PostHog vs BetterStack

I'm moving off Sentry. Just underwhelmed with the value.

I'm an indie dev.

Post Hog and Better Stack seem to be two of the best options under $50/mo.

Anyone tried both or either of them and have any insight they can share?

https://redd.it/1q0spin
@r_devops

Best DevOps roadmaps for 2025/26?

I’m a student who has been trying to get into DevOps for the past year or so, but I’m having a hard time picking up a start.

I’ve worked on a lot of projects with .NET mainly for school and whatnot, I’ve also had to learn some React and Flutter throughout my journey.

I’ve really liked the concept of DevOps for a while now, and usually I’ve learned a lot of the stuff I know about software engineering in general through courses, roadmaps and personal projects.

There is a really popular roadmap site which I like to browse through sometimes (not sure if mentioning it will be considered ad so I’ll best avoid it), but it doesn’t feel complete.

I tried youtube tutorials, but most of them feel very forced in their way of teaching and are probably sponsored by a course provider anyway.

So my question the community - is there a proven and tested source of an optimal DevOps roadmap in 2025 (heading into 2026)? So far I’ve peeped into Docker and I got comfortable with using Linux, but it’s not so easy for me to do project based learning, since you need some general knowledge of what the problems are in DevOps. I don’t struggle with finding projects on technology I already know because I know what it can do and what it can’t do. But I’m barely touching the tip of the iceberg here! DevOps seems like such a huge rabbit hole, but it seems very interesting and I do want to learn more about it.

All help is much appreciated!

https://redd.it/1q0u9fg
@r_devops

Defensive CI/CD & IaC pre-commit scanner (Bash) — seeking abuse-case feedback

I built a defensive pre-commit security scanner in Bash focused on overlooked attack surfaces (static sites, IaC, CI/CD). Looking for threat-model and abuse-case review—not validation or promotion.


Zimara\_v0.49.5

https://redd.it/1q0xtjr
@r_devops

Intermediate DevOps Project Ideas looking for Suggestions to Tie My Skills Together (AWS, Docker, Jenkins, etc.)

Hey r/devops,

I've been diving deeper into DevOps over the past year and feel like I've got a solid grasp on a bunch of tools, but now I want to put them into a real-ish project to solidify everything and have something cool for my portfolio/learning.

Here's what I've learned/practiced so far:

- AWS: EC2, ECS (Fargate mostly), S3, IAM, RDS, VPC
- Linux shell noscripting
- Docker (containerizing apps)
- Jenkins (pipelines, plugins)
- SonarQube (code quality)
- Trivy (image scanning)
- GitLab (repos, basic CI)
- Ansible (playbooks, config management)

I haven't touched Terraform or Kubernetes yet (planning to start Terraform soon), so ideally something that doesn't require those.

I'm thinking something like a full CI/CD pipeline for a simple web app (maybe a Flask/Node todo app with RDS backend): GitLab -> Jenkins build/scan/push to ECR -> Ansible to deploy/update ECS service, with proper IAM/VPC security, etc.

But I'm open to better/more realistic ideas! What projects have helped you level up at this stage? Bonus if it's something that mimics real-world workflows without being too basic (no just "hello world" deploy).

Appreciate any suggestions, resources, or even "don't do X because Y" advice. Thanks in advance!

https://redd.it/1q0zd6v
@r_devops

Built a CLI that auto-fixes CI build failures - is this useful?

I've been working on a side project and need a reality check from people who actually deal with CI/CD pipelines daily.



The idea: A build wrapper that automatically diagnoses failures, applies fixes, and retries - without human intervention.



\# Instead of your CI failing at 2am and waiting for you:

$ cyxmake build

✗ SDL2 not found

→ Installing via apt... ✓

→ Retrying... ✓

✗ undefined reference to 'boost::filesystem'

→ Adding link flag... ✓

→ Retrying... ✓

Build successful. Fixed 2 errors automatically.



