~/ / blogs
writing
Long-form on systems design, data, integrations, performance, and ops.
-
A private API over WireGuard: why the network boundary is the security control, not the firewall rule
Run an API on one VPS, reach it from another only through an encrypted tunnel, and never open its port to anyone. A short, practical WireGuard setup — with the two firewall layers that trip everyone up, the pitfalls that actually bite, and a debugging method that converges.
- wireguard
- networking
- security
- vpn
- systems-design
-
Multi-tenant database design for SaaS: why tenancy is an architectural decision, not a config flag
Multi-tenancy decides how your SaaS scales, isolates customer data, and meets compliance. This guide compares silo, pool, and bridge tenancy models with PostgreSQL examples, security considerations, and migration trade-offs.
- saas
- multi-tenancy
- data
- systems-design
- postgres