How One Wildcard DNS Record Powered 19 Self-Hosted Services Behind a Single IP

·1 views

A self-hosted infrastructure setup using a single wildcard DNS record (*.example.com) routes all subdomains to one VPS, with Nginx Proxy Manager handling HTTPS publishing through a simple four-field form. The author automated service deployment using Claude Code, which generates compose files, proxy configurations, and certificates end-to-end, resulting in 19 live public hostnames. Each service received its own Let's Encrypt certificate via HTTP-01 challenge rather than a shared wildcard certificate, which permanently requires port 80 to remain open for renewals — a silent failure risk if closed. The author notes that the ease of publishing services exposed a key oversight: none of the tooling enforces access control, leaving all 19 services reachable from the open internet by default. The intended solution was to make the services accessible only through a private overlay network, separating the concept of being internet-connected from being publicly reachable.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

Developer Shares Key Bash Lessons: Regex, Loops, and Task Automation

A developer has wrapped up a month-long deep dive into Bash scripting, documenting their progress in a three-part series on DEV Community. After mastering expansions and syntax, they moved on to regex, along with command-line tools like grep, sed, and awk, which proved valuable for automation. They also explored conditionals, loops, arrays, and shell options, building several mini projects to apply their learning. All practice scripts have been shared publicly on a GitHub repository for others to reference. The developer noted that the experience changed how they interact with their own machine, replacing many manual tasks with automated solutions.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Cybersecurity Beginner Builds Wazuh SIEM With Sysmon and Atomic Red Team Tests

Christopher Bontempi, a cybersecurity career-changer, documented his first hands-on SIEM project by deploying Wazuh and Sysmon on a Windows endpoint called ART Workstation. He used Atomic Red Team's safe attack simulations to generate controlled activity and verify whether the SIEM could detect it. Two of his three tests produced matching alerts in both Sysmon and Wazuh, confirming end-to-end log forwarding. A third test revealed a detection gap — Sysmon captured the activity locally, but no corresponding Wazuh alert was found — highlighting that logging tools must be actively validated, not assumed to be working. The project also surfaced practical lessons around using structured SIEM fields for searches and accounting for UTC timestamp differences between Sysmon and local system time.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

How Race Conditions Threaten Backend Systems and Ways to Fix Them in Express.js

Race conditions occur when multiple simultaneous requests access and modify the same shared data, producing unpredictable or incorrect outcomes that depend on execution timing. Common real-world consequences include oversold inventory, duplicate financial transactions, incorrect account balances, and conflicting profile updates. In Express.js, asynchronous operations such as database queries and API calls make applications especially vulnerable, since checks and writes can interleave across concurrent requests. Developers can mitigate these issues using database transactions, mutex locks, or idempotency keys, each carrying trade-offs in complexity, latency, or throughput. Choosing the right strategy depends on the specific operation, making race condition awareness a critical skill for backend engineers.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Bash Series Part 2: A Developer's Guide to Shell Expansions Explained

A developer continuing a month-long Bash learning series has documented key concepts around shell expansions and special parameters. The article covers how Bash interprets scripts line by line without halting on errors unless flags like set -euo pipefail are explicitly set. It walks through several expansion types including brace, tilde, parameter, command substitution, and arithmetic expansion, with practical code examples for each. The author notes limitations such as Bash's lack of native floating-point arithmetic, requiring the bc utility for such calculations. The series is set to continue with topics including regex and tools like grep, sed, and awk.

0 comments Read more at DEV Community