An exposed .env, an unguarded admin URL, rate limiting that broke per-worker, missing security headers — the holes that show up on every real Django deployment, and the exact Django + Nginx fixes that closed …
What happens after `git push origin main` on this site: an SSH trip to a Hetzner VM that pulls the repo, installs prod dependencies, runs migrations, collects static files, and restarts Gunicorn. The full GitHub …
This site hides a post unless is_published is True AND published_at is set and in the past. Why? Because a NULL published_at means "never scheduled" — and treating it as "publish now" would surprise you …
What happened when my newly-launched Django portfolio site got hit by automated vulnerability scanners, and the 6 changes I made in response.
How to build live notifications, real-time feeds, and instant updates using Django + HTMX + WebSockets — without a single line of JavaScript framework code.
Database schema evolution, async task pipelines, testing strategies, and business logic patterns from building a production ERP across 11 phases.
Multi-portal authentication, atomic transaction patterns, async PDF generation, and fraud detection — lessons from building a digital wallet with Django.