// BLOG
Latest Articles
Insights, tutorials, and updates from the Boottify team. Discover best practices for web development, design patterns, and technology trends.
SearchShowing 25–36 of 75 posts
Security
Under the hood: how we hardened Boottify auth
Encrypting TOTP seeds and OAuth tokens at rest, fixing email enumeration on signup, tightening session timeouts, and closing a one-time-use race on password resets — a tour of the auth changes shipped in v3.6.0.
6 months ago6 min
00
Platform Engineering
Nginx Removed, Kubernetes Hardened: Infrastructure Overhaul Q1 2026
We completed the full removal of Nginx from the stack, fixed a cross-node CoreDNS scheduling failure, resolved a dual iptables conflict that was silently routing traffic to dead pods, built a platform fallback system, and patched an ACME wildcard race condition.
6 months ago10 min
00
Platform Engineering
Universal App Configuration Wizard: Deploy Any App, Your Way
The marketplace deployment wizard now includes a smart Configure step that knows the specific environment variables, ports, and volumes each application needs — so you get a working deployment on the first try.
7 months ago8 min
00
Platform Engineering
WAF Engine v2: Multi-Layer Threat Detection and IP Reputation Scoring
We rebuilt our Web Application Firewall from the ground up — 34 detection rules across 9 OWASP categories, multi-layer URL decoding, honeypot traps, and per-IP anomaly scoring that bans bad actors before they cause damage.
7 months ago7 min
00
Platform Engineering
From 40 Tests to 285: Building a Production-Grade E2E Test Suite
We expanded our Playwright end-to-end test suite from 40 tests across 5 files to 285 tests across 38 spec files — with database-injected sessions, a role-access matrix, and zero placebo assertions.
7 months ago9 min
00
Product Updates
Building a 34-Rule WAF: From 15 Signatures to Full OWASP Coverage
How we expanded our web application firewall from 15 basic signatures to 34 detection rules across 9 OWASP categories, with multi-layer URL decoding, anomaly scoring, IP reputation tracking, and honeypot traps that instantly ban scanners.
8 months ago8 min
00
Product Updates
Cross-Platform Biometric Auth: Migrating WebAuthn RP ID Across Subdomains
How we migrated our WebAuthn Relying Party ID from control.boottify.com to the apex domain boottify.com, enabling biometric credentials to work across all subdomains with a dual RP ID verification strategy.
8 months ago7 min
00
Engineering
From Local Disk to S3: Building a Dual-Provider Storage Layer
How we designed a storage abstraction that supports both local filesystem and S3 — with environment-driven switching, URL derivation, and zero application code changes when migrating between providers.
8 months ago9 min
00
Developer Experience
Sharp + WebP: Server-Side Image Optimization in Next.js
A deep dive into our image optimization pipeline — using Sharp to resize, compress, strip EXIF data, and convert uploads to WebP with profile-specific presets for blog, avatar, and logo images.
8 months ago8 min
00
Product Updates
151 Loading States and 12 Error Boundaries: Our Codebase Quality Audit
A comprehensive quality audit of our 275K-line codebase: generating loading skeletons for every page, adding error boundaries across route groups, migrating 3,796 hardcoded colors to CSS variables, and replacing console.log with structured logging.
8 months ago9 min
00
Engineering
Building Production Email Infrastructure with AWS SES
How we built a production email system handling 18 transactional email types — from auth verification to billing receipts — with SES domain verification, template rendering, and delivery monitoring.
8 months ago9 min
00
Engineering
Migrating Uploads to AWS S3 + CloudFront CDN
Why local disk storage doesn't scale for a SaaS platform, how we integrated S3 with CloudFront on cdn.boottify.com, and the storage abstraction that makes provider switching seamless.
8 months ago9 min
10