Guides
Practical guides to website security, technical SEO and uptime, written for people who ship.
- How to find leaked API keys in your website's JavaScript (and fix them)
A practical guide to finding secret API keys exposed in client-side JavaScript, telling public keys from secret ones, and moving API calls to the server safely.
- Security headers explained: a practical setup for Next.js, Nginx and Caddy
What each HTTP security header does, sensible values to start with, and copy-paste configuration for Next.js, Nginx and Caddy, including a nonce-based Content-Security-Policy.
- Why is my page not indexed? A noindex and robots.txt checklist
A step-by-step checklist for pages missing from Google, covering noindex tags, X-Robots-Tag headers, robots.txt blocks, canonicals, sitemaps and server errors.