#nodejs · Faiz Ahmed FarooquiPosts tagged nodejs.https://faizahmed.in/Loading Secrets at Runtime Without Leaking Them: config(), the Keystore, and runhttps://faizahmed.in/secret-keystore-runtime-config-loader-nodejs/https://faizahmed.in/secret-keystore-runtime-config-loader-nodejs/Fri, 12 Jun 2026 13:17:21 GMTawsnodejssecuritydevopsbackendEncrypt Your .env with One Command: The secret-keystore CLIhttps://faizahmed.in/secret-keystore-cli-encrypt-env-aws-kms/https://faizahmed.in/secret-keystore-cli-encrypt-env-aws-kms/Fri, 12 Jun 2026 12:59:34 GMTawssecuritynodejsbackenddevopsYour .env Is a Loaded Gun: A Saner Threat Model for Node.js Secretshttps://faizahmed.in/nodejs-secrets-threat-model-aws-kms/https://faizahmed.in/nodejs-secrets-threat-model-aws-kms/Fri, 12 Jun 2026 11:31:09 GMTsecurityawsnodejsbackenddevopsEncrypted .env for Node.js with AWS KMS: The Complete Guidehttps://faizahmed.in/encrypted-env-aws-kms-nodejs-complete-guide/https://faizahmed.in/encrypted-env-aws-kms-nodejs-complete-guide/Fri, 12 Jun 2026 11:24:08 GMTsecurityawsnodejsdevopsbackendRetries Are Not a Fix. They Are a Liability.https://faizahmed.in/why-retries-are-not-a-fix/https://faizahmed.in/why-retries-are-not-a-fix/Sat, 18 Apr 2026 05:00:00 GMTdistributed-systemssystem-designbackground-jobsnodejsnestjsqueueYour Background Jobs Are Not Failing. They Are Lying.https://faizahmed.in/why-your-background-jobs-are-lying/https://faizahmed.in/why-your-background-jobs-are-lying/Thu, 16 Apr 2026 11:17:39 GMTbackground-jobsdistributed-systemssystem-designbackend-engineeringqueue-systemsnestjsnodejsidempotencyreliability-engineeringasync-processingStop Putting Secrets in process.env: Encrypt Env Vars with AWS KMShttps://faizahmed.in/secret-keystore/https://faizahmed.in/secret-keystore/Sat, 21 Feb 2026 19:30:57 GMTsecurityawsattestationnodejsnextjsnestjsdevopscloudbackendScaling the Boring Stuff: Sending 10 Million Notifications with a Simple Node.js Job Workerhttps://faizahmed.in/scaling-the-boring-stuff-sending-10-million-notifications-with-a-simple-nodejs-job-worker/https://faizahmed.in/scaling-the-boring-stuff-sending-10-million-notifications-with-a-simple-nodejs-job-worker/Wed, 04 Feb 2026 13:30:28 GMTnodejssystem-designscalabilitybackend-engineeringdistributed-systemsYour Node.js AWS SDK v3 App Will Crash in Production Without This maxSockets Fixhttps://faizahmed.in/your-nodejs-aws-sdk-v3-app-will-crash-in-production-without-this-maxsockets-fix/https://faizahmed.in/your-nodejs-aws-sdk-v3-app-will-crash-in-production-without-this-maxsockets-fix/Fri, 07 Nov 2025 07:03:11 GMTmaxsocketsawsnodejsaws-sdkproductionSecrets Sprawl in Node.js Projects: Detection, Prevention & Secure Deployment (2025)https://faizahmed.in/secrets-sprawl-in-nodejs-projects-detection-prevention-and-secure-deployment-2025/https://faizahmed.in/secrets-sprawl-in-nodejs-projects-detection-prevention-and-secure-deployment-2025/Tue, 05 Aug 2025 08:07:20 GMTnodejssecrets-managementgitguardiandevsecopsci-cdbackend-engineeringcloud-securitysoftware-engineeringsecuritybestpracticesZero-Downtime Deployments in Node.js: Real Strategies, Real Exampleshttps://faizahmed.in/zero-downtime-deployments-in-nodejs/https://faizahmed.in/zero-downtime-deployments-in-nodejs/Tue, 29 Jul 2025 07:53:48 GMTnodejszero-downtimedevopssreci-cdcanary-releasebluegreen-deploymentmicroservicesdeployment-strategiessoftware-engineeringMaster Docker in Real Projects: Compose + CI/CD + Best Practiceshttps://faizahmed.in/master-docker-compose-cicd/https://faizahmed.in/master-docker-compose-cicd/Wed, 23 Jul 2025 08:52:37 GMTpostgresqlsoftware-developmentdockernodejswebdevdevopscontainerscicdphpmyadmindocker-composeci-cdgithub-actions-1backend-engineeringAPI Observability: Logs, Traces, Metrics with