{"applications":[{"title":"Android","description":"Android is an open source operating system based off of Linux that runs within the ARM architecture;\nthe primary use case is within the mobile/tablet eco-system but it has been expanding into server, desktop and embedables.\nAndroid utilizes a modified Linux kernel optimized for low power devices and real time performance.\nFurthermore, the system provides a robust framework for application development through the Android SDK and Java/Kotlin APIs.\nAndroid's modular architecture allows hardware vendors to customize drivers, UI layers, and services for specific devices.\nWith the introduction of Project Treble and mainline updates, the OS now supports more consistent long-term maintenance and faster security patches.\nBeyond consumer devices, Android has also evolved into specialized distributions such as Android TV, Android Auto, and Wear OS, extending its ecosystem across multiple platforms.\n","template":"splash","tableOfContents":false,"editUrl":false,"lastUpdated":false,"prev":false,"next":false,"sidebar":{"label":"Android","order":105},"unsplash":"1607252650355-f7fd0460ccdb","img":"https://images.unsplash.com/photo-1607252650355-f7fd0460ccdb?fit=crop&w=1400&h=700&q=75","tags":["os","android","mobile"],"sem":1,"ogTitle":"Android Guide — ADB Cheatsheet, Data Storage & React Native","ogDescription":"A practical Android reference — the ADB (Android Debug Bridge) command cheatsheet for device control and debugging, on-device data storage, and Android-specific React Native notes.","jsonld":{"type":"Article","keywords":["android","adb","android debug bridge","android development","android data storage","react native android"],"faq":[{"question":"What is ADB (Android Debug Bridge)?","answer":"ADB is a command-line tool that lets a computer control an Android device over USB or Wi-Fi. It is used to install and uninstall apps, push and pull files, read device logs with logcat, open a device shell, and debug applications during development."},{"question":"How do I connect a device with ADB?","answer":"Enable Developer Options and USB debugging on the device, connect it over USB, and run adb devices to confirm it is listed. Some commands need root access, and certain Android versions may require slightly different command syntax."},{"question":"What languages are used for Android development?","answer":"Native Android apps are written in Kotlin (now preferred) or Java against the Android SDK. Cross-platform options include React Native and Flutter. KBVE's Android apps use React Native with Expo, with native modules added when a feature needs platform-specific code."},{"question":"Is Android open source?","answer":"Yes. Android is built on the open-source Android Open Source Project (AOSP) on top of a modified Linux kernel. Vendors customize drivers and UI layers on top, while Project Treble and mainline modules allow more consistent updates and faster security patches."},{"question":"What is Android used for beyond phones?","answer":"Android extends well past phones and tablets into specialized distributions — Android TV for televisions, Android Auto for vehicles, and Wear OS for smartwatches — plus growing use in embedded, desktop, and server-adjacent devices thanks to its modular architecture."}]},"bento":{"badge":"application · os · mobile","title":"Your device, your rules,","accent":"Android.","lede":"An open-source operating system built on a modified Linux kernel, powering phones, tablets, TVs, cars, and wearables across the ARM ecosystem. This guide is a practical field manual for the KBVE stack: the ADB command cheatsheet, on-device data storage patterns, and Android-specific React Native notes.","ctas":[{"label":"ADB cheatsheet","href":"#cheatsheet","primary":true},{"label":"Data storage","href":"#android-data-storage"},{"label":"React Native","href":"#react-native"}],"aside":{"icon":"sensor","title":"One kernel, every form factor","body":"From smartphones and tablets to Android TV, Android Auto, and Wear OS — a modular architecture lets vendors customize drivers and UI layers while Project Treble keeps updates consistent.","points":["<strong>ADB</strong> — control and debug any device over USB or Wi-Fi.","<strong>Storage</strong> — SharedPreferences, SQLite, and Room.","<strong>React Native</strong> — Expo apps with native modules when needed."]