https://www.huzaifaa.club/blog Field notes on building, shipping and running software — backends, DevOps and cloud infrastructure. en Fri, 16 Oct 2026 00:00:00 GMT https://www.huzaifaa.club/blog/rea-reverse-engineer-anything https://www.huzaifaa.club/blog/rea-reverse-engineer-anything Fri, 16 Oct 2026 00:00:00 GMT REA (Reverse Engineer Anything) hit 285K GitHub stars in ten days. I read its code and the tests: what it does, where it fails, and what it means for you. AI REA Reverse Engineering AI Agents MCP Ghidra Application Security Claude Code Open Source https://www.huzaifaa.club/blog/nestjs-postgresql-saas-backend https://www.huzaifaa.club/blog/nestjs-postgresql-saas-backend Fri, 16 Oct 2026 00:00:00 GMT A NestJS and PostgreSQL SaaS backend that scales: structure, multi-tenancy, ORM and pooling, migrations, query speed, jobs, caching, auth and a growth path. Backend NestJS PostgreSQL SaaS Backend Architecture Scalability TypeScript TypeORM Multi-Tenancy Node.js https://www.huzaifaa.club/blog/multi-tenant-postgresql https://www.huzaifaa.club/blog/multi-tenant-postgresql Fri, 16 Oct 2026 00:00:00 GMT Multi-tenant PostgreSQL compared: schema per tenant vs a shared schema with row-level security, the trade-offs, and a working RLS setup for NestJS. Backend PostgreSQL Multi-Tenancy SaaS Row-Level Security Database Design NestJS TypeORM Data Isolation https://www.huzaifaa.club/blog/nestjs-project-structure https://www.huzaifaa.club/blog/nestjs-project-structure Fri, 16 Oct 2026 00:00:00 GMT NestJS project structure best practices for a growing SaaS: feature modules, clear boundaries, config, database, jobs, and CI rules that keep it clean. Backend NestJS Project Structure Architecture TypeScript Modular Monolith Node.js Best Practices TypeORM https://www.huzaifaa.club/blog/postgresql-query-optimization-explain-analyze https://www.huzaifaa.club/blog/postgresql-query-optimization-explain-analyze Fri, 16 Oct 2026 00:00:00 GMT PostgreSQL query optimization on a legacy SaaS: find slow queries with pg_stat_statements, read EXPLAIN ANALYZE plans, and fix indexes, N+1s and estimates. Backend PostgreSQL Query Optimization EXPLAIN ANALYZE Indexing pg_stat_statements Performance NestJS TypeORM https://www.huzaifaa.club/blog/aws-architecture-for-startups https://www.huzaifaa.club/blog/aws-architecture-for-startups Thu, 15 Oct 2026 00:00:00 GMT AWS architecture for startups, stage by stage: what a small SaaS team needs at launch, what to add with paying customers, what to skip, and what it costs. Cloud AWS AWS Architecture Startups SaaS Cloud Infrastructure Linux DevOps Cost Optimization https://www.huzaifaa.club/blog/reduce-aws-costs-startup https://www.huzaifaa.club/blog/reduce-aws-costs-startup Thu, 15 Oct 2026 00:00:00 GMT Reduce AWS costs without hurting reliability: how our startup cut its bill by 35% with rightsizing, Graviton, Savings Plans, NAT, storage and log fixes. Cloud AWS Cost Optimization FinOps Startups EC2 Graviton Savings Plans NAT Gateway CloudWatch https://www.huzaifaa.club/blog/ubuntu-server-hardening-checklist https://www.huzaifaa.club/blog/ubuntu-server-hardening-checklist Thu, 15 Oct 2026 00:00:00 GMT Ubuntu server hardening checklist for a fresh EC2: SSH, automatic security updates, UFW and Docker, IMDSv2, kernel settings and audits, with every command. DevOps Ubuntu Linux Server Hardening Security AWS EC2 SSH UFW Docker https://www.huzaifaa.club/blog/aws-vpc-subnets-security-groups-explained https://www.huzaifaa.club/blog/aws-vpc-subnets-security-groups-explained Thu, 15 Oct 2026 00:00:00 GMT AWS VPCs, subnets and security groups explained for developers: CIDR ranges, public vs private subnets, NAT, endpoints and NACLs, with a layout to copy. Cloud AWS VPC Subnets Security Groups Networking NAT Gateway NACL Terraform Cloud Infrastructure https://www.huzaifaa.club/blog/s3-cloudfront-signed-urls https://www.huzaifaa.club/blog/s3-cloudfront-signed-urls Thu, 15 Oct 2026 00:00:00 GMT Serve private S3 files through CloudFront with signed URLs: Origin Access Control, key groups, signing in Node.js, signed cookies, cache keys and Cache-Control. Cloud AWS S3 CloudFront Signed URLs CDN Caching Node.js Security https://www.huzaifaa.club/blog/cloudwatch-nodejs-logging https://www.huzaifaa.club/blog/cloudwatch-nodejs-logging Thu, 15 Oct 2026 00:00:00 GMT CloudWatch logging for a Node.js API: JSON logs with pino, the awslogs Docker driver, Logs Insights queries, metric filters and alarms that reach a person. Cloud AWS CloudWatch Node.js Logging Monitoring Observability Docker pino Alerting https://www.huzaifaa.club/blog/aws-alb-vs-nginx https://www.huzaifaa.club/blog/aws-alb-vs-nginx Thu, 15 Oct 2026 00:00:00 GMT AWS Application Load Balancer vs Nginx for a Node.js app: features, cost, high availability and TLS compared, when each one wins, and when to run both. Cloud AWS ALB Nginx Load Balancing Node.js High Availability