https://89393b0c.nuvai-blog.pages.dev/tags/devops/ Recent content in DevOps on Luis Sousa Blog Hugo en Sat, 07 Mar 2026 12:00:00 +0000 https://89393b0c.nuvai-blog.pages.dev/posts/cloudflare-www-to-apex-redirects-terraform/ Sat, 07 Mar 2026 12:00:00 +0000 https://89393b0c.nuvai-blog.pages.dev/posts/cloudflare-www-to-apex-redirects-terraform/ <p>For SEO, <code>www.example.com</code> should 301 redirect to <code>example.com</code> so search engines see one canonical host. We manage our travel blog&rsquo;s infrastructure with Terraform, including Cloudflare. When we tried to add the www-to-apex redirect, we hit &ldquo;exceeded maximum number of zone rulesets.&rdquo; Here&rsquo;s how we fixed it and manage redirects as code.</p> <h2 id="why-terraform-for-cloudflare"> Why Terraform for Cloudflare <a class="heading-link" href="#why-terraform-for-cloudflare"> <i class="fa-solid fa-link" aria-hidden="true" title="Link to heading"></i> <span class="sr-only">Link to heading</span> </a> </h2> <p>Terraform gives you versioned, repeatable config. No manual dashboard drift, no &ldquo;who changed what&rdquo; surprises. Redirects live in <code>main.tf</code> and are applied consistently.</p> https://89393b0c.nuvai-blog.pages.dev/posts/wordpress-docker-compose-production-stack/ Sat, 07 Mar 2026 09:00:00 +0000 https://89393b0c.nuvai-blog.pages.dev/posts/wordpress-docker-compose-production-stack/ <p>We run <a href="https://joyofexploringtheworld.com" class="external-link" target="_blank" rel="noopener">joyofexploringtheworld.com</a> — a travel blog — on a single 24 GB VPS using Docker Compose and free-tier Cloudflare. No managed WordPress hosting, no premium plugins, no surprise invoices. Here is the full stack, laid out so you can steal whatever is useful.</p> <h2 id="architecture-overview"> Architecture overview <a class="heading-link" href="#architecture-overview"> <i class="fa-solid fa-link" aria-hidden="true" title="Link to heading"></i> <span class="sr-only">Link to heading</span> </a> </h2> <p>The request path looks like this:</p> <pre tabindex="0"><code>Internet -&gt; Cloudflare (CDN / APO / edge SSL) -&gt; Traefik v3 (reverse proxy, TLS termination for origin) -&gt; 2 WordPress containers (round-robin with sticky session cookies) -&gt; MariaDB 11 (single-writer database) -&gt; Redis (persistent object cache) </code></pre><p>Alongside the main request path we run a handful of supporting services: <strong>imgproxy</strong> on a dedicated subdomain for on-the-fly image resizing and format conversion, a <strong>wp-cron sidecar</strong> that hits <code>wp-cron.php</code> every five minutes so we can disable the default front-end cron, an <strong>automated backup</strong> container that dumps the database and syncs uploads to Hetzner Storage Box nightly, and the <strong>Datadog agent</strong> for logs, traces, and container metrics.</p>