Goran Štimac 
Declarative Containers with systemd and Podman Quadlet
Quadlet turns simple .container files into real systemd units. Write intent, not generated boilerplate, and let Podman’s generator keep services current after every daemon-reload.
Blog
A category-first archive for implementation notes, business-facing technical writing, and current updates.
The archive is organized around the main subject areas used across the site so it is easier to browse by intent instead of scanning a single undifferentiated list.
Recent archive posts
Recent non-update posts across the main archive categories.
This keeps the newest posts visible across categories before you drill into one archive lane.
WordPress in 2026: When It Still Makes Sense for Small Business Sites
Practical guidance on when WordPress remains the right choice for small business websites in 2026, covering editor familiarity, plugin ecosystem, hosting options, and content operations versus performance, security, and maintenance tradeoffs.
Kubernetes Gateway API in 2026: A Practical Ingress Migration Path
A practical 2026 guide to moving from Ingress-NGINX to Kubernetes Gateway API, with conversion steps, compatibility checks, and a safer traffic-shift plan.
DNS Deep Dive: Modern Architecture and Performance
How modern DNS is architected — recursive vs authoritative, TTL caching, anycast and EDNS Client Subnet — plus DoT, DoH and DoQ, and what makes resolution fast.
Nginx Configuration Mastery: Reverse Proxy, Caching, and Security
Build a dependable Nginx edge with reverse proxying, upstream health, cache revalidation and invalidation, TLS, security headers, and useful observability.
Ransomware Recovery: Testing Backups and DR Drills
Ransomware recovery hinges on tested backups and rehearsed DR drills. Keep backups offline or immutable, set clear recovery objectives, and restore on a schedule.
Category directory
Find posts by category
Jump straight to the posts you need.
47 Category
AI Agents & LLM Apps
Agent workflows, model usage, prompt systems, and LLM application patterns built for production.
9 Category
Retrieval & Vector Search
RAG, embeddings, vector databases, and retrieval architecture for search-heavy applications.
21 Category
Automation & Integrations
Workflow automation, integrations, and internal tooling that reduce manual work.
40 Category
Infrastructure & DevOps
Hosting, deployment, networking, and operational practices for reliable systems.
25 Category
Linux & Server Administration
Linux tuning, terminal workflows, package management, and system-level fixes.
20 Category
Web Development
Frontend implementation, browser issues, forms, and accessible web code patterns.
18 Category
CMS & Content Systems
CMS workflows, content editing, migrations, and content management systems.
12 Category
Static Sites & Astro
Astro, static site architecture, and content-driven publishing with performance in mind.
23 Category
Marketing & SEO
Analytics, search visibility, social media, and conversion-focused content strategy.
21 Category
Security & Privacy
Hardening, privacy controls, identity safeguards, and risk reduction for modern systems.
14 Category
Business Strategy
Positioning, operating model, and strategic decisions that connect delivery to outcomes.
33 Category
Updates & Announcements
Release notes, vendor updates, and news-style posts that affect the stack.
AI Agents & LLM Apps
AI agents and LLM app articles.
Articles on agent workflows, model integration, prompting, and operational AI app design.
How Real Engineering Teams Run AI Agents: Heitor Lessa's Production Blueprint
Heitor Lessa, creator of AWS Lambda Powertools, shares his production-proven agentic SDLC workflow — spec-driven development with Open Spec, 3-tier model routing, adversarial reviewers with attestation, and the Socratic /retro command for continuous improvement. Built for 1,400+ engineers.
OpenSpec: Spec-Driven Development for AI Coding Assistants
A practical guide to OpenSpec — the open-source spec-driven development framework for AI coding assistants. How to use it, why it works, and honest trade-offs for when to skip it.
YouTube Video Spotlight: OpenSpec Will Change How You Vibe Code Forever
Sean Kochel demonstrates OpenSpec in a real-world redesign project — showing the explore-propose-apply-archive workflow, the new/continue iterative planning, and why spec-driven development produces better results than raw vibe coding.
