~/tutorials

Tutorials

All my tutorials come from questions I once had — now the answers are yours, free and straight to the solution.

.htaccess rewrite rules, explained properly

.htaccess rewrite rules, explained properly

Quick answermod_rewrite is a tiny language and most confusion comes from reading rules in isolation.mod_rewrite is a tiny language and most confusion comes from reading rules in isolation. Once you understand condition-then-rule and the flag letters, it clicks.What...

Expo managed vs bare: when to eject

Expo managed vs bare: when to eject

Expo’s managed workflow is the right default for most React Native products. It gives you a fast start, over-the-air updates, and a build service without asking you to maintain two native projects. The mistake is treating “managed” as a permanent architectural...

Getting the real visitor IP behind Cloudflare

Getting the real visitor IP behind Cloudflare

Quick answerSit behind Cloudflare and every request in your Apache logs shows Cloudflare's IP instead of the visitor's.Sit behind Cloudflare and every request in your Apache logs shows Cloudflare's IP instead of the visitor's. Restoring the real IP matters...

iptables firewall basics for a VPS

iptables firewall basics for a VPS

Quick answeriptables looks intimidating but the core model is simple: chains of rules, evaluated top to bottom, first match wins.iptables looks intimidating but the core model is simple: chains of rules, evaluated top to bottom, first match wins. A small, readable...

Configuring Exim4 on Debian 9 for outbound mail

Configuring Exim4 on Debian 9 for outbound mail

Quick answerExim4 is Debian's default MTA and it is remarkably capable once you understand its split configuration.Exim4 is Debian's default MTA and it is remarkably capable once you understand its split configuration. For most sites you only need it to relay...

Tailscale SSH: the Tailworm report

Tailscale SSH: the Tailworm report

A researcher found privilege-escalation issues in Tailscale SSH when port forwarding is enabled. What the Tailworm report claims, what Tailscale says, and how to reduce exposure.

Setting up a Postfix mail server that actually delivers

Setting up a Postfix mail server that actually delivers

Quick answerSending mail is easy; getting it into inboxes is the hard part.Sending mail is easy; getting it into inboxes is the hard part. A Postfix server that no one blocks needs three things: a clean forward/reverse DNS match, TLS, and SPF/DKIM records.What you...