, subnet mask, gateway, and DNS, what a lease is, and how to fix connection failures. 2026-10-20
What is a firewall and how to protect the ports of a Linux server: Learn what a firewall filters, how to use UFW without losing SSH access, and why opening only the necessary ports reduces risks. 2026-10-20
TCP vs UDP: differences, examples, and when to use each protocol: TCP delivers a reliable, ordered stream; UDP sends datagrams without those guarantees. Understand the difference with examples of web, games, DNS, and QUIC. 2026-10-20
What is a CDN and when it really speeds up a web page: A CDN brings images, CSS, and other resources closer to your visitors. How caching works, when it helps, when it doesn't, and mistakes worth avoiding. 2026-10-20
What is a bootloader and how Linux boots: GRUB explained: Bootloader on Linux: what GRUB does, how UEFI and the kernel intervene, what to check if the computer does not boot, and common errors. 2026-10-19
BIOS vs UEFI: what they are and what happens when you turn on the computer: BIOS and UEFI explained: how a PC boots, differences, Secure Boot, GPT disks, and common problems when installing a system. 2026-10-19
Debian vs Ubuntu: real differences and which one to choose for your server: Debian or Ubuntu for a server: stability, packages, support, security, and administration. Comparison with examples and criteria for choosing. 2026-10-19
Supabase vs Firebase: differences and when to choose each one: Simple technical comparison of Supabase and Firebase to choose a backend based on data, authentication, pricing, and needs. 2026-10-17
What is Supabase used for? 6 real and simple examples: Concrete use cases for Supabase: login, reservations, catalogs, files, dashboards, and real-time functions. 2026-10-17
What is Firebase and what is it used for in an application?: Google Firebase explained from scratch: authentication, Firestore, hosting, and functions, with examples and real limitations. 2026-10-17
What is a DDoS attack and how can it take down a website?: How a distributed denial-of-service attack works, what symptoms it produces, and what the usual defenses are. 2026-10-17
How to know if someone entered your server without permission?: Signs of intrusion on Linux, suspicious changes, logs to review, and what to do without destroying evidence. 2026-10-17
What is a software supply chain attack?: How an application can be compromised through packages, dependencies, or trusted providers, and how to reduce the risk. 2026-10-17
What is phishing and why do we keep falling for fake messages?: How phishing attempts work, common examples, and practical tips for recognizing them without relying solely on the HTTPS padlock. 2026-10-17
What is Nmap and how to check the ports on your own network?: What Nmap does, how to interpret open, closed, and filtered ports, and how to perform a simple check on an authorized network. 2026-10-17
What is Kali Linux and when is it advisable to use it?: What is Kali Linux, what its auditing tools are used for, and when it is not advisable to use it as a daily-use system. 2026-10-17
What is an API and what is it used for in an application?: What is an API, how frontend and backend communicate, everyday examples and differences between an API and a website. 2026-10-17
What is Vercel and what type of project is it suitable for?: What Vercel does, how it publishes applications from Git, what previews are, and when it is better to use a VPS. 2026-10-17
What is CI/CD and why automate deployments?: Continuous integration, delivery and deployment explained with examples: what to automate, what to test and how to avoid publishing errors. 2026-10-17
What is localhost and why is 127.0.0.1 used?: Understand localhost, 127.0.0.1, local ports, and why an application can work on your PC but not be accessible from the Internet. 2026-10-17
What is a VPS and what is it really used for?: What is a virtual private server, how it works, real examples, differences with hosting, and when it is worth renting one. 2026-10-17
What is a server and why is it not so different from a PC?: A server is a computer or program that provides information or functions to other devices. A simple explanation with a visual example, when it is useful, and what is worth keeping in mind. 2026-10-17
Windows, macOS or Linux: which one to use and for what?: There is no operating system that is the best choice for everyone. A simple explanation with a visual example, when it is useful, and what is worth considering. 2026-10-17
What is Ubuntu and why is it used so much on servers?: Ubuntu is a Linux distribution: it brings together the kernel, tools, programs, and an update method. A simple explanation with a visual example, when it is useful, and what is worth keeping in mind. 2026-10-17
