Made by Nickphp2shell: the PHP bugs that run before your code does
Two critical PHP interpreter bugs allow unauthenticated remote code execution before your app runs. What they are, how to check your servers, and what to do now, with plain-language summaries.
Independent software work
Useful first. Built to last.
Software, infrastructure, and technical writing for teams whose work needs to hold up.
01
Made in Lima, Peru
The practice
Software that holds up in the real world.
Made by Nick is a place for product engineering, platform work, and experiments. I work with the practical constraints that shape a product: interfaces people understand, operations that are easy to run, and decisions someone can trace later.
From the notebook
Everything I've written
A context canceled in PMM that was really DNS
A PMM 3.9.0 agent would not connect and only said context canceled. I ruled out the token and the proxy until I found that OVHcloud DNS took 10 seconds and gRPC gave up at 5.
From backend developer to Head of DevOps
Four roles at one company, and a gradual move from writing services to running the platform underneath them.
Moving production from AWS to Azure
A cloud migration is mostly an inventory problem. This is the approach I would follow again.
One place for logs, metrics, and traces
How I set up our observability platform on Grafana, Loki, Tempo, Mimir, and OpenTelemetry, and the few rules that made it useful.
A reverse SSH proxy for when ngrok isn't enough
Reaching a machine behind a network you don't control, with a small design built on plain OpenSSH.
Designing reliable APIs
Reliable APIs are decided long before an incident, in the boundaries, defaults, and small choices people never see.
A practical model for edge caching
Before caching a response, decide how fresh it needs to be and what happens when it goes stale.
Security is a series of small decisions
Security comes from ordinary safeguards used consistently at every trust boundary.
Capabilities
What makes the product work.
- 01Cloud migrations: Moving infrastructure between AWS and Azure with minimal disruption, and keeping costs in check afterward.
- 02Platform & delivery: Kubernetes, CI/CD, and infrastructure as code with Terraform and Ansible, plus internal deployment tooling.
- 03Observability: Metrics, logs, and distributed tracing with Grafana, Loki, Tempo, Mimir, and OpenTelemetry.
- 04Identity & backend: OAuth2 and OpenID Connect authentication, secret management with Vault, and services in Go.
Let's work through it