[Apache] How to Configure umask for the Execution User

Setting Apache's execution user umask to 002 via envvars to keep multi-user Capistrano deploys free of permission conflicts.

AWS ECS Scheduled Tasks Management Method (ecschedule Edition)

Managing AWS ECS Scheduled Tasks with ecschedule for GitOps-style scheduling.

[Capistrano] Deploy by specifying a specific branch or commit

A quick memo for deploying a specific branch or commit with Capistrano's -S flag.

[Capistrano] Recipe for executing rake tasks

A Capistrano recipe for invoking rake tasks on a remote server, with a namespace-collision workaround.

How to Write crontab Considering Daylight Saving Time PST/PDT

A crontab notation example that accounts for PST/PDT daylight saving time shifts.

How to write shell scripts that execute batch jobs with crontab only at month-end

Use the test command to check if tomorrow is the 1st, so cron fires only on the actual month-end day.

Setting Up CD and Preview Environments with Firebase Hosting + GitHub Actions

Reference notes on setting up CD and preview environments with Firebase Hosting's Preview channels and GitHub Actions.

How to Solve the Issue Where Firebase Hosting's Preview Channel Function Doesn't Work Due to Basic Authentication in Cloud Functions

How I fixed Firebase Hosting Preview channels serving stale content by dropping Basic auth from Cloud Functions.

Can GitHub CODEOWNERS Bypass and Merge Queue Coexist?

I wanted to bypass CODEOWNERS review while keeping merge queue intact. After testing 4 scenarios with Branch Protection and Rulesets, I found that it's currently not possible.

Managing Large Binaries on GitHub — Git LFS and Its Alternatives Compared at 10 GB, 100 GB, and 1000 GB

Model files, game assets, build artifacts. The size of binaries you want to keep next to source code tends to grow by an order of magnitude at a time: 10 GB, then 100 GB, then 1 TB. Git LFS is perfectly viable at 10 GB, starts to break down past 100 GB, and by 1 TB an object-storage bridge is essentially mandatory. This post lines the options up against July 2026 pricing and shows where each scale changes the winner.

Adopting the Essence of Harness — 10 Principles to Improve Your DevOps

Harness improves DevOps. But you don't need Harness to adopt its essence. Here are 10 principles Harness embodies and how to implement them with OSS tools.

How to Add Heroku Buildpacks to Build in Node.js, Ruby on Rails Order

Reordering Heroku buildpacks to Node.js before Ruby so Yarn and Webpacker install cleanly, via app.json and the CLI.

[Heroku] Migrating to cedar-14 Stack

Migrating a Heroku app to the cedar-14 stack with heroku stack:set and an empty git commit.

[Heroku] Deploy only subdirectories

Deploying only the api subdirectory of a monorepo to Heroku with git subtree push.

[Heroku] How to git push Branches Other Than master

Deploy a non-master local branch to Heroku with git push heroku branch_name:master.

[Heroku] Logging Add-on to Check Logs

Adding Heroku's Logging add-on and tailing logs with heroku logs --tail.

[Heroku] Log Management Add-on Papertrail

Adding the Papertrail add-on on Heroku and opening its docs and dashboard from the CLI.

How to Configure Papertrail Log Notifications to Slack

Sending only important Heroku error logs to Slack by combining a saved Papertrail search with a Slack webhook.

How to install Ansible 2 on Mac

A quick note on installing the Ansible 2.x series on macOS with Homebrew.

[Mac] Installing chef and knife-solo

A short note on installing chef and knife-solo on macOS via gem install.

Jenkins operation cost is wasteful, so we should use CI services

Why resource-constrained teams should pay for a managed CI service like CircleCI instead of self-hosting Jenkins.

Deploy a Rails App to Fly.io and Get Preview Environments for Every Pull Request

Using Fly.io and GitHub Actions, you can automatically build isolated preview environments with PostgreSQL for every PR in your Rails app. This guide covers deployment to the Tokyo region (nrt) and the full GitHub Actions workflow setup.

Deploy a Rails App to Railway and Get Preview Environments for Every Pull Request

Using Railway's PR Preview Environments, you can automatically build isolated preview environments with PostgreSQL for every PR in your Rails app. It only requires a single railway.json file and Dashboard configuration — no GitHub Actions needed.

Reading Notes: 'Accelerate: The Science of Lean Software and DevOps - Building and Scaling High Performing Technology Organizations'

Notes on 'Accelerate' — capability over maturity, the four delivery metrics, trunk-based development, and team-chosen tooling.

How to Create AWS Lambda Layers with node_modules and Add Them to Lambda Functions

Build node_modules-bundled Lambda Layers with Docker and the AWS CLI, then attach them to a Lambda function.

Beyond Trivy and tfsec - Comparing Alternative Security Scanning Tools (Grype, Checkov, Snyk, KICS)

The Trivy supply chain compromise and tfsec's maintenance-mode status have made it urgent to evaluate alternative security scanning tools. This article compares options beyond Trivy and tfsec: Grype, Snyk, and Docker Scout for vulnerability scanning, and Checkov and KICS for IaC scanning, with practical guidance on selection criteria and recommended combinations.