Skip to content
← All posts
Blog · 3 posts

Security articles

Everything I've written about Security: what I set up, what broke, and what I would do again, from real projects.

October 26, 2026 · 8 min read
Self-Hosted Meilisearch for Multiple Projects: One Instance, Scoped Keys, Zero Leaks

Self-Hosted Meilisearch for Multiple Projects: One Instance, Scoped Keys, Zero Leaks

You don't need a search server per app. Here is how I run one self-hosted Meilisearch for several projects on a single VPS, with index prefixes, scoped API keys and a proxy that only exposes search, so no project can read another's data.

  • meilisearch
  • self-hosting
  • search
  • docker
  • security
  • dotnet
October 15, 2026 · 14 min read
ASP.NET Core Authentication vs. Authorization: A Practical Guide

ASP.NET Core Authentication vs. Authorization: A Practical Guide

Learn how authentication and authorization differ in ASP.NET Core, how to register Identity and JWT services in dependency injection, and how roles, claims, and policies fit into a clean architecture.

  • aspnet-core
  • authentication
  • authorization
  • jwt
  • identity
  • clean-architecture
  • security
September 30, 2026 · 16 min read
Where Should Your Secrets Live? What Juniors, Seniors & Enterprises Do Differently

Where Should Your Secrets Live? What Juniors, Seniors & Enterprises Do Differently

23.8 million secrets leaked on public GitHub in 2024. Here's where server credentials should actually live: what juniors do, what seniors do, how good enterprises handle it, and how I manage my project secrets with Infisical.

  • secrets-management
  • security
  • devops
  • infisical
  • backend