Posts tagged: devops
Mathematical Determinism: Overcoming the Lisp Parenthesis Odyssey in Production
When a standard container build compiles successfully but triggers a production HTTP 503 Upstream Connection Failure, trial-and-error debugging fails. Here is how we isolated temporal telemetry and used string-aware static analysis to achieve absolute AST balance.
The 4-Stage Chain That Ships This Site
One commit, four stages, no manual deploys — the local → local runner → GitLab Pages → nurazhar.com pipeline that publishes every post on this blog.
How I Stopped Burning GitLab's 400-Minute Quota — A Self-Hosted Runner on My Own Box
GitLab's free tier is 400 CI minutes a month — fine for occasional commits, hostile if you post daily. I swapped the shared runner for a self-hosted one on my own machine. The quota became irrelevant. This post is the first publish through the new pipeline.
Token Efficiency Is the New DevOps — How Companies Are Cutting LLM Costs by 50-70%
Real case studies from Coinbase, Preply, and fintech companies showing how model routing, semantic caching, and prompt pruning cut LLM bills by 50-73%. What works, what doesn't, and why future agents need to care.
Leaving GitHub for GitLab — A Post-Mortem on Platform Migration
Why I moved my entire open-source presence from GitHub to GitLab — the trigger, the process, and what I kept public.
Scaling to 100+ Concurrency: Mastering API Rate-Limits with Adaptive Flow Control
Scaling parallel worker pools to 100+ concurrent workers can collapse third-party APIs. Here is how we implemented a self-regulating, adaptive flow-control mechanism using exponential backoff and randomized jitter to maximize queue velocity.
Why GitLab Beats GitHub for Solo Developers
An in‑depth guide for a solo developer showing how GitLab’s all‑in‑one platform collapses entropy to zero.
Debugging GitLab Pages: Hardcoded Paths, HTTPS Domains, and Self-Healing CI/CD
Two issues broke my CI/CD pipeline and HTTPS domain on nurazhar.com: a hardcoded local resume path in the static site generator, and an incomplete GitLab Pages SSL certificate for the custom domain. Here's the forensic breakdown.
Security Audit Report — June 2026
Comprehensive security and leakage scan across all 18 GitHub repositories using pdpa-sg-clj, OWASP tools, trufflehog, detect-secrets, npm audit, safety, and pip-audit.
How I Accidentally Hid My Entire GitHub — and What It Taught Me About Visibility, Forks, and Irreversible Decisions
A detailed post-mortem of the 24-hour window where all my public repos went private — the bad advice I followed, the irreversible GitHub mechanics I didn't understand, and the Mermaid diagrams that explain what actually happened.
Sandbox vs. Keyring: Understanding Credential Precedence in Developer Security
How scoped environment variables override local keyrings in sandboxed environments, why this design protects developer secrets, and how to navigate credentials securely.
Resilient PDF Generation: Intercepting Playwright Failures with Headless Chrome Fallbacks
How to build highly resilient document generation pipelines that automatically fall back to system-installed Chrome shells when network restrictions or low-priority threads throttle runtime dependency installations.
Local vs. Cloud Inference: Keeping Your Laptop Cool and Quiet Under Load
How to diagnose thermal profiles, understand the difference between local vs. cloud AI inference on hardware, and configure Linux power profiles to reduce laptop fan noise during heavy tasks.
Designing a Zero-Configuration, Zero-Admin Developer Sandbox for Career-Switchers
How to build a zero-configuration, zero-administrator local development environment running Django and React on Windows 11 to help adult tech-learners bypass environment installation friction.
Engineering Spec: Decoupled Zero-Cost Blog Analytics
The complete technical specification, schema design, and serverless code for our isolated blog analytics tracking engine.
Collapsing Auth Entropy to Zero: Debugging GitHub Credential Conflicts on Linux
A visual walkthrough of debugging conflicting GitHub credentials — OAuth tokens, classic PATs, SSH keys, and rogue environment variables — and collapsing them into a single source of truth.
Hardening the Arch/CachyOS Build Pipeline: Native AUR Auditing with Paru & Babashka
A visual reference guide to native PreBuild hooks. We configure paru to automatically run our Clojure-based aur-audit scanner before compiling community packages.
Demystifying Arch Linux Packaging: PKGBUILDs, the AUR, and CachyOS
A deep dive into how packages are built, shared, and optimized on Arch Linux and CachyOS. Learn the differences between PKGBUILDs, the AUR, and custom repositories.