https://craftripple.com/blogPractical writing on secure development, DevOps, self-hosting and AI integration from CraftRipple, a Brussels-based development studio.en-USCraftRipple StudioSun, 12 Jul 2026 00:19:32 +0200https://craftripple.com/blog/keelscan-three-surface-security-scannerhttps://craftripple.com/blog/keelscan-three-surface-security-scannerSun, 12 Jul 2026 00:19:32 +0200SecurityDeals stall in security review, and the odds are against a team that shipped fast. We built Keelscan to answer "is your app secure?" across the three surfaces a reviewer actually checks: your code, your running app, and your cloud data config. This post walks through the engineering: catching a Supabase RLS leak with only the public anon key, scanning any URL without building an SSRF weapon, and why we made the grade less harsh to keep it honest.https://craftripple.com/blog/hipaa-compliant-clinical-platform-architecturehttps://craftripple.com/blog/hipaa-compliant-clinical-platform-architectureSat, 27 Jun 2026 23:39:37 +0200SecurityMost healthcare founders build the feature first and bolt on compliance later. That order gets you a working demo and a rewrite six months in. Here's how we structure HIPAA-compliant clinical platforms from day one: data layer, auth, audit trail, AI integration, and which decisions close off future options if you get them wrong early.https://craftripple.com/blog/self-hosting-umami-cloudflare-tunnelhttps://craftripple.com/blog/self-hosting-umami-cloudflare-tunnelWed, 24 Jun 2026 12:52:11 +0200DevOpsI replaced third-party analytics with a self-hosted Umami instance on a Proxmox LXC container, provisioned via OpenTofu and exposed through a Cloudflare tunnel. Here's the exact setup, the gotchas, and why the port binding matters.https://craftripple.com/blog/ollama-custom-modelhttps://craftripple.com/blog/ollama-custom-modelTue, 23 Jun 2026 19:37:24 +0200AI & Machine LearningSome work should never leave your machine. Here is how to install Ollama, pull a model that fits your GPU, fix the most common post-update CUDA error, and turn a stock model into a focused tool with a custom Modelfile and system prompthttps://craftripple.com/blog/wazuh-agent-over-wireguardhttps://craftripple.com/blog/wazuh-agent-over-wireguardSun, 07 Jun 2026 10:14:37 +0200SecuritySelf-hosting a SIEM is great for cost and control, but how does a cloud server report to a Wazuh manager that has no public IP? Here's the full, reproducible path: a WireGuard tunnel to the manager's private LAN, a version-pinned Wazuh agent, the firewall gotcha that makes `ping` lie to you, plus what to do next: clearing Amazon Linux 2023 CVEs and hardening the host against the CIS benchmark.https://craftripple.com/blog/building-a-secure-cicd-pipelinehttps://craftripple.com/blog/building-a-secure-cicd-pipelineFri, 05 Jun 2026 17:17:07 +0200DevOpsMost DevSecOps guides assume you have a dedicated security team. This covers how to get 80% of the value using GitHub Actions and free tools — the exact pipeline used on every CraftRipple Studio project.https://craftripple.com/blog/how-i-hardened-my-web-apps-security-headers-using-nuclei-and-automated-scanninghttps://craftripple.com/blog/how-i-hardened-my-web-apps-security-headers-using-nuclei-and-automated-scanningSun, 01 Feb 2026 20:52:00 +0100SecurityAfter running an automated Nuclei scan against my own infrastructure, I discovered 54 security findings. Here's how I fixed the most impactful ones — missing HTTP security headers, version disclosure, and deprecated configurations — across both an Nginx reverse proxy on EC2 and a Next.js landing page on Vercelhttps://craftripple.com/blog/security-best-practices-for-modern-web-appshttps://craftripple.com/blog/security-best-practices-for-modern-web-appsWed, 21 Jan 2026 17:41:50 +0100SecurityThe PortSwigger Top 10 Web Hacking Techniques of 2025 is out. Here's what the winning research means in practice — translated from security researcher into developer guidance you can apply today.https://craftripple.com/blog/building-scalable-web-applications-with-nextjshttps://craftripple.com/blog/building-scalable-web-applications-with-nextjsTue, 20 Jan 2026 17:41:50 +0100DevelopmentMost Next.js tutorials show you how to build something. This covers the decisions that determine whether it stays maintainable — App Router patterns, auth at the right layer, typed APIs, and CI/CD from day one.https://craftripple.com/blog/integrating-ai-into-your-applicationshttps://craftripple.com/blog/integrating-ai-into-your-applicationsTue, 20 Jan 2026 17:41:50 +0100AI & Machine LearningMost tutorials show you how to call an AI API. This covers what it takes to actually ship LLM features in production — from prompt engineering to security, cost control, and measuring what you built.