From Docker Image to Running Pod: Completing the GitOps Loop with App-of-Apps and Multi-Source Argo CD
The image is built, scanned, and pushed. The version tag is v0.1.0-alpha.7.
Self-Hosting the Blog
Stop Shipping Blind: Security Gates and Iterative Hardening with GitHub Actions
The artifact is already hardened. From FinTech to Homelab: Writing an Enterprise-Ready Dockerfile for Hugo was about building the container correctly. This post is about everything that has to happen after that.
From FinTech to Homelab: Writing an Enterprise-Ready Dockerfile for Hugo
In the previous post, I laid out my plan: treat this blog as a production application and host it using the same standards I apply when architecting platforms for private banking and fintech.
Stop Rebuilding Your Images: The "Build Once, Promote Everywhere" Manifesto
The Enterprise Traceability Problem # Guessing whether v1.3.0 in production actually includes yesterday’s critical security patch is a dangerous game. Knowing exactly which version of an artifact is running in any given environment isn’t just a nice-to-have dashboard feature… it’s the foundation of a reliable release process. You can never afford to wonder if the build candidate QA just signed off on is truly the exact same binary you are deploying to users.
From Hashnode to Kubernetes: Why I'm Self-Hosting My Blog Like a Bank Website
The Question That Changed Everything # Over the past months, I’ve received a variation of the same question more than any other: