All Posts
Hackerstack
Indie developer blog. Dense info, code-first, no fluff.
webhooks
Verify Webhooks: Signatures, Timestamps, Tests
A webhook endpoint that trusts any POST is an open door. A 20-line HMAC verifier with a replay window, four tests that prove it, and the three mistakes that quietly break it.
cron
Cron Until It Hurts, Then a Table
You don't need a message broker for the first year of background jobs. You need cron, then a jobs table, and a clear sign for when to move from one to the other.
sqlite
SQLite in Production, Honestly
I run a paying product on one SQLite file. Here is what that is good for, the one limit you will hit, and a 20-second experiment that shows exactly how the limit behaves.