What is a kernel and why does your computer need it?: What the Linux kernel does, how it connects programs and hardware, and why it matters even if you never see it. Simple explanation and example. 2026-10-17
How to organize projects, companies, and teams within ArduMaker: The platform structure explained once and for all: what a Company is, what a Project is, how permissions are distributed, and why that separation solves problems that later become extremely costly. 2026-09-12
Who the ArduMaker cloud is for: Three profiles where it fits well, two where it doesn't, and the honest question worth asking before moving infrastructure. 2026-09-12
Why use ArduMaker Cloud: We don't compete on number of services or price per gigabyte. What we solve is something else: enabling a small team to operate infrastructure for multiple clients without it becoming a separate job. 2026-09-12
What is AWS and why it became the name of the cloud: From an internal experiment at a bookstore to the infrastructure of half the internet. What it really sells, why its bill surprises, and when it's worth it and when it isn't. 2026-09-12
Why there are so many programming languages: Each one optimizes something different and pays for it elsewhere. Compiled or interpreted, typed or not, with garbage collection or without it: the three axes that explain almost all differences. 2026-09-12
Monolith or microservices: how to choose without regretting it: Five questions that decide better than any diagram, why the right architecture depends on your team and not on your technology, and how to leave the door open to change. 2026-09-12
What microservices are and why they emerged: They weren't born for a technical reason but an organizational one. What problem do they really solve, what costs do they bring, and why the modular monolith is the right answer for most. 2026-09-12
Who decides that a domain is yours: There is no global authority that says who owns what: there is a chain of delegation and a database. How it works, who maintains it, and what happens when there is a dispute. 2026-09-12
How to create a domain and what happens after buying it: Registrar, registry and nameservers: who is who. The five steps from registration to a working site, and the renewal, privacy and transfer traps. 2026-09-12
What is a domain and what happens when someone types it: It is read backwards from how it is written, and that single idea explains the entire hierarchy. The full DNS query process, what TTL is, and why changes take time. 2026-09-12
The steps to find a fault in a server: A six-step method that avoids blind diagnosis: what to ask first, in what order to look, how to rule out one by one, and why the restart goes last. 2026-09-12
How and where logs are stored on a server: Where each thing is searched, what changed with journald, why a log without rotation fills the disk, and the commands that resolve most searches. 2026-09-12
What is a file descriptor and why everything in Linux is a file: An integer that represents anything open: files, sockets, pipes, the keyboard. Why that abstraction made Unix so powerful, and what "too many open files" means. 2026-09-12
How child processes are managed in Linux: What fork and exec do, why zombie processes exist and what they really mean, who adopts orphans, and why your container ignores the shutdown signal. 2026-09-12
What is PATH and why "command not found" is almost never what it seems: A colon-separated list of folders that decides which program runs. How it is searched, why order matters so much, and the three cases where it fails. 2026-09-12
How to compile a binary, from code to process: The four stages that turn text into a program, what the linker does and why it fails so much, the difference between static and dynamic linking, and what happens when executing it. 2026-09-12
How to measure a server's workload without losing your mind: Four numbers that say almost everything, what load average really means, why CPU usage is misleading, and in what order to look when something is slow. 2026-09-12
HDD, SSD and NVMe: the difference you can actually notice: Why the jump from mechanical hard drives to SSDs was the biggest in recent history, what NVMe adds on top, and why operations per second matter more than megabytes per second. 2026-09-12
RAM: what really changes between DDR3, DDR4 and DDR5: Frequency, latency, and bandwidth explained without marketing. Why more megahertz doesn't always mean faster, and why on a server quantity almost always wins. 2026-09-12
What a CPU score measures and why two identical servers do not perform equally: Where does that number come from, what does it measure and what does it ignore, why a single thread can matter more than sixteen, and how to measure what truly affects your application. 2026-09-12
