Learn why .env is not secrets management, using the Zeabur incident to explain secret access, auditing, rotation, and secure delivery.
Tools and architecture from four years of web and React Native work: monorepo, env vars, database, queues, frontend libraries and AI coding rules.
Client Components can't import Server Components. Sync client state to URL search params so the RSC page re-renders with it, using useRouter and nuqs.
JWT bearer tokens vs session cookies: access/refresh token flows, server sessions in Redis, revocation, XSS and CSRF risks, and how to choose.
Why react-hydration-error happens in Next.js: how hydration works, SSR vs CSR, and three practical ways to prevent mismatches.
React Server Components render on the server and stream to the client, shrinking bundles. How RSC works in Next.js and how it differs from SSR.
Why AI chat apps favor SSE over WebSocket, compared on browser support and deployment, plus a streaming chat built with Hono, Zustand and the AI SDK.
Why browsers block cross-origin requests and how to fix CORS errors with server headers or a dev proxy, with Hono, Vite and Next.js examples.
Abnormal requests in my backend logs revealed an attack on my site. Here is how I built Cloudflare WAF rules to block the malicious traffic.
I spent most of 2024 rebuilding the personal site I started in 2021 to learn Next.js and TypeScript. Here is the stack I chose and why.