Blog

Notes from the build.

What we learn running the backends, pipelines and cloud behind our apps, written up so you don't have to learn it the hard way.

Latest · Cloud

Push Docker Images to Azure Container Registry with GitHub Actions (No Secrets)

Build and push Docker images from GitHub Actions to Azure Container Registry using OpenID Connect instead of stored passwords. Covers federated credentials, AcrPush, tagging, build cache, multi-arch images, az acr build, and fixes for common login errors.

Read

Azure Container RegistryGitHub ActionsOIDCDocker

Sep 24, 2026 · 11 min read

Cloud

Connect AKS to Azure Container Registry and Fix ImagePullBackOff

Let Azure Kubernetes Service pull images from Azure Container Registry without passwords using attach-acr and the kubelet identity, then work through ImagePullBackOff systematically: authentication, missing tags, platform mismatches, private endpoints, DNS and firewall rules.

Sep 21, 2026 · 10 min read

Cloud

Managed Identities in Azure: Stop Storing Secrets

A practical guide to replacing connection strings and client secrets with Azure managed identities: system-assigned vs user-assigned, RBAC role assignments, DefaultAzureCredential in .NET, Azure SQL access, CI/CD federation, and the pitfalls that show up in production.

Sep 18, 2026 · 7 min read

System design

Designing a Rate Limiter: Token Bucket, Sliding Window and Redis

A practical design guide to rate limiting: fixed window, sliding log, sliding window counter and token bucket compared, with atomic Redis Lua implementations, a TypeScript middleware, response headers, failure modes and the trade-offs that matter in distributed systems.

Sep 11, 2026 · 9 min read

Cloud

Building a Serverless API with AWS Lambda and API Gateway

A practical walkthrough of building a serverless HTTP API with AWS Lambda, API Gateway and DynamoDB using the AWS CDK in TypeScript, covering handler design, authentication, CORS, throttling, observability and the production pitfalls worth knowing up front.

Sep 4, 2026 · 8 min read

Cloud

Reliable Messaging with Azure Service Bus and .NET

How to build reliable message-driven .NET services on Azure Service Bus: queues vs topics, peek-lock settlement, retries and dead-lettering, duplicate detection, sessions for ordering, idempotent consumers, and the configuration choices that matter in production.

Aug 27, 2026 · 7 min read