What is a vCPU and what you are actually buying: A vCPU is not a processor: it is a time slot on a real one. What dedicated or shared means, why two plans with the same number perform differently, and how to measure it yourself. 2026-09-12
Docker: when to use it and when it complicates your life: What problem it actually solves, the four cases where it adds value without question, the three where it is dead weight, and the mistakes that turn a good idea into a headache. 2026-09-12
How Ubuntu virtualizes: KVM, namespaces and cgroups: The three pieces that the Linux kernel brings and that support almost all modern infrastructure. What each one does, how they combine, and what commands let you see them working. 2026-09-12
What is LXC and how does it differ from Docker and a VM: System containers instead of application containers. What that means in practice, why many VPS providers use it, and how to tell which one you are using. 2026-09-12
What virtualization is used for in real life: Beyond "leveraging hardware": isolating clients, being able to destroy without fear, reproducing an environment, moving machines without shutting them down, and recovering quickly. Five concrete uses. 2026-09-12
What is virtualization, explained from scratch: How a physical machine becomes several independent ones, what a hypervisor does, the real difference between a VM and a container, and why all cloud computing depends on this. 2026-09-12
How the Internet grew: from 4 nodes to the entire planet: What design decision allowed it to scale without anyone coordinating it, why TCP/IP won over better-funded alternatives, and what broke along the way. 2026-09-12
How files were transferred before the Internet: Floppy disks in hand, modems that occupied the phone line, BBS and UUCP. It's not nostalgia: several ideas from that era are still alive in the tools you use today. 2026-09-12
How to move large files over the network without suffering: Why copying 200 GB with the wrong method takes three times longer, what rsync does that scp cannot, and how to diagnose whether the bottleneck is in the disk, the network, or the CPU. 2026-09-12
How backups work under the hood: What is a hot backup, why a dump and a physical copy solve different problems, how deduplication works, and what hash verification is for. 2026-09-12
What is really a backup: A saved file is not a backup: it is a proven recovery procedure. The 3-2-1 rule, the two questions that define your strategy, and why a snapshot is not always enough. 2026-09-12
How a database is compromised (and how to avoid it): The five real ways data leaks, in order of frequency. None involve breaking encryption, and almost all are closed with decisions you already know. 2026-09-12
What is Supabase and how to have your own managed database on ArduMaker: Postgres with automatic API, authentication, and storage on top. What it actually solves, what it means to be open source, and when it makes sense to build it yourself. 2026-09-12
Why there are so many types of databases: It's not a trend: every family optimizes something different and pays for it elsewhere. Relational, document, key-value, columnar, graph, and time-series databases, each with the case where it wins. 2026-09-12
How to publish and connect to Postgres without exposing it: The four ways to access your database, ranked from worst to best, and why opening port 5432 to the Internet is almost always the wrong answer. 2026-09-12
What is PostgreSQL and why it became the default: From university project to the relational database almost everyone chooses. What made it win, what comes out of the box that surprises, and the two tweaks almost no one touches but should. 2026-09-12
Why n8n is free and paid at the same time: It is not open source in the strict sense: it is "fair-code". What the sustainable use license allows and does not allow, why that category was invented, and what it means in practice for your company. 2026-09-12
What is n8n and what problem does it solve: Connect services that don't talk to each other, without writing a script for every combination. How a node-based flow works, when it's worth it, and when code is better. 2026-09-12
Webhook, WebSocket or polling: which one to use in each case: Three ways to find out that something happened, with very different costs. Four questions that resolve the decision without discussing architecture. 2026-09-12
What is a WebSocket and when do you really need one: A connection that remains open in both directions. How it starts as HTTP and stops being so, what it costs to maintain it, and why something simpler is often enough. 2026-09-12