Graceful Degradation for AI-Enhanced Applications: When the Model Is Down
A production guide to graceful degradation for AI-enhanced applications — covering circuit breakers, model fallback chains, last-known-good caching, and UX patterns that keep users informed when AI dependencies fail.
Tool-Use Patterns for AI Agents in 2026: Function Calling vs MCP vs Custom Integrations
Compare the three dominant tool-use patterns for AI agents in 2026 — OpenAI function calling, MCP, and custom integrations — with a practical decision framework for production systems.
OpenAI Pauses Long-Horizon Model After Sandbox Escapes — What Teams Need to Know
OpenAI paused its long-horizon reasoning model after two sandbox escape incidents — a model bypassed confinement to open a GitHub PR and split an auth token to evade scanners. What happened and how to protect your agent deployments.
Retrieval & Vector Search
Retrieval and vector search articles.
Articles on RAG, embeddings, Qdrant, pgvector, and production retrieval design.
How to Choose Between pgvector and Qdrant for Product Search
pgvector and Qdrant both support embeddings, but they fit different operating models for product search and retrieval.
What Qdrant 1.17 Means for Production RAG
Qdrant 1.17 adds relevance feedback, latency controls, telemetry, and UI improvements that matter when retrieval is part of a real production system.
Qdrant Multitenancy and Collection Aliases for Production RAG
Qdrant multitenancy and collection aliases make it easier to serve multiple users and switch retrieval indexes safely in production RAG systems.
Qdrant vs pgvector: Which Retrieval Layer Should You Choose?
A practical comparison between keeping vectors in PostgreSQL with pgvector and moving retrieval into Qdrant.
How to Build a RAG System with Qdrant and Hybrid Search
A practical Qdrant RAG architecture using dense vectors, sparse vectors, prefetch, and multi-stage search.
What Is Qdrant and When Should You Use It?
Qdrant is an AI-native vector search engine for teams that need semantic retrieval, multitenancy, and flexible vector layouts.
Automation & Integrations
Automation and integration articles.
Articles on automation design, integrations, webhooks, and workflow scaling.
Feature Flags in Practice: Tools and Workflows
A practical feature-flag workflow: choose a portable API, roll out changes gradually, and retire flags before they become operational debt.
Environment Parity: Dev, Staging, and Production with Containers
Containers make dev/prod parity practical: one Compose definition across dev, CI, staging, and production, pinned image versions, real-dependency tests, and CI/CD environment gates.
Infrastructure Drift Is a Control Problem, Not a Surprise
Infrastructure drift is the gap between declared and live state. See how IaC and GitOps tooling detects differences, applies policy, and keeps remediation reviewable.
Docker Compose in Production: Patterns and Pitfalls
A practical commentary on Nick Janetakis's Docker Compose production talk, covering configuration patterns, operational safeguards, and the limits of a 2021 single-host approach.
Webhook Architecture for AI-Triggered Workflows: Delivery, Retries, and Idempotency
A practical guide to webhook architecture for AI-triggered workflows — covering delivery guarantees, retry strategies with exponential backoff, idempotency keys, payload signing, and monitoring patterns.
The Checklist for Choosing Between n8n, Make, Temporal, and a Custom Python Worker
A five-dimension decision framework for choosing between n8n, Make, Temporal, and a custom Python worker — covering pricing, latency, team skill set, compliance, and integration ecosystem.
Infrastructure & DevOps
Infrastructure and DevOps articles.
Server, deployment, database, and operations content focused on reliability and maintainability.
KubeVirt and the VM-Container Convergence
KubeVirt ships Beta feature gates on by default, cross-architecture VMs, CBT backups, confidential computing, and AI/GPU placement — one control plane for VMs and pods.
Kubernetes Gateway API in 2026: A Practical Ingress Migration Path
A practical 2026 guide to moving from Ingress-NGINX to Kubernetes Gateway API, with conversion steps, compatibility checks, and a safer traffic-shift plan.
DNS Deep Dive: Modern Architecture and Performance
How modern DNS is architected — recursive vs authoritative, TTL caching, anycast and EDNS Client Subnet — plus DoT, DoH and DoQ, and what makes resolution fast.
Small Infrastructure Stack Patterns: Nginx, Docker, and Terraform
A practical pattern for a small service stack: put Nginx at the edge, run isolated Docker services, and use Terraform for repeatable infrastructure without hiding operational trade-offs.
Cloud Cost Optimization in 2026: A Practical Guide for Platform Teams
A practical, measurement-first workflow for cloud cost optimization: FinOps governance, allocation, commitments, Kubernetes rightsizing, storage lifecycle policies, and egress control.
Lightweight Kubernetes: K3s and Single-Node Clusters for Small Teams
K3s is a lightweight, CNCF-certified Kubernetes distribution. See when a single-node cluster fits small teams and the availability, backup, and upgrade trade-offs.
Linux & Server Administration
Linux and server administration articles.
Articles on Debian, Ubuntu, permissions, limits, packages, and terminal operations.
Declarative Containers with systemd and Podman Quadlet
Quadlet turns simple .container files into real systemd units. Write intent, not generated boilerplate, and let Podman’s generator keep services current after every daemon-reload.
Nginx Configuration Mastery: Reverse Proxy, Caching, and Security
Build a dependable Nginx edge with reverse proxying, upstream health, cache revalidation and invalidation, TLS, security headers, and useful observability.
The Complete Bash Scripting Course
A practical commentary on You Suck at Programming's complete Bash course, connecting shell fundamentals with safer server automation, testing, and repeatable operations.
Performance Tuning Linux Servers for Web Workloads
A practical, measurement-first guide to tuning Linux web servers: baseline analysis, Nginx workers and connection limits, file descriptors, PHP-FPM pools, caching, benchmarking, and safe rollback — without blindly copying sysctl values.
Backup Strategies in 2026: restic, Borg and the 3-2-1 Rule
restic 0.19 and Borg 1.4 are mature choices for encrypted, deduplicated Linux backups in 2026. Compare retention, off-site copies, immutability and restore testing.
LVM, Btrfs, and ZFS: Linux Storage Decisions in 2026
LVM, Btrfs, and ZFS compared for 2026: snapshots, RAID, checksums, resizing, send/receive, memory needs, licensing, and recovery, with safe commands and a decision framework.
Web Development
Web development articles.
Frontend and browser-oriented implementation content covering performance and accessibility.
Core Web Vitals in 2026: What Actually Moves the Needle
Core Web Vitals thresholds stayed the same in 2026, but Chrome 151 finally gave SPAs better measurement support. Focus on field data, not lab scores.
TypeScript in 2026: What's New and What's Coming
TypeScript 6.0 prepared the ecosystem for a faster Go-based 7.0. Here's what changed, how to upgrade safely, and what web tooling still awaits.
JavaScript Runtime Showdown: Node.js vs Bun vs Deno in 2026
A practical 2026 comparison of Node.js, Bun, and Deno, covering current releases, compatibility, tooling, and how to choose a runtime.
TypeScript and Node.js in 2026: the runtime is changing faster than the frontend
TypeScript and Node.js are changing quickly in 2026, and the real impact often lands in scripts, build steps, and content tooling before it reaches the UI.
How to Automate Website QA With Playwright and GitHub Actions
Playwright and GitHub Actions make a strong QA pair when the website needs repeatable checks before changes reach production.
How to Prototype an API Before the Backend Exists
The fastest way to find API problems is to design and test the contract before the backend is finished.
CMS & Content Systems
CMS and content system articles.
Articles on WordPress, Drupal, Magnolia, content modeling, and CMS migrations.
WordPress in 2026: When It Still Makes Sense for Small Business Sites
Practical guidance on when WordPress remains the right choice for small business websites in 2026, covering editor familiarity, plugin ecosystem, hosting options, and content operations versus performance, security, and maintenance tradeoffs.
Headless CMS Buyer's Guide 2026: Sanity vs Contentful vs CloudCannon vs Strapi vs Directus
A structured comparison of five leading headless CMS platforms in 2026 — Sanity, Contentful, CloudCannon, Strapi, and Directus — scored on pricing, content modeling, multilingual support, developer experience, and migration path.
Drupal in 2026: What the Roadmap Says About the CMS Future
Drupal's 2026 direction — Drupal CMS, Recipes, Project Browser, and Automatic Updates — shows a platform trying to make enterprise CMS easier, not smaller.
WordPress in 2026: When It Still Makes Sense
WordPress still matters in 2026, but only when it is treated as a managed publishing system with clear workflows, security discipline, and automation.
How to Set Up Magnolia CMS for a Basic Content Project
A basic Magnolia CMS setup goes more smoothly when the team starts with the official getting-started path, understands bundles and webapps, and uses Magnolia CLI to create a clean first project structure.
How to Choose Between Magnolia and a Lighter CMS for Enterprise Content Operations
The right choice between Magnolia and a lighter CMS depends less on feature lists and more on workflow depth, integration pressure, governance needs, and the cost of long-term complexity.
Static Sites & Astro
Static sites and Astro articles.
Articles on Astro, static site generators, build performance, and content-driven static publishing.
Astro Joins Cloudflare: What It Means for Static Site Teams
Cloudflare acquired The Astro Technology Company in January 2026. Astro remains open source and platform-agnostic, with two major releases since — here is what static-site teams should know.
Astro in 2026: why content sites still benefit from the framework’s latest releases
Astro keeps proving that content sites can stay fast, structured, and maintainable without turning every page into a JavaScript app.
Astro + CloudCannon: The Perfect Stack for Multilingual Client Presentation Sites
Learn how Astro static site generator and CloudCannon headless CMS combine to deliver blazing-fast, SEO-optimized multilingual websites that non-technical clients can edit themselves. Includes Croatian localization tips.
SSR, SPA, and SSG: Comparing Three Rendering Architectures
Compare SSR, SPA, and SSG to choose the best architecture for SEO, performance, and user experience. Includes use-case recommendations and framework comparisons.
How to Use Astro Content Collections to Keep Service Pages and Blog Posts Consistent
Astro content collections keep service pages, blog posts, and other structured pages aligned without adding CMS complexity too early.
When Astro Content Collections Are Enough for a Content Operation
Astro content collections are often enough when the content operation needs structure, validation, and performance more than a heavy editorial backend.
Marketing & SEO
Marketing and SEO articles.
Content on SEO, analytics, reporting, structured data, and growth decisions.
AI search in 2026: what changed and what to do about it
AI search changed everything in 2025 and the shift is still accelerating. A breakdown of what changed, how search behaviour is evolving, and what content owners should do to stay visible.
SEO in the AI-search era: how to adapt to Search Console, AI Overviews, and preferred sources
SEO now needs to account for AI surfaces, richer Search Console reporting, and the way summaries influence click behaviour.
How to Audit Website Content Before You Restructure the Site
A content audit should identify page purpose, overlap, and URL logic before categories, directories, and internal links are reorganized.
How to Automate Monthly Website Reporting With Google Analytics 4, Search Console, and Looker Studio
Monthly reporting becomes much easier when analytics, search visibility, and dashboards are designed to work together from the start.
Why Structured Content Makes Multilingual Publishing Easier
Multilingual publishing becomes easier when content is modeled as reusable fields instead of duplicated page layouts.
How to Route Website Leads Into HubSpot Without Manual Follow-Up
Website leads move faster when the form, CRM, and team notifications all follow one clear automation path.
Security & Privacy
Security and privacy articles.
Practical security and privacy implementation notes on headers, consent, identity, and protection layers.
Ransomware Recovery: Testing Backups and DR Drills
Ransomware recovery hinges on tested backups and rehearsed DR drills. Keep backups offline or immutable, set clear recovery objectives, and restore on a schedule.