Elastic Load Balancing DevOps https://www.huzaifaa.club/blog/bash-script-postgres-backup-s3 https://www.huzaifaa.club/blog/bash-script-postgres-backup-s3 Thu, 15 Oct 2026 00:00:00 GMT A production Bash script to back up PostgreSQL to S3 with pg_dump: verified dumps, a systemd timer, write-only IAM, lifecycle rules and a tested restore. DevOps PostgreSQL Bash AWS S3 Backups pg_dump Linux Disaster Recovery systemd https://www.huzaifaa.club/blog/do-i-need-kubernetes https://www.huzaifaa.club/blog/do-i-need-kubernetes Thu, 15 Oct 2026 00:00:00 GMT Do you need Kubernetes? What it gives you, what it really costs on EKS, the simpler options that fit most startups, and a checklist for when it pays off. DevOps Kubernetes EKS ECS Fargate Docker Docker Compose Startups DevOps AWS https://www.huzaifaa.club/blog/deploy-nodejs-to-production https://www.huzaifaa.club/blog/deploy-nodejs-to-production Wed, 14 Oct 2026 00:00:00 GMT What it takes to run Node.js in production: production-ready code, Docker, Nginx and HTTPS, CI/CD to AWS, zero-downtime releases and safe database migrations. DevOps Node.js DevOps Docker CI/CD Nginx AWS Linux https://www.huzaifaa.club/blog/github-actions-docker-layer-caching https://www.huzaifaa.club/blog/github-actions-docker-layer-caching Wed, 14 Oct 2026 00:00:00 GMT Why Docker builds in GitHub Actions start from scratch, and how to cache layers with type=gha or a registry, cache multi-stage builds and keep npm cache mounts. DevOps Docker GitHub Actions CI/CD BuildKit Performance https://www.huzaifaa.club/blog/github-actions-deploy-to-ec2 https://www.huzaifaa.club/blog/github-actions-deploy-to-ec2 Wed, 14 Oct 2026 00:00:00 GMT Build, test and deploy a Node.js app to AWS EC2 with GitHub Actions: OIDC instead of access keys, Docker images in ECR, and releases over SSM instead of SSH. DevOps GitHub Actions AWS EC2 CI/CD Docker Node.js https://www.huzaifaa.club/blog/nginx-reverse-proxy-nodejs-ssl https://www.huzaifaa.club/blog/nginx-reverse-proxy-nodejs-ssl Wed, 14 Oct 2026 00:00:00 GMT Set up Nginx as a reverse proxy for Node.js on Ubuntu, add free HTTPS with Let's Encrypt and auto-renewal, and fix real client IPs, WebSockets and 502 errors. DevOps Nginx Node.js SSL Let's Encrypt Linux DevOps https://www.huzaifaa.club/blog/pm2-vs-docker-nodejs-production https://www.huzaifaa.club/blog/pm2-vs-docker-nodejs-production Wed, 14 Oct 2026 00:00:00 GMT PM2 and Docker solve different problems. What each one does, a side-by-side comparison, when to use one, both or neither, and a production setup for each. DevOps Node.js PM2 Docker Linux DevOps https://www.huzaifaa.club/blog/database-migrations-ci-cd https://www.huzaifaa.club/blog/database-migrations-ci-cd Wed, 14 Oct 2026 00:00:00 GMT Run database migrations in CI/CD without downtime: test them in CI, apply them once before each release, keep them backward-compatible, and avoid long locks. DevOps PostgreSQL CI/CD Database Migrations GitHub Actions Node.js DevOps https://www.huzaifaa.club/blog/speed-up-github-actions-pipeline https://www.huzaifaa.club/blog/speed-up-github-actions-pipeline Sat, 10 Oct 2026 00:00:00 GMT A case study in speeding up a GitHub Actions pipeline: dependency and Docker caching, parallel test shards, path filters and concurrency groups, with the YAML. DevOps GitHub Actions CI/CD DevOps Docker Performance GitHub Copilot AI Developer Experience https://www.huzaifaa.club/blog/nestjs-dockerfile-multi-stage-build https://www.huzaifaa.club/blog/nestjs-dockerfile-multi-stage-build Sat, 10 Oct 2026 00:00:00 GMT Build a NestJS Dockerfile with multi-stage builds, npm ci or pnpm, Prisma, a smaller runtime image, a non-root user, health checks and a CI workflow. DevOps Docker NestJS Node.js DevOps GitHub Actions pnpm Prisma Container Security https://www.huzaifaa.club/blog/stripe-webhooks-idempotency-nodejs https://www.huzaifaa.club/blog/stripe-webhooks-idempotency-nodejs Wed, 07 Oct 2026 00:00:00 GMT Stripe can deliver the same webhook twice and in any order. How to verify, de-duplicate and process events safely with Express and PostgreSQL. Payments Stripe Node.js PostgreSQL Webhooks Payments Express https://www.huzaifaa.club/blog/zero-downtime-deploys-docker-nginx-github-actions https://www.huzaifaa.club/blog/zero-downtime-deploys-docker-nginx-github-actions Tue, 29 Sep 2026 00:00:00 GMT A blue-green deploy on one Linux server: build the image in CI, start the new container, wait until it is healthy, then switch Nginx without dropping a request. DevOps Docker Nginx GitHub Actions CI/CD Linux Node.js https://www.huzaifaa.club/blog/server-sent-events-vs-websockets https://www.huzaifaa.club/blog/server-sent-events-vs-websockets Wed, 16 Sep 2026 00:00:00 GMT When a one-way stream beats a two-way socket, and how to run Server-Sent Events in Node.js behind Nginx without dropping updates. Backend Node.js Real-time Server-Sent Events WebSockets Nginx Redis