},"stats":[{"label":"Kernel","value":"Linux","icon":"gears"},{"label":"Tooling","value":"ADB","icon":"bolt"},{"label":"Languages","value":"Kotlin/Java","icon":"code"},{"label":"Base project","value":"AOSP","icon":"box"}],"features":[{"title":"ADB cheatsheet","icon":"bolt","href":"#cheatsheet","body":"Device, shell, and key-event commands for controlling and debugging Android over the Android Debug Bridge."},{"title":"Data storage","icon":"database","href":"#android-data-storage","body":"SharedPreferences, internal and external storage, SQLite, Room, and Content Providers — with Java examples."},{"title":"React Native","icon":"code","href":"#react-native","body":"Android-specific notes for KBVE's React Native and Expo apps, kept alongside the wider React Native section."},{"title":"Rooted with care","icon":"shield","body":"Many shell and dumpsys commands need root and can brick a device — log every command and keep a backup."}],"related":[{"title":"iOS","href":"/application/ios/","copy":"The other half of the mobile story — Apple's platform and tooling.","icon":"box"},{"title":"React Native","href":"/application/rn/","copy":"The cross-platform framework KBVE's Android apps are built on.","icon":"code"},{"title":"Flutter","href":"/application/flutter/","copy":"An alternative cross-platform toolkit for mobile UI.","icon":"package"}],"theme":{"hero_bg":"https://images.unsplash.com/photo-1607252650355-f7fd0460ccdb?q=80&w=2400&auto=format&fit=crop","accent":"#34d399","accent2":"#22d3ee","btn_fg":"#06251b"},"features_eyebrow":"On this page","features_heading":"What this guide covers","related_eyebrow":"Keep exploring","related_heading":"Related applications"},"slug":"/application/android"},{"title":"Ansible","description":"DevOps software that handles the infrastructure of the backend through automation.\nAnsible's main function(s) operate through a \"playbook\" system that exectues a collection of commands for the system admin, which becomes a pillar within the IaaC environment.\n","template":"splash","tableOfContents":false,"editUrl":false,"lastUpdated":false,"prev":false,"next":false,"sidebar":{"label":"Ansible","order":115},"unsplash":"1549605659-32d82da3a059","img":"https://images.unsplash.com/photo-1549605659-32d82da3a059?fit=crop&w=1400&h=700&q=75","tags":["iac","devops","ansible"],"sem":1,"ogTitle":"Ansible Guide — Agentless Automation, Playbooks & Modules","ogDescription":"Learn Ansible, the agentless IT automation tool — how it uses SSH and Python modules, writing YAML playbooks, the inventory, common modules, AWX, and a command cheatsheet.","jsonld":{"type":"Article","keywords":["ansible","configuration management","infrastructure as code","ansible playbook","ansible modules","awx"],"faq":[{"question":"What is Ansible?","answer":"Ansible is an open-source IT automation tool for configuration management, application deployment, and orchestration. It is agentless — it connects to hosts over SSH and pushes small programs called modules to do work, then removes them — so managed machines need no special software beyond Python and SSH."},{"question":"What is an Ansible playbook?","answer":"A playbook is a YAML file that describes a set of plays, each mapping a group of hosts to an ordered list of tasks. Playbooks are declarative and idempotent — running one repeatedly converges hosts to the same desired state without repeating changes that are already applied."},{"question":"Why is Ansible agentless?","answer":"Ansible does not install a daemon on managed nodes. It uses existing SSH access and Python to run modules on demand, which lowers setup overhead, reduces attack surface, and means any reachable host can be managed without provisioning an agent first."},{"question":"What is an Ansible module?","answer":"A module is a self-contained unit of work — like apt, copy, service, or template — that Ansible ships to a host to perform one task idempotently. Tasks in a playbook call modules with parameters, and Ansible reports whether each run changed the system."},{"question":"What is AWX?","answer":"AWX is the open-source upstream of Ansible Tower (Red Hat Ansible Automation Platform). It adds a web UI, REST API, role-based access control, job scheduling, and centralized credential management on top of core Ansible for team-scale automation."