Blog
Hands-on articles on IT, software development, .NET, Microsoft and digitalisation for small and medium businesses.
Multi-Stage Dockerfile: Minimal, Secure Image for Node and .NET
Build tools don't belong in production images. Multi-stage builds separate compiler from runtime and shrink images from over a gigabyte to a fraction of that size.
Self-hosting Qdrant: a vector database for RAG via Docker in 15 minutes
A runnable minimal example – start Qdrant via Docker with an API key and a persistent volume, create a collection, upsert vectors, run a similarity query via curl – plus the Gridstore upgrade trap.
Podman 6.0: running a rootless container as a systemd service with Quadlet
How to run a rootless container as a clean, boot-capable systemd service with Podman 6.0 and Quadlet – with a working Caddy example and the common pitfalls.
Node.js security updates of June 2026: patch your container and harden it with the Permission Model
Node.js patched twelve CVEs on 18 June 2026. Here is how to update your container to 22.23.0/24.17.0/26.3.1 and harden the app with minimal effort.
NIS2 Registration: Last Chance by 31 July 2026 – How German Businesses Can Still Comply
Germany's BSI has set a final deadline of 31 July 2026. Companies that haven't registered yet must act now – concrete steps and what is at stake.
Critical nginx flaw CVE-2026-42945: check your version, patch and secure it
Heap buffer overflow in the rewrite module (CVSS 9.2). How to check your nginx version, compare it against the affected releases, patch and verify.
Watchtower is dead: doing Docker container updates right in 2026 with Diun (notify instead of blind auto-pull)
Watchtower is archived. Diun as a maintained successor – a minimal Compose example on the Docker socket that watches all containers and notifies via Telegram or email.
Cyber Insurance 2026: The IT Measures Insurers Now Require from SMBs
Without MFA, tested backups and a patch routine you can barely get a policy. Which requirements insurers ask about — and how to clear the hurdles.
Cloudflare Tunnel: Expose Services Without Open Ports
Use cloudflared to bring a service online securely without opening a single inbound port – step by step via the CLI and as a Docker container.
E-Invoicing Becomes Mandatory: The Issuing Obligation from 2027 – How SMEs Should Switch Now
B2B businesses already have to receive them. From 2027, issuing becomes mandatory too. Deadlines, XRechnung vs. ZUGFeRD and the steps to a clean switchover.
Caddy vs. Traefik: Which Reverse Proxy Fits Your Setup?
Caddy and Traefik compared head to head: configuration, Docker integration, certificates, middlewares and Kubernetes – with a clear verdict on when to pick which.
Caddy: Automatic HTTPS as a Lean Reverse-Proxy Alternative
A minimal Caddy stack with Docker Compose: two services behind one domain, fully automatic TLS – including local testing and common pitfalls.
Windows 10 Is Out of Support – How SMBs Move Safely to Windows 11 Now
Windows 10 no longer receives security updates. What the ESU bridge costs, which PCs can handle Windows 11 and how to migrate without losing data.
Modernizing a legacy .NET application – when the effort is really worth it
Migrate, rebuild or keep running? A decision guide for SMBs with aging .NET software.
Traefik as a Reverse Proxy: Four Services Behind One Domain with Automatic HTTPS
A minimal Traefik v3 stack with Docker Compose: route four services behind one domain, automatic TLS via Let's Encrypt, plus the common pitfalls.
Docker Compose from scratch: a multi-service stack with health checks and its own network
A runnable minimal Compose example with Postgres and Adminer – including a health check, depends_on on service_healthy, a custom network and common pitfalls.
SQL Server 2025 vs. SQL Server 2022 – the key differences
What SQL Server 2025 (17.x) adds over its predecessor 2022 (16.x): a native vector type and AI in T-SQL, a native JSON type, RegEx, optimized locking, plus changes to editions, licensing and discontinued components.
Workflow Automation with n8n: Self-Hosting, Architecture, and First Workflows
A practical look at workflow engines using n8n: how it compares to Make, Zapier, Temporal, and Airflow, plus Docker self-hosting and a first workflow.
Incoming Webhooks in Microsoft Teams Are Being Retired: How to Post to a Channel Today Using Workflows (Power Automate)
Microsoft is retiring Office 365 Connectors and Incoming Webhooks in Teams. Here is the verified status and the recommended Workflows (Power Automate) replacement.
Sending Emails Programmatically with the Microsoft Graph API
Send emails from Microsoft 365 via the OAuth2-based Graph API: app registration, token retrieval, working C# code, and a curl example.
Self-Hosting Hermes by Nous Research: vLLM, Tool Calling, and Self-Hosting in Practice
A practical guide to self-hosting Nous Research's Hermes models with vLLM, including a function-calling example and a lightweight Ollama alternative.
Microsoft 365 Copilot for SMBs: Is It Worth Getting In Before the Discount Ends?
The introductory discount for Microsoft 365 Copilot Business expires on 30 June 2026. When buying pays off – and when you are better off waiting.
Exchange Server 2016 and 2019 are end of life – migrate safely now
No security updates since October 2025. What businesses running their own Exchange server should do – the paths to Exchange Online and Exchange Server SE.
EU AI Act from August 2026 – What SMBs Using ChatGPT, Copilot & Co. Must Do Now
From 2 August 2026 new obligations under the EU AI Act apply. What small businesses really need to take care of – and what is pure scaremongering.
.NET 8 and .NET 9 reach end of support in November 2026 – plan your move to .NET 10 LTS now
On 10 November 2026 support for .NET 8 and .NET 9 ends at the same time. What that means for your software and how to migrate to .NET 10 LTS in good time.
Making your website GDPR-compliant – the key steps for SMBs
Cookie banner, privacy policy, fonts, forms: a practical checklist to put your website on a legally sound footing.
Microsoft 365 or Google Workspace – which fits small businesses?
An honest comparison for SMBs: cost, data protection, integration and migration effort – without the marketing fluff.
NIS2 for SMBs – what small businesses should do now
Germany's NIS2 implementation law is in force. Who is affected, why even small suppliers feel it – and the first concrete steps.
Ransomware protection for small businesses – the key levers
Why SMBs in particular get hit and the few effective measures that drastically lower the risk.
IT strategy for SMBs – from gut feeling to a plan in 5 steps
Only about 12% of SMBs have a mature IT strategy. Here's how to get one pragmatically – without consultant speak.
Why .NET and Microsoft 365 are often the best choice for small businesses
For SMBs, .NET and Microsoft 365 are more than the default – stable, secure, GDPR-capable and maintainable long-term. A practical overview.
Microsoft 365 price increase July 2026 – what small businesses should do now
From 1 July 2026 Microsoft 365 gets more expensive. What changes, why – and one simple step that saves SMBs 12 months.
Backup strategy for SMBs – the 3-2-1 rule done right
Why most backups fail when it counts and how to do it better with the 3-2-1 rule – explained for small businesses.
Self-hosted mail server or Microsoft 365 – what's worth it for SMBs?
Data sovereignty vs. operational burden: an honest comparison for small businesses considering their own mail server.