What is a webhook and why is it everywhere: Instead of asking every five minutes, the other service notifies you. How it works, why you always have to verify the signature, and the three details that break integrations in production. 2026-09-12
Software company roles, explained straight to the point: What each one actually does, why titles vary so much between companies, and what happens when a role doesn't exist: the work doesn't disappear, someone less prepared absorbs it. 2026-09-12
From git push to production: the complete path, step by step: What happens exactly between when you push a commit and your site updates, the three points where it breaks, and how to read the logs to know which one it was. 2026-09-12
What branches do you really need in a real project: Famous workflows solve problems you might not have. Three models, what each one is for, and how to choose based on how you publish and how many there are. 2026-09-12
Why branches and merges exist: A branch is a 41-byte pointer, and that explains why Git changed the way teams work together. What a conflict really is, and the difference between merge and rebase without dogma. 2026-09-12
What is a remote repository and why it exists: A remote is not "the cloud": it is another copy of the repository that you gave a name. What fetch, pull and push actually do, and why it is convenient to separate fetching from integrating. 2026-09-12
Git and GitHub are not the same: what each one does: One is a program that runs on your machine; the other is a service with a copy of your repository and a bunch of things around it. Where one ends and the other begins, and why it matters. 2026-09-12
How Git works under the hood (and why that saves you scares): Git does not store differences: it stores complete snapshots. Understanding this explains why branches are cheap, why almost nothing is truly lost, and what each command actually does. 2026-09-12
Why the .env matters so much and how to handle it properly: The keys that leak most often aren't stolen: they're uploaded by mistake. Three habits that prevent almost all those scares, and what to do when a credential has already been in a commit. 2026-09-12
How to manage environments: development, staging and production: What each one is for, what they have to share and what they never should, how to have staging without paying for a second server, and the data mistake that is always made. 2026-09-12
Why deployment is the most important part of your project: Code that isn't in production doesn't exist. Why a difficult deployment deforms everything else, what it means for it to be boring, and how to get there. 2026-09-12
What is Django and why it remains a great decision: A framework that comes with everything solved: ORM, migrations, admin panel, and security by default. What you gain and what it costs to choose it, and in which cases something else is preferable. 2026-09-12
What is a SPA and what your site gains (and loses) with it: One page that rewrites itself: what problem it solves, why it broke the back button for years, what happens with SEO, and when it's best not to use it. 2026-09-12
What does it mean for something to "compile on the client": The difference between building HTML on the server and building it in the browser, what changes for the user, for the search engine, and for your server bill, and why almost everything is a mix today. 2026-09-12
Why frontend and backend exist as separate things: It's not a fad or a way to divide tasks: they are two environments with incompatible rules. What runs on each side, why you should never trust the browser, and where each validation goes. 2026-09-12
What is a web interface and what lies beneath what you see: From the moment you type an address until the page appears: DNS, TCP, TLS, HTML, CSS and JavaScript, each with its job. And why that chain explains almost all performance problems. 2026-09-12
How we keep ArduMaker servers secure, day by day: The operational part, not the design part: what gets updated, what gets monitored, how things are isolated, and what happens when something goes down at three in the morning. 2026-09-12
Why it is said that the Internet is not secure: Internet was designed so that packets arrive, not so that anyone reads them. What does that mean in practice, what did HTTPS fix, what remains visible, and why the weak link is almost never encryption. 2026-09-12
One SSH key per person: the detail that changes everything when you're a team: Why sharing a private key ruins the entire model, how keys are added and removed without affecting anyone else, and what to do the day someone loses their laptop. 2026-09-12