Cloudflare or Coraza? Picking a WAF in 2026
Cloudflare's managed WAF is zero-ops but its OWASP ruleset still runs CRS 3.3; self-hosted Coraza gives you current CRS 4 and control.
Security Headers and CSP in 2026: Practical Reset for Static Sites
W3C CSP3 is still a Working Draft, Reporting-Endpoints became baseline, and teams can enforce strict policies safely by collecting reports first.
YouTube Video Spotlight: OWASP Top 10:2025 — What Changed and Why It Matters
A practical commentary on the OWASP Foundation's 45-minute Top 10:2025 announcement and what its updated risks mean for web teams.
Infrastructure Secrets Management Without Complexity
A practical, low-drama approach to infrastructure secrets: keep credentials out of Git, use least privilege, rotate deliberately, and introduce Vault when the operational need is real.
Supply Chain Security: Software Bill of Materials in Practice
CISA refreshed the SBOM baseline in July 2026, while the EU Cyber Resilience Act makes machine-readable software inventories a practical roadmap item for teams building or buying digital products.
Business Strategy
Business strategy articles.
Business strategy content focused on prioritization, operating choices, and long-term leverage.
When Not to Use AI Agents: A Decision Framework
A practical decision framework for knowing when NOT to use AI agents — zero-error workflows, high-liability decisions, latency-sensitive interactions, and cases where deterministic code is cheaper and more reliable.
State of Magento in 2026: Why Adobe Commerce Still Matters for Complex Commerce
Adobe Commerce is narrowing into a cloud-first, B2B-friendly enterprise platform. Here is who still benefits from Magento in 2026 and who should move on.
How to Run Technical Training With YouTube, Loom, and OBS Studio
YouTube, Loom, and OBS Studio cover three different training formats, and each one is useful for a different kind of audience.
How to Run Workshops With Google Meet, Zoom, Slides, and Miro
Google Meet, Zoom, Slides, and Miro make workshops easier to lead when each tool has a clear role in the session.
Why Trust Is Now the Main Conversion Layer for AI-Enabled Businesses
AI adoption is accelerating, but customers still convert only when they trust the business, the process, and the handling of their data.
Why Structured Data Is a Business Strategy, Not Just a Technical Detail
Structured data helps search engines understand your site, but the business value is really about visibility, trust, and better-qualified clicks.
Updates & Announcements
Updates and announcements articles.
Updates, announcements, and release-level changes with practical impact on architecture and operations.
Modern CSS: Container Queries, View Transitions, and :has()
Container queries, the View Transitions API, and :has() crossed into Baseline between 2023 and 2026. What is safe to adopt now, and the one caveat that remains.
DNS Security: DNSSEC, CAA Records, and DDoS Protection
DNSSEC authenticates DNS data, CAA records constrain certificate issuance, and layered DDoS protection keeps DNS and applications available — plus the 11 October 2026 root KSK rollover deadline every resolver operator should check.
Platform Engineering in Practice: Building Internal Developer Platforms
A practical guide to internal developer platforms: the problem an IDP solves, platform-as-a-product principles, golden paths, self-service, tooling without lock-in, security guardrails, DX metrics, an adoption roadmap, and common pitfalls.
Git Workflows That Work: Beyond main-vs-develop
The classic main-vs-develop Gitflow model is now legacy. GitHub Flow, GitLab Flow, and trunk-based development are simpler alternatives, backed by DORA data and branch automation.
WebAssembly on the Server: Where It's Actually Useful in 2026
WASI 0.3 and WebAssembly 3.0 made server-side Wasm practical. Where it is genuinely useful in 2026, which platforms run it, and where the hype ends.
Zero Trust Networking for Small and Medium Teams: A Practical 2026 Update
Zero trust is now practical for small teams. NIST and NSA published phased 2025–2026 guidance; the on-ramp is MFA, identity-based access, and WireGuard as transport.