}]},"bento":{"badge":"application · iac · devops","title":"Automation without agents,","accent":"Ansible.","lede":"Agentless IT automation over SSH and Python — Ansible ships small programs called modules to your hosts, does the work, and cleans up after itself. This guide walks through installing a control node, writing YAML playbooks, the module ecosystem across clouds and systems, AWX for team-scale automation, and a command cheatsheet.","ctas":[{"label":"Install","href":"#install","primary":true},{"label":"Playbooks","href":"#playbook"},{"label":"Modules","href":"#modules"},{"label":"AWX","href":"#awx"}],"aside":{"icon":"gears","title":"Infrastructure as code","body":"From provisioning servers to configuring networks and deploying applications, Ansible turns manual, error-prone processes into consistent, repeatable automation — no daemons on managed nodes, just SSH and Python.","points":["<strong>Playbooks</strong> — declarative, idempotent YAML plays.","<strong>Modules</strong> — cloud, network, system, and database tasks.","<strong>AWX</strong> — web UI, REST API, and scheduling on top."]},"stats":[{"label":"Transport","value":"SSH","icon":"lock"},{"label":"Playbook format","value":"YAML","icon":"code"},{"label":"Runtime","value":"Python","icon":"gears"},{"label":"Web UI","value":"AWX","icon":"server"}],"features":[{"title":"Install","icon":"package","href":"#install","body":"Set up a control node and managed nodes, install Ansible per platform, and verify with an ad-hoc ping."},{"title":"Playbook","icon":"book","href":"#playbook","body":"The YAML automation blueprint — plays, hosts, tasks, variables, and conditions, with real examples."},{"title":"Modules","icon":"box","href":"#modules","body":"The building blocks for AWS, Azure, GCP, OpenStack, networks, systems, databases, and Windows."},{"title":"AWX","icon":"server","href":"#awx","body":"The open-source upstream of Ansible Tower — web UI, REST API, and task engine for teams."}],"related":[{"title":"Terraform","href":"/application/terraform/","copy":"Declarative provisioning that pairs with Ansible configuration.","icon":"deploy"},{"title":"Kubernetes","href":"/application/kubernetes/","copy":"Cluster add-ons and GitOps bootstrap driven by playbooks.","icon":"gears"},{"title":"Python","href":"/application/python/","copy":"The language Ansible and its modules are built on.","icon":"code"}],"theme":{"hero_bg":"https://images.unsplash.com/photo-1549605659-32d82da3a059?q=80&w=2400&auto=format&fit=crop","accent":"#34d399","accent2":"#22d3ee","btn_fg":"#06251b"},"features_eyebrow":"On this page","features_heading":"What this guide covers","related_eyebrow":"Keep exploring","related_heading":"Related applications"},"slug":"/application/ansible"},{"title":"Appwrite","description":"Appwrite is an open-source backend server that provides developers with core APIs to build applications. It is self-hosted and can run on any operating system. Appwrite aims to simplify backend development for developers.","template":"splash","tableOfContents":false,"editUrl":false,"lastUpdated":false,"prev":false,"next":false,"sidebar":{"label":"Appwrite","order":4},"unsplash":"1549605659-32d82da3a059","img":"https://images.unsplash.com/photo-1549605659-32d82da3a059?fit=crop&w=1400&h=700&q=75","tags":["backend","baas","serverless"],"sem":1,"ogTitle":"Appwrite Guide — Open-Source Backend, Cloud Functions & SDKs","ogDescription":"Learn Appwrite, the open-source, self-hosted backend server (BaaS) — core APIs for auth, databases, and storage, writing serverless Cloud Functions, and using the JavaScript and Python SDKs.","jsonld":{"type":"Article","keywords":["appwrite","backend as a service","baas","cloud functions","self-hosted backend","appwrite sdk"],"faq":[{"question":"What is Appwrite?","answer":"Appwrite is an open-source, self-hosted backend server (a Backend-as-a-Service) that gives developers a set of core APIs — authentication, databases, storage, messaging, and serverless functions — plus a management console. It runs on any OS via Docker and removes the need to build common backend plumbing from scratch."},{"question":"What is an Appwrite Cloud Function?","answer":"A Cloud Function is a piece of code that runs in response to an event (Function-as-a-Service). In Appwrite, functions run inside Docker containers, support runtimes like Node.js, Python, and Deno, and can be triggered by events such as user registration or document creation, or executed manually."},{"question":"Which SDKs does Appwrite provide?","answer":"Appwrite ships official SDKs for many platforms including JavaScript/TypeScript, Python, Flutter/Dart, Android, Apple, and more. Each SDK wraps the REST API so you configure a Client with an endpoint, project ID, and key, then call typed service methods instead of raw HTTP."