How it works:

\- 50+ hardcoded error patterns (missing deps, linker errors, CMake/npm/cargo issues)

\- Pattern match → generate fix → apply → retry loop

\- Optional LLM fallback for unknown errors

My honest concerns:

1. Is this solving a real problem? Or do most teams just fix CI configs once and move on?

2. Security implications - a tool that auto-installs packages in CI feels risky

3. Scope creep - every build system is different, am I just recreating Dependabot + build system plugins?



What I think the use case is:

\- New projects where CI breaks often during setup

\- Open source projects where contributors have different environments

\- That 3am pipeline failure that could self-heal instead of paging someone



What I'm NOT trying to do:

\- Replace proper CI config management

\- Be smarter than a human who knows the codebase



GitHub: https://github.com/CYXWIZ-Lab/cyxmake (Apache 2.0, written in C)



Honest questions:

\- Would you actually use this, or is it a solution looking for a problem?

\- What would make you trust it in a real pipeline?

\- Am I missing something obvious that makes this a bad idea?



Appreciate any feedback, even "this is pointless" - rather know now than after another 6 months.

https://redd.it/1q122so
@r_devops

FAANG/MAANG devops?

Hi guys,
Anybody here working as a devops engineer in FAANG/maang companies? If yes what's the interview look like ? What all rounds, questions they have? Is DSA necessary?

https://redd.it/1q11j0t
@r_devops

A year of cost optimization resulted 10% savings

This is mostly a venting post. It's my first year as a DevOps engineer at a medium sized b2b software company. I kind of took it upon myself to lower our cloud costs, even though no one else really cares that much. I turned it into a bit of a crusade (honestly, also thinking this was a low hanging fruit to show my worth and dedication, and also a learning experience). Even wrote here a few times about previous attempts.

After doing this for the better part of a year, got us to maybe 10% cost reduction. Rightsizing, killing idle capacity, requests/limits tuning, the usual janitorial work. After that every extra percent is a fight.

Our workloads are quite bursty, HPA driven, mostly stateless. Nothing exotic. Multiple instance types, multiple AZs, TTLs tuned, PDBs not insane, images pre pulled, startup times are reasonable.

We recently moved from Cluster Autoscaler to Karpenter and I really hoped this would finally let us drop baseline capacity.

Still doesn’t matter. We're not very well-utilized. Cluster utilization is mostly 20–50% CPU and memory Min replicas are pretty high. But no one wants to touch those as they are our safety net.

Most solutions work very well on steady workloads that are polite enough to rise slowly and at constant intervals. That's not really the case for most people I think.

That's it. I don't really have a question here. If anyone is feeling this, you're welcome to reply.

https://redd.it/1q13gbs
@r_devops

Looking for a structured, free, hands-on DevOps / DevSecOps learning path

Hi everyone,
I work in information security, mainly in penetration testing and secure application development (Secure SDLC).
I’m now looking to learn DevOps and especially DevSecOps in a deep and practical way.
I recently followed a DevOps course on LabEx, which worked very well for me because it was lab-based, step-by-step, and structured.
What I’m specifically looking for now is a free, structured, hands-on learning path,
not a collection of scattered tutorials or random resources.
Most lab-based DevOps / DevSecOps platforms I’ve found so far are paid, so I’d really appreciate recommendations for a clear, well-defined, free path that makes sense for someone with a security background.
Thanks in advance for any suggestions.

https://redd.it/1q14ux0
@r_devops

As a fresher

Hey guys I haven't graduated yet I am in 2nd year rn I am really thinking to do Devops and try for their roles as I hv done one internship in that domain or go blockchain web3 as I will graduate in 2028 what should I pick as I heard to learn Devops I have to spend money before to seriously learn it please exp devs in here guide me

https://redd.it/1q15hmg
@r_devops

Pivot to DevOps: Have the skills and projects, but the resume isn't working. What am I missing?

Hello,
I am looking for a sanity check on my job search strategy.
I am trying to break into DevOps. I have built several projects involving k8s and terraform to bridge the gap between my past experience in cybersecurity and this new role.
I have tailored my resume to match the ATS stands, but I am met with silence.