How SSH was born: the story behind the command you use every day: A password capture attack in Helsinki in 1995, an annoyed researcher, and the protocol that replaced telnet. Also why OpenSSH exists and what it has to do with OpenBSD. 2026-09-12
SSH access that closes on its own: why we did it this way: The problem isn't opening access, it's remembering to close it. How an expiring access works and what changes in practice when requesting permission no longer has permanent consequences. 2026-09-12
What is SSH and what happens exactly when you connect: The key pair explained without mystery, what the challenge your machine signs is, why the server can have your public key without risk, and what that giant host changed warning means. 2026-09-12
What is Tailscale and why it changed the way machines connect: A serverless VPN through which traffic does not pass: how the mesh model over WireGuard works, what it solves that a classic VPN does not, and when it is not worth it. 2026-09-12
How a VPN Works, for Real: What an encrypted tunnel actually does, what it hides and what it doesn't, why "VPN = privacy" is marketing, and what it is really for in a technical team. 2026-09-12
One server, many domains: how traffic is distributed: How a single server with a single address serves ten different sites, what SNI is, why the first nginx block is special, and how to prevent one domain from serving another's site. 2026-09-12
What is nginx and why it is in front of almost everything: A reverse proxy explained without beating around the bush: what it solves, why your app shouldn't talk to the Internet directly, and the three errors that cause 502, 504 and 413. 2026-09-12
IPv4 and IPv6: why we coexist with two Internets at once: Addresses ran out in 2011 and yet everything still works. What changed with IPv6, why the transition is taking so long, and what it means for your server. 2026-09-12
How an IP address really works: What those four numbers are, why private addresses exist, what the subnet mask does, and why your packet reaches its destination without anyone knowing the full path. 2026-09-12
How we move traffic between our servers without exposing it to the Internet: When an app on a server needs a database that lives on another, there are two paths: open a port to the world or make them see each other. Why we chose the second. 2026-09-12
When port forwarding is appropriate and when it is not: A short guide to deciding between opening a port, setting up a reverse proxy, or raising a tunnel, and the question that solves ninety percent of cases. 2026-09-12
Port forwarding: what it is and what it solves: What port forwarding actually does, how it differs from a reverse proxy and an SSH tunnel, and when each one is the right tool. 2026-09-12
What is a port and why your app needs one: An IP finds the machine; the port finds the program. What are the 65535 ports, why are those below 1024 special, and how is an "address already in use" diagnosed. 2026-09-12
How to give your team access without sharing passwords: Why shared passwords always end up leaked, how access is distributed per person and per project, and what needs to happen the day someone leaves the team. 2026-09-12
How users are created in Linux, under the hood: What adduser actually does: the four files where a user lives, what /etc/skel is for, and the two classic traps when creating and deleting accounts. 2026-09-12
Why we don't use root for everything (and what we do instead): Working as root does not save time: it removes warnings, breaks file ownership, and erases the trail of who did what. What sudo actually does and how to configure it properly. 2026-09-12
Why Linux is multi-user from day one: Where do permissions, uids, and the custom of each service having its own user come from, and why that fifty-year-old design is still the best free defense you have. 2026-09-12
Why servers don't have a desktop (and when a GUI is worth it): What a graphical session costs on a server: RAM, attack surface, and above all, work that cannot be repeated. And the cases where it is still worth it. 2026-09-12
What is the terminal and why it remains the fastest tool: The terminal isn't difficult, it's concise. What it really is, how it differs from the shell, how to read a command you've never seen before, and the three emergency exits. 2026-09-12
Secure-by-default architecture: how ArduMaker is designed: Closed ports by default, SSH with expiration date, isolation by company and audit of every command: why security that depends on memory always fails. 2026-09-12
Tips for using a server without breaking it: Five habits that prevent most incidents on a server: one change at a time, backups before editing, validate before reloading, leave a rescue session, and document. 2026-09-12