},{"question":"Is Appwrite self-hosted or cloud?","answer":"Both. Appwrite is open source and can be self-hosted on your own infrastructure with Docker, and there is also Appwrite Cloud, a managed offering. Self-hosting gives you full data control; the cloud removes operational overhead."},{"question":"How do I connect the Appwrite Python SDK?","answer":"Install it with pip install appwrite, then create a Client and chain set_endpoint (your API endpoint), set_project (project ID), and set_key (a secret API key). From there you instantiate services like Users or Databases with that client and call their methods."}]},"bento":{"badge":"application · backend · baas","title":"The ready-made backend,","accent":"Appwrite.","lede":"An open-source, self-hosted backend server that hands you the core APIs every app needs — auth, databases, storage, messaging, and serverless functions — behind one clean console. This guide walks through writing and deploying Cloud Functions and wiring up the Python SDK.","ctas":[{"label":"Cloud Functions","href":"#javascript","primary":true},{"label":"Python SDK","href":"#python"},{"label":"Overview","href":"#overview"}],"aside":{"icon":"server","title":"Skip the boilerplate","body":"Appwrite runs on any OS via Docker and replaces the common, repetitive backend plumbing — so you spend your time on the app, not the scaffolding underneath it.","points":["<strong>Core APIs</strong> — auth, databases, storage, messaging.","<strong>Functions</strong> — event-triggered FaaS in containers.","<strong>SDKs</strong> — typed clients for JS, Python, and more."]},"stats":[{"label":"Model","value":"BaaS","icon":"server"},{"label":"Deployment","value":"Docker","icon":"package"},{"label":"Functions","value":"FaaS","icon":"zap"},{"label":"SDKs","value":"JS · Python","icon":"code"}],"features":[{"title":"Overview","icon":"info","href":"#overview","body":"What Appwrite is, the core APIs it ships, and how it fits self-hosted or in the managed cloud."},{"title":"Cloud Functions","icon":"zap","href":"#javascript","body":"Init, Core, and Extra — create a function, package it as a tarball, deploy it, and wire up event triggers."},{"title":"Python SDK","icon":"code","href":"#python","body":"Install the SDK, chain set_endpoint, set_project, and set_key on a Client, then call typed services."},{"title":"Bundle your dependencies","icon":"box","body":"Functions run in isolated containers — package extra libraries like axios with your code so they exist at runtime."}],"related":[{"title":"Pocketbase","href":"/application/pocketbase/","copy":"A single-binary backend alternative with auth and realtime DB.","icon":"database"},{"title":"Supabase","href":"/application/supabase/","copy":"The Postgres-powered BaaS the KBVE stack runs in production.","icon":"bolt"},{"title":"Docker","href":"/application/docker/","copy":"The container runtime Appwrite deploys and runs functions on.","icon":"package"}],"theme":{"hero_bg":"https://images.unsplash.com/photo-1549605659-32d82da3a059?q=80&w=2400&auto=format&fit=crop","accent":"#34d399","accent2":"#22d3ee","btn_fg":"#06251b"},"features_eyebrow":"On this page","features_heading":"What this guide covers","related_eyebrow":"Keep exploring","related_heading":"Related applications"},"slug":"/application/appwrite"},{"title":"ArgoCD","description":"ArgoCD is a declarative, GitOps continuous delivery tool for Kubernetes that syncs the desired state in Git\nwith the live cluster. This guide covers the architecture, CLI, sync policies, the KBVE annotation standard,\nand troubleshooting.\n","template":"splash","tableOfContents":false,"editUrl":false,"lastUpdated":false,"prev":false,"next":false,"sidebar":{"label":"ArgoCD","order":12},"unsplash":"1667372459726-a8fb4f5e4a5b","img":"https://images.unsplash.com/photo-1667372459726-a8fb4f5e4a5b?fit=crop&w=1400&h=700&q=75","tags":["kubernetes","gitops","ci-cd"],"sem":1,"ogTitle":"ArgoCD Guide — GitOps Continuous Delivery for Kubernetes","ogDescription":"Learn ArgoCD, the declarative GitOps CD tool for Kubernetes — architecture, the argocd CLI, automated sync with self-heal and prune, ignoreDifferences, finalizers, and troubleshooting stuck syncs.","jsonld":{"type":"Article","keywords":["argocd","gitops","continuous delivery","kubernetes deployment","argo cd sync","declarative cd"],"faq":[{"question":"What is ArgoCD?","answer":"ArgoCD is a declarative, GitOps continuous delivery tool for Kubernetes. It treats a Git repository as the source of truth for the desired application state and continuously syncs the live cluster to match, automating deployments and detecting drift."