Author
Andrius Lukminas
67 articles published
Security
Under the hood: how we hardened Boottify auth
Encrypting TOTP seeds and OAuth tokens at rest, fixing email enumeration on signup, tightening session timeouts, and closing a one-time-use race on password resets — a tour of the auth changes shipped in v3.6.0.
6 months ago6 min
00
Engineering
From Local Disk to S3: Building a Dual-Provider Storage Layer
How we designed a storage abstraction that supports both local filesystem and S3 — with environment-driven switching, URL derivation, and zero application code changes when migrating between providers.
8 months ago9 min
00
Developer Experience
Sharp + WebP: Server-Side Image Optimization in Next.js
A deep dive into our image optimization pipeline — using Sharp to resize, compress, strip EXIF data, and convert uploads to WebP with profile-specific presets for blog, avatar, and logo images.
8 months ago8 min
00
Engineering
Building Production Email Infrastructure with AWS SES
How we built a production email system handling 18 transactional email types — from auth verification to billing receipts — with SES domain verification, template rendering, and delivery monitoring.
8 months ago9 min
00
Engineering
Migrating Uploads to AWS S3 + CloudFront CDN
Why local disk storage doesn't scale for a SaaS platform, how we integrated S3 with CloudFront on cdn.boottify.com, and the storage abstraction that makes provider switching seamless.
8 months ago9 min
10
Engineering
Responsive Image Thumbnailing: From 550KB to 5KB Per Image
How we built a 4-tier WebP thumbnail pipeline that generates responsive variants on upload, cutting blog image bandwidth by 93-99% — from 550KB originals to 5KB admin thumbnails.
8 months ago8 min
00
Engineering
Building a Production Deployment Pipeline from Scratch
How we built a complete CI/CD pipeline with Docker multi-stage builds, Kubernetes deployments, real-time log streaming, and GitHub Actions webhooks — all managed through a single dashboard.
8 months ago8 min
00
Security
Security Update: React2Shell (CVE-2025-55182) Audit Complete
We completed a full security audit for the critical React2Shell vulnerability (CVE-2025-55182, CVSS 10.0). Boottify is confirmed NOT VULNERABLE — patched versions, no Server Actions, and verified by multiple scanners.
8 months ago3 min
21
Engineering
From 7 God Files to Zero: Refactoring a 162K-Line Codebase
How we identified and eliminated all 7 files over 500 lines, created shared hooks and components, and brought our entire codebase under control without breaking anything in production.
8 months ago9 min
00
Engineering
Why 2026 Is the Year Nobody Trusts a Single Cloud
Major outages, aggressive pricing changes, and AI-driven workload diversity are pushing teams toward multi-cloud. Here's why the single-cloud era is ending and what a realistic multi-cloud strategy looks like.
8 months ago9 min
00
Security
The SaaS Downtime Crisis: 156 Major Incidents and What to Do About It
SaaS outages increased 69% year-over-year with 9,255 hours of degraded service across major platforms. Here's the data, the patterns, and the protection strategies every SaaS operator needs.
8 months ago9 min
00
Engineering
Kubernetes + AI Workloads: How SRE Is Being Pushed to Its Limit
GPU scheduling, bursty inference traffic, and multi-terabyte model weights are breaking traditional SRE assumptions. Here's how Kubernetes and the SRE discipline are adapting to the AI workload era.
8 months ago10 min
00