Prior to this I was in cybersecurity domain for 1.7 years and due to some family issues i has to drop out. And currently I am having 1.3 years career gap.

https://redd.it/1q0ybpk
@r_devops

AWS Support → DevOps Engineer (Product/Startup) – Need Guidance

Hi all,

I’m working in an AWS cloud support role in India and preparing for the AWS Solutions Architect Associate exam.

My goal is to move into a DevOps Engineer role (product/startup, not support) by 2026.

I’m a complete beginner in DevOps and need realistic advice

If I start now, how long does it realistically take to become job-ready for DevOps?

Which skills matter most for product/startup companies?

Should I focus more on hands-on projects or certifications after SAA?

Any honest guidance or roadmap would really help.

Thanks 🙏

https://redd.it/1q1asx0
@r_devops

The 8 Fallacies of Distributed Computing: All You Need To Know + Why It’s Still Relevant In 2026

https://lukasniessen.medium.com/the-8-fallacies-of-distributed-computing-all-you-need-to-know-why-its-still-relevant-in-2026-078b4d8a98f1

https://redd.it/1q1chjj
@r_devops

Orion-Belt – Open-source SSH/SCP Bastion with Reverse Tunnels & ReBAC (Seeking Early Contributors)

Hey everyone,

I’ve spent the last few months building **Orion-Belt**, a secure SSH/SCP bastion system for teams that need to manage infrastructure **without opening a single inbound firewall port**.

The problem I wanted to solve: Traditional bastions are either too simple (no auditing) or too complex/expensive (enterprise PAM tools).

**How it works:**

* Your servers (behind firewalls) establish **Reverse SSH Tunnels** to the Orion-Belt gateway.
* Clients connect via `osh` (SSH) or `ocp` (SCP), and the gateway routes traffic through those tunnels.
* Everything is audited, controlled, and time-bound.

**Key Features:**

* **ReBAC** – Relationship-Based Access Control (fine-grained permissions, no “all-or-nothing”).
* **Session Recording** – Every keystroke is captured for audit and replay.
* **Temporary Access** – Request/approve workflow with automatic expiration.
* **No Inbound Rules** – Works in locked-down VPCs, home labs, or private networks.

It’s currently in **Alpha** (APIs and internals may change) and written in Go. I’m looking for **early adopters and contributors** to break it, give feedback, and help shape the architecture.

GitHub: [https://github.com/zrougamed/orion-belt](https://github.com/zrougamed/orion-belt)

I’d love to hear your thoughts on the approach and how you handle privileged access in your environments!


If this resonates, consider forking the repo, testing it in your setup, and sharing feedback or PRs — your input could directly shape Orion-Belt’s design and feature set!

https://redd.it/1q1dl3q
@r_devops

Securing a small production VPS by actually watching SSH and HTTP logs

I run a small production VPS (Docker, reverse proxy, SSH keys). Traffic is low, but after looking at the logs I saw constant SSH brute force and HTTP probing for .env, credentials, and random paths.

Nothing was compromised, but it made it clear I wasn’t really watching.

I documented how I approached this using log-based detection, temporary bans, and automation. CrowdSec wasn’t an obvious fit at first (especially with Kamal and container logs), but I got it working after some trial and error.

Article:
https://muthuishere.medium.com/securing-a-production-vps-in-practice-e3feaa9545af

Code / automation:
https://github.com/muthuishere/automated-crowdsec-kamal

Would be interested to hear how others handle this on small production servers.

https://redd.it/1q1d8lf
@r_devops

Need help picking a devops/engineering professional development rig…

I am working on my professional development as an Embedded Systems Engineer. My education was in electrical engineering so my focus is mainly on CS and DevOps stuff.

