A blog series
DevOps, From Zero
A lesson-by-lesson series that takes you from "just git push to Vercel" to running your own production setup on raw AWS — servers, networking, databases, and the mindset behind them.
- Started
- 2026
- Progress
- 20 / 20 lessons
Contents
Lessons build on each other. If you are new, start at Lesson 00.
- Lesson 00The Big Picture: Vercel vs AWS MindsetBefore touching a single server, understand what problem AWS is actually solving for you. No cost, no server — only clear thinking, plus a safe account setup.10 min
- Lesson 01Linux Fundamentals: Shell, SSH, Users, PermissionsEvery EC2 server is a Linux box with no screen. Filesystem, permissions, users, processes — and the fix for “my app dies when I close the terminal”.18 min
- Lesson 02Networking Basics: IP, Ports, TCP/UDP and FirewallsHow a browser request actually finds and reaches your server. The layer Vercel hides completely, and the one you must understand before EC2 makes any sense.16 min
- Lesson 03DNS Deep Dive: From Domain Name to ServerHow a domain name turns into a server address — records, TTL, Route 53, and the one wildcard record that serves unlimited customer subdomains for a multi-tenant SaaS.14 min
- Lesson 04HTTPS, SSL and TLS: Certificates, Let’s Encrypt, ACMWhat the padlock in your address bar actually proves, how a free certificate gets issued, and the exact commands to put HTTPS on your own EC2 server.15 min
- Lesson 05AWS Account and IAM: Identity and AccessWho is allowed to do what in your AWS account. Users, groups, policies, roles and least privilege — the lesson that protects you from the expensive mistakes, and it costs nothing to set up.16 min
- Lesson 06VPC: Subnets, Route Tables, Security GroupsYour own private network inside AWS. Public and private subnets, how traffic gets in and out, and where your database hides.20 min
- Lesson 07EC2: Launch Your First Server and Deploy Next.js ManuallySSH in, install Node, clone, .env, build, and keep it alive with PM2 — the manual deploy every later lesson automates.20 min
- Lesson 08RDS: Managed PostgreSQLA real database that AWS backs up, patches and fails over for you — and how to connect it privately from your app server.20 min
- Lesson 09Docker: Containerize Your Next.js and Node AppImages, layers, Dockerfiles and Compose — build once, run the same thing on your laptop and on EC2.20 min
- Lesson 10Nginx: Reverse ProxyThe receptionist in front of your app: TLS termination, static files, compression, and why port 3000 never goes public.20 min
- Lesson 11S3 and CloudFront: Static Assets and CDNUploads, images and built assets in S3, served from edge locations near your users.20 min
- Lesson 12ALB and Auto Scaling: Scaling to 1000+ Concurrent UsersOne server becomes many. Health checks, target groups, and servers that appear when traffic spikes and vanish when it drops.25 min
- Lesson 13Route 53: Production DomainHosted zones, alias records to your load balancer and CDN, and health-checked routing for a real domain.20 min
- Lesson 14CI/CD with GitHub ActionsLint, test, build and deploy on every push — automatically, with no one SSH-ing into a server.22 min
- Lesson 15Terraform: Infrastructure as CodeDescribe your whole cloud in files, review it in pull requests, and rebuild it in minutes.25 min
- Lesson 16Redis: Caching and SessionsFast in-memory storage for sessions, rate limits and hot data — and when not to reach for it.22 min
- Lesson 17Monitoring and Logging with CloudWatchKnowing what your system is doing before your users tell you: metrics, logs, alarms and dashboards.25 min
- Lesson 18Security Hardening and BackupsLocking down what you built: patching, secrets, least privilege, automated backups and tested restores.27 min
- Lesson 19Cost Review and Final Production ArchitectureWhere the money goes, how to cut it, and the complete architecture you have built — box by box.27 min
Glossary
Every short form used in the series — EC2, ALB, DNS, TTL and the rest. Inside any lesson, hover or tap a dotted term to see its meaning without leaving the page. Browse all terms →
Background reading
Standalone pieces that sit beside the lessons. Read them whenever they come up.
- GitHub Access Control — The Same Idea as IAMCan you make package.json read-only for some developers? Yes — and understanding how GitHub does it (CODEOWNERS, rulesets, branch protection) is the fastest way to understand AWS IAM.8 min
- The Pieces You Keep Hearing AboutNginx, PM2, load balancers, CDN, RDS, VPC, Redis, Docker, CI/CD, Terraform, CloudWatch — what each one is, the problem it solves, where it sits in the flow, and the minimal “how”, before its own lesson.30 min
- Hosting Platforms ExplainedVercel, Railway, Render, Dokploy, Coolify, AWS, Kubernetes — where each one fits, and why the real question is stateless vs persistent.9 min