A full walkthrough of Semgrep for static application security testing — running scans, writing custom rules, understanding findings, and integrating into GitHub Actions as a PR gate.

Short summary of the post for previews and SEO.

A full walkthrough of AWS RDS and Aurora — supported engines, Multi-AZ, read replicas, automated backups, encryption, RDS Proxy, and Aurora Serverless

A full walkthrough of AWS block and file storage — EBS volume types, snapshots, encryption, EFS shared filesystems, performance modes, and Amazon FSx

A full walkthrough of AWS S3 — buckets, storage classes, versioning, lifecycle policies, encryption, replication, pre-signed URLs, and event notifications

A full walkthrough of AWS container services — ECS with EC2 and Fargate launch types, task definitions, services, and EKS managed Kubernetes with node groups and IRSA

Using Cloudflare Tunnel to securely expose Jellyfin and Nextcloud outside the home network — no port forwarding, no home IP exposure, just a clean public URL.

A full walkthrough of AWS Lambda — runtimes, triggers, execution environment, concurrency, VPC integration, layers, and real-world serverless patterns

Deploying Nextcloud on Kubernetes with a MariaDB database and Longhorn storage — giving myself a self-hosted Google Drive accessible from any device on the network.

Deploying Jellyfin on Kubernetes — mounting my local movie library, setting up the media server, configuring HTTPS access at jellyfin.home.lab, and streaming to every device on my network.