A blog series

DevOps, From Zero

A lesson-by-lesson series that takes you from "just git push to Vercel" to running your own production setup on raw AWS — servers, networking, databases, and the mindset behind them.

Started 
2026
Progress 
20 / 20 lessons

Contents

Lessons build on each other. If you are new, start at Lesson 00.

  1. Lesson 00The Big Picture: Vercel vs AWS MindsetBefore touching a single server, understand what problem AWS is actually solving for you. No cost, no server — only clear thinking, plus a safe account setup.10 min
  2. Lesson 01Linux Fundamentals: Shell, SSH, Users, PermissionsEvery EC2 server is a Linux box with no screen. Filesystem, permissions, users, processes — and the fix for “my app dies when I close the terminal”.18 min
  3. Lesson 02Networking Basics: IP, Ports, TCP/UDP and FirewallsHow a browser request actually finds and reaches your server. The layer Vercel hides completely, and the one you must understand before EC2 makes any sense.16 min
  4. Lesson 03DNS Deep Dive: From Domain Name to ServerHow a domain name turns into a server address — records, TTL, Route 53, and the one wildcard record that serves unlimited customer subdomains for a multi-tenant SaaS.14 min
  5. Lesson 04HTTPS, SSL and TLS: Certificates, Let’s Encrypt, ACMWhat the padlock in your address bar actually proves, how a free certificate gets issued, and the exact commands to put HTTPS on your own EC2 server.15 min
  6. Lesson 05AWS Account and IAM: Identity and AccessWho is allowed to do what in your AWS account. Users, groups, policies, roles and least privilege — the lesson that protects you from the expensive mistakes, and it costs nothing to set up.16 min
  7. Lesson 06VPC: Subnets, Route Tables, Security GroupsYour own private network inside AWS. Public and private subnets, how traffic gets in and out, and where your database hides.20 min
  8. Lesson 07EC2: Launch Your First Server and Deploy Next.js ManuallySSH in, install Node, clone, .env, build, and keep it alive with PM2 — the manual deploy every later lesson automates.20 min
  9. Lesson 08RDS: Managed PostgreSQLA real database that AWS backs up, patches and fails over for you — and how to connect it privately from your app server.20 min
  10. Lesson 09Docker: Containerize Your Next.js and Node AppImages, layers, Dockerfiles and Compose — build once, run the same thing on your laptop and on EC2.20 min
  11. Lesson 10Nginx: Reverse ProxyThe receptionist in front of your app: TLS termination, static files, compression, and why port 3000 never goes public.20 min
  12. Lesson 11S3 and CloudFront: Static Assets and CDNUploads, images and built assets in S3, served from edge locations near your users.20 min
  13. Lesson 12ALB and Auto Scaling: Scaling to 1000+ Concurrent UsersOne server becomes many. Health checks, target groups, and servers that appear when traffic spikes and vanish when it drops.25 min
  14. Lesson 13Route 53: Production DomainHosted zones, alias records to your load balancer and CDN, and health-checked routing for a real domain.20 min
  15. Lesson 14CI/CD with GitHub ActionsLint, test, build and deploy on every push — automatically, with no one SSH-ing into a server.22 min
  16. Lesson 15Terraform: Infrastructure as CodeDescribe your whole cloud in files, review it in pull requests, and rebuild it in minutes.25 min
  17. Lesson 16Redis: Caching and SessionsFast in-memory storage for sessions, rate limits and hot data — and when not to reach for it.22 min
  18. Lesson 17Monitoring and Logging with CloudWatchKnowing what your system is doing before your users tell you: metrics, logs, alarms and dashboards.25 min
  19. Lesson 18Security Hardening and BackupsLocking down what you built: patching, secrets, least privilege, automated backups and tested restores.27 min
  20. Lesson 19Cost Review and Final Production ArchitectureWhere the money goes, how to cut it, and the complete architecture you have built — box by box.27 min

Glossary

Every short form used in the series — EC2, ALB, DNS, TTL and the rest. Inside any lesson, hover or tap a dotted term to see its meaning without leaving the page. Browse all terms →

Background reading

Standalone pieces that sit beside the lessons. Read them whenever they come up.