Keeping TLS certificates boring
Automatic renewal is the easy part. Noticing when it stops is the rest.
Journal
Short write-ups from client work. Roughly one a month.
Why we stopped putting everything behind one load balancer
Splitting public and internal traffic made incidents smaller and cheaper to debug.
HTTP/2 tuning notes for small servers
What changed when we measured instead of copying defaults.