ZUA.
Blog

Technical Writing

Deep-dives on backend engineering, cloud infrastructure, and AI — written from real production experience.

Web Development
Jul 21, 2026·5 min read

Server-Side vs Client-Side Rendering — How to Actually Decide in 2026

SSR vs CSR is not a framework debate — it's an architectural decision. Real examples: e-commerce and social apps on SSR, admin panels and dashboards on CSR, and the hybrid patterns that most production apps actually use.

Next.jsReactSSRCSRArchitecture
Read
Developer Tools
Jul 15, 2026·7 min read

I Built a CLI Tool to Reclaim Disk Space from node_modules — Here's How It Works

deepclean-cli scans your entire projects directory, finds every node_modules folder, reports the exact disk space used, and deletes them safely — with dry-run mode, a confirmation prompt, and support for any folder name.

Node.jsCLIOpen SourceDeveloper Toolsnpm
Read
Backend / Security
Jul 8, 2026·9 min read

LLM API Keys in Frontend Code — A Security Risk Most Developers Underestimate

Over 8,000 OpenAI API keys are publicly accessible right now — most ended up there because a developer followed a tutorial. Here's the principle, the patterns, and the code to fix it permanently.

SecurityOpenAINode.jsReactLLM
Read
Backend / Security
Jul 8, 2026·10 min read

Your AI Coding Assistant Is Reading Your .env File Right Now

GitHub Copilot, Cursor, and Claude Code index your entire project by default — including API keys and credentials. Here's how to set up ignore rules, restrict permissions, and enable approval-first edit mode before it costs you.

SecurityAI ToolsVS CodeCursorClaude Code
Read
JavaScript
Jun 19, 2026·10 min read

What's New in ES2025: Iterator Helpers Explained

Iterator Helpers hit Baseline in mid-2026 — all major browsers and Node.js 22+ ship them natively. Here's why lazy evaluation changes how you process data, and every new method with real examples.

JavaScriptES2025IteratorsNode.jsPerformance
Read
Backend / Security
Jun 19, 2026·11 min read

JWT Auth Best Practices in Node.js — What Most Tutorials Get Wrong

Most JWT tutorials skip the hard parts — token storage, refresh token rotation, forced logout, and revocation. This is what production auth actually looks like.

JWTNode.jsTypeScriptSecurityAuth
Read
Cloud / DevOps
Jun 18, 2026·10 min read

Monitoring Node.js Microservices with Prometheus and Grafana

A complete guide to setting up production observability for Node.js microservices — Prometheus scraping, custom metrics with prom-client, Grafana dashboards, and Alertmanager alerts to Slack and PagerDuty.

PrometheusGrafanaAWS ECSNode.jsAlertmanager
Read
Blockchain
May 24, 2026·12 min read

Building a Blockchain Explorer for Substrate Chains with 3 Microservices

How I architected a production blockchain explorer for Substrate-based chains — an RPC server, a block worker that subscribes to new heads and parses extrinsics/events, and a WebSocket broadcaster for real-time frontend updates.

SubstrateNode.jsMicroservicesWebSocketsPolkadot
Read
AI / Computer Vision
May 10, 2026·8 min read

Building a Real-Time Object Detection Pipeline with Python and OpenCV

A practical guide to building a production-ready computer vision pipeline using Python, OpenCV, and a pre-trained YOLO model — from local prototype to a REST API endpoint.

PythonComputer VisionOpenCVYOLOREST API
Read
Cloud Infrastructure
May 20, 2026·10 min read

Deploying Node.js Microservices on AWS ECS with Docker and CI/CD

Step-by-step guide to containerising a Node.js service with Docker, pushing to ECR, defining ECS task definitions, and wiring up a GitHub Actions CI/CD pipeline for zero-downtime deployments.

AWSECSDockerNode.jsCI/CDGitHub Actions
Read