Production Rate Limiting in ASP.NET Core
Most ASP.NET Core rate-limiting examples stop after registering a fixed window. That is enough to demonstrate the middleware, but it is not enough for a production policy.
Read Blog Post
Tag: Security
Blog Posts with tag "Security"
Security articles for .NET and Azure: managed identities instead of connection strings, certificates, container hardening, authentication flows and reducing attack surface.
Security is mostly the sum of small decisions: which runtime a container carries, how a service authenticates against Azure, where secrets live and which defaults a framework ships with. The guides in this collection document those decisions with working code.
Hands-on workshop on this topic: Digital Sovereignty Workshop
Distroless, Chiseled or Alpine: Choosing a .NET Base Image
Distroless, Chiseled and Alpine are often compared as three equivalent Linux distributions. They are not. Alpine is a distribution built around musl, BusyBox and apk. Distroless describes a runtime image without a …
Read Blog Post
Stop Using nginx as Your Default Static File Server in Docker
In the week of October 21, 2026, government portals in the Netherlands, Finland and Germany, hospital websites and several large companies took their public sites offline. Not because they had been breached, but because …
Read Blog Post
Custom Password Hashing in ASP.NET Core: A Versioned, Upgradeable Design
Applications that do not use ASP.NET Core Identity still need a disciplined password-storage design. This often leads to a requirement phrased as “password encryption.” That phrase is dangerous because encryption is …
Read Blog Post
Azure Essentials Workshop
This workshop gives engineering teams a solid, practical foundation in Microsoft Azure. Rather than covering every service superficially, it focuses on the fundamentals that matter most in real deployments: how …
Read Blog Post
.NET NuGet Trusted Publishing with GitHub Actions
Publishing NuGet packages has traditionally required one uncomfortable compromise: a long-lived API key had to exist somewhere in the delivery pipeline. Even when that secret was stored in a secure CI system, the model …
Read Blog Post
Vaultwarden (Bitwarden) mit Docker auf Synology NAS selbst hosten
You can find the English version of this guide here: Self-Hosting Vaultwarden (Bitwarden) on Synology NAS with Docker Passwort-Manager-Dienste sind in den letzten Jahren deutlich teurer geworden. Gleichzeitig ist mein …
Read Blog Post
Self-Hosting Vaultwarden (Bitwarden) with Docker on Synology NAS
You can find the German version of this guide here: Vaultwarden auf Synology mit Docker selbst hosten Password manager services have become significantly more expensive in recent years. At the same time, my trust in …
Read Blog Post
Create Self-Signed HTTPS Certificates with a Custom Root CA
Once you’ve established your own Root Certificate Authority, the next step is issuing server certificates for your local services. This guide walks through creating HTTPS certificates that are automatically trusted by …
Read Blog Post
Create a Custom Root Certificate Authority for Self-Signed Certificates
When running multiple services in a local network-whether for smart home automation, home labs or development environments-HTTPS encryption becomes essential. Instead of accepting browser warnings for every self-signed …
Read Blog Post