Ayşe
Should I enable Model::preventLazyLoading only locally or in production too?
Run it fully strict and throwing in local and CI; in production keep it on but wire handleLazyLoadingViolationUsing to log without failing the request.
Just Ask
Questions and answers on software architecture, PHP, Go and careers
Ask me anything about software architecture, careers, PHP, Go and the craft of building software; I answer here, in the open, for everyone. (Page 3/8)
Ask a question
Whatever's on your mind, don't hold back. Questions reach me directly; I answer the good ones and publish them on this page. Your email is never published.
Answered questions
Mert
What do I gain and lose by moving my status class constants to backed enums?
Add a backed enum on the same integer values, use tryFrom() at the boundaries, and keep the old constants as deprecated aliases while you move call sites.
Emir
How do I design a self-healing deploy that auto-rolls back when the error rate spikes?
Hold the new version at a canary weight and check 5xx and latency against a threshold; on breach, roll back to the last stable release and alert the team.
Gazi
Should I put my API server behind a Cloudflare Tunnel and close port 443 to the internet?
The tunnel is sound but makes Cloudflare your only way in; stay on the current Caddy setup, lock the origin to Cloudflare's IP ranges and add origin pulls.
Bora
Canary or Blue-Green deployment for a fintech API?
Make Canary the default for routine releases and save Blue-Green for big cutovers needing an instant flip, since both demand expand/contract migrations.
Çağrı
Why is keeping the key in .env risky when encrypting sensitive financial data — what do KMS/Vault give you?
Take the key out of .env, keep it in KMS or Vault and use envelope encryption; for national IDs and card data, prefer tokenization wherever you can.
Tarık
How do I position feature flags when moving from Gitflow to Trunk-Based?
Drop the long-lived branches, merge small changes to main continuously, keep unfinished work behind a flag that's off in prod, and delete flags once done.
Cüneyt
How do I isolate self-hosted CI/CD runners and build an ephemeral, clean-after-each-run environment?
Move the runner to a register-run-once-destroy model and run jobs unprivileged; never hand over the Docker socket, and never run fork PRs on it.
Devrim
How do I distribute a Go CLI to multiple platforms with GoReleaser and Homebrew?
Let one tag-triggered workflow cross-compile and publish the GitHub Release while the homebrew_casks: block updates the tap; the tap needs its own PAT.
Yusuf
How do I rewind to seconds before a disaster with WAL archiving and PITR?
Take a periodic base backup, archive WAL to S3 continuously, replay to a recovery_target_time seconds before the bad statement, and rehearse the restore.