Own email that doesn't go to spam: SPF, DKIM, DMARC and mailboxes explained for real: Honest guide to SPF, DKIM and DMARC: what each one does, why without all three your email ends up in spam, and how to set up an email domain with mailboxes and DNS verification by talking to an AI. Covers create_email_domain, verify_email_domain_dns, create_email_account, edit_email_account_quota and view_email_domain_stats. 2026-08-25
Publish a domain with HTTPS on your VPS: nginx, certificates, and the daily 502: How to publish a domain on a VPS with an SSL certificate: what Let's Encrypt actually does, why the order of steps matters, how to read nginx logs to diagnose a 502, and how to do it all by conversing with an AI. Covers create_domain_vps, verify_domain_vps, activate_domain_vps, view_nginx_domain_vps, edit_nginx_domain_vps, and view_nginx_vps_logs. 2026-08-25
DNS without mystery: records, nameservers and propagation, managed by conversation: Practical DNS guide for developers: what each record type does, why TTL matters more than it seems, how real propagation works, and how to manage everything by chatting with an AI through ArduMaker's MCP. Includes crear_dominio_empresa, ver_estado_ns_dominio, listar_registros_dns, crear_registro_dns and editar_registro_dns. 2026-08-25
systemd services, scheduled tasks and logs on a VPS, requested in natural language: How to create systemd services, schedule recurring tasks, and read logs on a VPS by asking an AI. A real-world example for each tool in the ArduMaker MCP: crear_servicio_vps, controlar_servicio_vps, ver_logs_systemd_vps, crear_tarea_vps, ver_logs_tarea_vps and the rest of the automation area. 2026-08-25
Create and manage a VPS by talking to an AI: practical guide to ArduMaker's MCP: Practical guide to creating, powering on, resizing, and managing VPS servers by conversing with an AI through ArduMaker's MCP. Includes a daily use example for each tool: create_vps, control_vps, change_vps_plan, run_vps_command, check_vps_status, create_vps_user, create_vps_redirect, and more. 2026-08-25
What is an MCP and how ArduMaker's MCP works: Clear explanation of the Model Context Protocol (MCP): what it is, how it works, and why it turns an AI into a real operator. Includes a tour of ArduMaker's MCP, its catalog of hundreds of tools for VPS, DNS, email, databases, projects, and blogs, and a real example: this very article was created and published by an AI using that MCP. 2026-08-25
📡 ArduMaker status page: status.ardumaker.com monitors hosts, VPSs and domains in a continuous cycle, keeps 45 days of history and attempts to repair outages on its own before escalating them. 2026-04-27
🐋 Docker on your ArduMaker VPS: Install Docker on your VPS with one click and manage containers, logs, images, volumes, and networks from the ArduMaker panel, or via SSH and RDP. 2026-03-14
📌 What ArduMaker is NOT: ArduMaker is not a raw VPS, nor a cPanel, nor an environment where everything is mixed: it is structure, isolation per client and resource control per Company. 2026-02-18
📌 Why ArduMaker?: What need led to the creation of ArduMaker and what has been built since then: email, domains, databases, Docker, backups, status page, and MCP server. 2026-02-18
📌 How an agency can scale with ArduMaker: One company per client: separate VPS, billing, and team. Developers join as Members and only Admins manage payments. 2026-02-18
📌 Secure by default architecture: Closed ports by default, SSH that closes automatically when the deadline expires, isolated VPS, automatic SSL, and every command audited: security without relying on memory. 2026-02-18
📌 Clear billing by Company: Each Company in ArduMaker has its balance, its expenses and its payment methods. Monthly fee for reserved resources and pay-per-use for consumption services. 2026-02-18
📌 Access to +200 AI models from a single key: ArduMaker AI Router: a single integration for more than 200 models (GPT, Claude, Gemini, Llama), with up to 5 keys per Company and spending limits per key. 2026-02-18
📌 Ready-to-use WhatsApp API: WhatsApp Business by Company in ArduMaker: isolated numbers, webhooks in three modes, media and transcription, and metered consumption per client. 2026-02-18
📌 Why separating clients into “Companies” changes everything: In ArduMaker each customer lives in a separate Company: VPS, domains, email, billing and permissions of its own. Nothing is shared between customers. 2026-02-18
📌 How to deploy a project on ArduMaker: Deployment flow guide in ArduMaker: VPS, GitHub repository, pull scripts, domain and automatic SSL. Each commit deploys on its own, with logs in the panel. 2026-02-18
📌 What is ArduMaker?: Developer infrastructure platform: VPS, domains, email, billing and own APIs for each client, isolated in independent Companies. 2026-02-18