OpenTelemetryhttps://faizahmed.in/api-observability-logs-traces-metrics-with-opentelemetry/https://faizahmed.in/api-observability-logs-traces-metrics-with-opentelemetry/Tue, 15 Jul 2025 11:30:42 GMTnodejsopentelemetryobservabilityapisbackend-developmentmicroservicesdevopsjaegerprometheusgrafanasoftware-engineeringdistributed-systemsmonitoringloggingtracingHow to Architect Multi-Tenant SaaS Backends in 2025 (PostgreSQL + Node.js)https://faizahmed.in/architect-multi-tenant-saas-backends-in-2025-postgresql-nodejs/https://faizahmed.in/architect-multi-tenant-saas-backends-in-2025-postgresql-nodejs/Fri, 11 Jul 2025 11:30:13 GMTnodejspostgresqlsaasmultitenancysoftware-architecturetech-leadershipdevtoolsjavascriptexpressPackaging Node.js Libraries the Right Way: ESM, CommonJS, and Bundlers in 2025https://faizahmed.in/packaging-nodejs-libraries-in-2025/https://faizahmed.in/packaging-nodejs-libraries-in-2025/Wed, 09 Jul 2025 11:30:22 GMTnodejsnpmjavascriptesmcommonjstypescriptrolluptsupopensourcedevtoolsbackend-developmentwebdevnpm-packagesJWT vs PASETO vs Session-Based Authhttps://faizahmed.in/jwt-vs-paseto-vs-session-based-auth/https://faizahmed.in/jwt-vs-paseto-vs-session-based-auth/Mon, 23 Jun 2025 11:30:29 GMTauth-architecturewebsecuritynodejsauthenticationpasetojwtbackenddevtipsoauthaccess-controlHow to Prevent Replay Attacks with JWTs: JWS vs JWE and Fingerprint Validation in Node.jshttps://faizahmed.in/how-to-prevent-replay-attacks-with-jwts-jws-vs-jwe-and-fingerprint-validation-in-nodejs/https://faizahmed.in/how-to-prevent-replay-attacks-with-jwts-jws-vs-jwe-and-fingerprint-validation-in-nodejs/Fri, 06 Jun 2025 13:27:47 GMTnodejsjwtsecurityauthenticationbackendbackendengineeringwebsecurityreplay-attackdevtipsexpressMemory Leaks and Garbage Collection in Node.js: What Developers Get Wrong (And How to Fix It)https://faizahmed.in/memory-leaks-and-garbage-collection-in-nodejs/https://faizahmed.in/memory-leaks-and-garbage-collection-in-nodejs/Wed, 21 May 2025 13:27:32 GMTnodejsjavascriptmemory-managementgarbagecollectionweb-developmentbackend-engineeringperformance-optimizationdebuggingv8-enginedevtipStop Using JSON.parse on Huge Payloads: Streaming JSON in Node.jshttps://faizahmed.in/streaming-huge-json-in-nodejs/https://faizahmed.in/streaming-huge-json-in-nodejs/Wed, 07 May 2025 10:30:41 GMTnodejsjavascriptweb-performancebackend-developmentstreamingdatamemory-managementjsonscalablearchitecturesoftware-engineeringdevtipsOffset vs Cursor vs Keyset Pagination: Best Practices for Scalable APIshttps://faizahmed.in/offset-vs-cursor-vs-keyset-pagination/https://faizahmed.in/offset-vs-cursor-vs-keyset-pagination/Thu, 01 May 2025 07:47:13 GMTbackend-engineeringapi-designpaginationnodejswebdevscalabilitysoftware-architectureTame the Stream: Handling Backpressure in Node.js Like a Prohttps://faizahmed.in/handling-backpressure-in-nodejs/https://faizahmed.in/handling-backpressure-in-nodejs/Mon, 28 Apr 2025 06:59:57 GMTbackpressure-in-nodejsstreams-backpressurebackpressurenodejsstreams-in-nodejsstreamsKilling Your App with .map()? Here’s the Modern Fixhttps://faizahmed.in/killing-your-app-with-map-heres-the-modern-fix/https://faizahmed.in/killing-your-app-with-map-heres-the-modern-fix/Wed, 23 Apr 2025 11:12:37 GMTarraymapgc-pressurejavascriptnodejsarraygarbagecollectionUnderstanding Express Typescripthttps://faizahmed.in/express-typescript/https://faizahmed.in/express-typescript/Sun, 12 Jan 2020 18:30:00 GMTnodejsexpresstypescriptmongodbboilerplateNodeJS without NPMhttps://faizahmed.in/nodejs-without-npm/https://faizahmed.in/nodejs-without-npm/Sun, 19 Aug 2018 18:30:00 GMTnodejsnpmweb-developmentapisrest-apiWhat's NodeJS?https://faizahmed.in/whats-nodejs/https://faizahmed.in/whats-nodejs/Tue, 19 Jun 2018 18:30:00 GMTnodejsintroduction