I am wanting a professional development setup. I want to run a local instance of gitlab-ce likely in a docker container, I want to have a gitlab-runner on the desktop. I want gitlab to be constantly running. I am wanting the computer to be able to easily handle IDEs like keil or visual studio. I also want to be able to run PCB design software Altium and do moderate 3D modeling (without interrupting the gitlab work). I want it to be good enough to expand for future work so I want some breathing room as far as processing power/memory etc if that makes sense. And of course money is a factor. I basically have a $1600 budget for this.

My initial thought is this 64 GB asus nuc on Amazon, but my friend says I should look into getting two rigs, one to run docker and gitlab headlessly and then another running the ide/design software. I don’t know how to get two rigs to meet these requirements while keeping the budget intact…

“ASUS NUC 14 Pro Mini Desktop, Intel 16-Core Ultra 7 155H, 64GB DDR5, 2TB SSD, Wi-Fi 6E, Support 4-Display 4K, Thunderbolt 4, HDMI, Bluetooth, Windows 11 Pro, Black, AI PC for Home/Business/Gaming”

https://a.co/d/8KsO3QK

Does that nuc look like it would be a good choice? Would you recommend another setup?

https://redd.it/1q1gxxm
@r_devops

1.7 YOE in SOC | 1.3 Year Career Gap | Pivot to DevOps. Friends say "Fake it," but I want a sanity check.

Hi everyone,
I am looking for a sanity check on my job search strategy because I am hitting a wall.

My Story:
I originally came from a MERN stack development background. When I started my career, the market was rough, so I took the first role I could get: SOC Analyst (Cybersecurity Compliance). I worked there for 1.7 years, but deep down, I knew compliance wasn't for me.
Toward the end of that job, I collaborated with the infra team and found my passion in DevOps. Unfortunately, due to a personal family emergency, I had to drop out of the workforce entirely. I currently have a career gap of 1.3 years.

The Upskill:
During this gap, I haven't been idle. I’ve been aggressively learning and have built several end-to-end projects involving:
Infrastructure: Terraform, Kubernetes (EKS), Docker.
CI/CD: Jenkins, Ansible, ArgoCD.
DevSecOps: Implementing SonarQube and Trivy (leveraging my security background).
Architecture: Serverless and Microservices.

The Dilemma:
I have tailored my resume for ATS, listing my SOC experience honestly and my DevOps work under "Projects." I am getting zero calls.
My friends are suggesting that I merge the two: Claim I did these DevOps projects at my previous company and explain the 1.3-year gap as "Freelance DevOps work" to fill the void.

My Questions:
1. Is the 1.3-year gap the main reason for the silence?
2. Is "embellishing" my past experience the only way to bypass HR filters in this market?
3. Can I honestly pivot to a DevSecOps role given my SOC background, or am I considered a "fresher" again?

Any advice is appreciated.

https://redd.it/1q18400
@r_devops

Every uptime monitor wants me to configure through a UI

After using Uptime Kuma I realized how annoying configuring everything through the UI actually is. I have a backup of the DB but the setup takes too long. I want to configure stuff with IAC so I can spin it up anywhere without caring too much.

Config is ultra simple yaml:

hosts:
API:
target: 'https://myapi.com'
port: 443
expect: 200
interval: 30

Website:
target: 'https://mywebsite.com'
port: 443
expect: 200
interval: 30


So I built a simple monitoring tool. Running it in my homelab, thinking about adding alerting and maintenance windows to the config too. Does something like this already exist? I have a GitHub repo and on push a GitHub Action publishes the changes.

https://redd.it/1q1jag5
@r_devops

ServiceRadar is seeking early contributors!

We are building an Open Source network management, asset tracking, and observability platform in Elixir and are looking for contributors. Our stack is Elixir/Phoenix LiveView built around ERTS technology, powered by Postgres + extensions. We also use golang and rust for various services, and our stack runs mostly on docker or kubernetes. We also have a very robust CICD system built on bazel, github ARC, and more. This is a great opportunity to learn cutting edge devops systems and patterns and help build the future of network management systems.

If you are passionate about network management and building cloud native software we would love to connect.


https://github.com/carverauto/serviceradar

https://redd.it/1q1jji1
@r_devops