GitLab

Reduced OPEX 99.5% by Rewriting App in Go

A technical case study describing how the author rewrote a Ruby on Rails-based document search SaaS into a single Go binary (the Project Apario reader) and drastically cut operational expenses. The original PhoenixVault stack incurred roughly $7,000/month in OPEX (ElasticSearch, MongoDB Atlas, OVH hosting, plus other services). Replacing external managed services and Rails with a self-contained Go application running on OVH bare-metal reduced costs to about $33/month (~99.5% reduction). The post documents implementation details — local JSON/.db directories, built-in CORS/CSP, self-signed auto-rotating TLS (auto-tls), rate limiting, IP-ban middleware, multiple search algorithms, and configuration flags — and links to the open-source Project Apario repositories. Publication date: 2026-07-27.

Topobuilder containerizes cPanel site into AWS multi-region

Topobuilder is a Go binary (built in 2024) that converts an existing PHP website hosted on a cPanel server into a multi-region, containerized application provisioned on AWS. It runs from a single YAML configuration file, supports remote databases (e.g., RDS), and deploys clusters (3–9 regions) behind an HAProxy load balancer in roughly 12–36 minutes depending on topology and concurrency settings. The tool renders Terraform files, builds a Docker image from the live cPanel site, uploads and deploys images to EC2 instances, configures networking and health checks, and publishes DNS changes via the Cloudflare API when configured. Topobuilder includes a verbose logging package that redacts secrets at STDOUT, integrates with 1Password using op:// secret lookups, uses concurrent validation with coordinators, and writes a .tbstate file for rollback and state tracking. The source remains closed and the author notes it was built quickly and has not required updates since.

96% of Ransomware Victims Are Small Businesses

A July 2026 analysis highlights that ransomware overwhelmingly targets small and medium-sized businesses (SMBs): Verizon's 2026 DBIR reports that 96% of ransomware victims (where size was known) were SMBs, and ransomware appears in 48% of confirmed breaches. Third-party involvement in SMB breaches has risen (55%), and many very small businesses still allocate no cybersecurity budget. The article describes the modern ransomware kill chain, identifies vulnerability exploitation as the top initial access vector, and calls out an urgent WordPress pre-auth RCE chain (CVE-2026-60137 + CVE-2026-63030, aka “wp2shell”) with fixes available in patched WordPress releases. Practical mitigations recommended include verified immutable backups, a quick security baseline scan, rapid patching, enabling MFA, and locking down admin surfaces.