$ ls -lt ~/blog
Notes on architecture, infrastructure and what I learn taking systems to production. I write when something breaks, or when it finally works.
Real problems and how I solved them: a CORS error that only failed in production, a memory leak on the server, my own year-old code refactored without shame, and a practical guide to integrating Webpay Plus, Mercado Pago and Flow.
My daily workflow as a developer: the VS Code extensions and settings that actually help, Git beyond commit and push (rebase, cherry-pick and bisect), how to manage small projects without bureaucracy, and the scripts that automate the repetitive work.
A practical guide to taking a project to production: how to secure a VPS from scratch, set up DNS and Cloudflare, choose between shared hosting, a VPS or the cloud, and spin up your local database with Docker Compose in seconds.
Why designing applications without server-side state is key to scaling horizontally, deploying without downtime and recovering from failures, and how to do it right without falling into common mistakes.
A login that works on almost every phone but always fails on a few Android devices, even with the right password. The culprit wasn't the network or the server: it was the secure storage encryption. What happens, how to diagnose it, and how to fix it without losing sessions.
Two critical PHP flaws allow unauthenticated remote code execution, before your application even runs. Which versions are affected, who is exposed, what Cloudflare's WAF covers, how to update and what to mitigate in the meantime.
Esta página también está en español.
Leer en español →