},{"question":"What is GitOps?","answer":"GitOps is an operational model where the desired state of infrastructure and applications is declared in Git, and an automated agent reconciles the running system to match. Git becomes the single source of truth, so every change is version-controlled, reviewable, and auditable."},{"question":"What is the difference between prune and self-heal in ArgoCD?","answer":"prune deletes cluster resources that were removed from Git, keeping the cluster from accumulating orphans. selfHeal reverts manual kubectl changes back to the Git-defined state. Together they enforce that the live cluster always matches the repository."},{"question":"How do I fix an ArgoCD application stuck in Progressing?","answer":"Check the operation with argocd app get, terminate a stuck sync using argocd app terminate-op, then force a fresh sync with argocd app sync --force. A hard refresh (--hard-refresh) bypasses the cache when an app shows out of sync despite matching Git."},{"question":"What are ignoreDifferences used for in ArgoCD?","answer":"ignoreDifferences tells ArgoCD to skip specific resource fields when comparing live and desired state, so it does not fight controllers that own those fields — for example an autoscaler managing an Agones Fleet's spec.replicas would otherwise be reverted on every sync."}]},"bento":{"badge":"application · gitops · ci-cd","title":"Git as the source of truth,","accent":"ArgoCD.","lede":"The declarative GitOps engine behind the KBVE cluster — every application manifest lives in Git, and ArgoCD keeps the live cluster synced to match. This guide covers the architecture, the argocd CLI, automated sync with self-heal and prune, the KBVE annotation standard, and fixing stuck syncs.","ctas":[{"label":"Architecture","href":"#architecture","primary":true},{"label":"Annotation standard","href":"#application-annotation-standard"},{"label":"CLI commands","href":"#cli-commands"},{"label":"Troubleshooting","href":"#troubleshooting"}],"aside":{"icon":"deploy","title":"Reconcile, don't apply","body":"Never manually apply manifests that ArgoCD manages — declare the desired state in apps/kube, commit, and let the controller converge the cluster. Drift gets healed, orphans get pruned, and every change stays reviewable.","points":["<strong>Self-heal</strong> — manual kubectl edits revert to Git.","<strong>Prune</strong> — resources removed from Git are deleted.","<strong>Annotations</strong> — every app links back to its source path."]},"stats":[{"label":"Apps managed","value":"68+","icon":"deploy"},{"label":"Sync policy","value":"self-heal + prune","icon":"check"},{"label":"Manifests","value":"apps/kube/","icon":"branch"},{"label":"Annotation schema","value":"v1","icon":"info"}],"features":[{"title":"Architecture","icon":"gears","href":"#architecture","body":"Application controller, repo server, API server, and the CRDs that define applications and projects."},{"title":"Annotation standard","icon":"book","href":"#application-annotation-standard","body":"The kbve.com/* schema linking every Application to its source directory — categories, stacks, tenants, and kubectl queries."},{"title":"CLI commands","icon":"code","href":"#cli-commands","body":"Install the argocd CLI, log in via port-forward, and the everyday sync, diff, and delete commands."},{"title":"Troubleshooting","icon":"alert","href":"#troubleshooting","body":"Stuck Progressing operations, out-of-sync despite matching Git, custom health checks, and controller logs."}],"related":[{"title":"Kubernetes","href":"/application/kubernetes/","copy":"The cluster ArgoCD reconciles — Talos, kubectl, and operations.","icon":"server"},{"title":"Git","href":"/application/git/","copy":"The source of truth and CI/CD integration feeding every sync.","icon":"branch"},{"title":"Longhorn","href":"/application/longhorn/","copy":"Cluster storage that upgrades alongside ArgoCD-managed workloads.","icon":"database"}],"theme":{"hero_bg":"https://images.unsplash.com/photo-1667372459726-a8fb4f5e4a5b?q=80&w=2400&auto=format&fit=crop","accent":"#34d399","accent2":"#22d3ee","btn_fg":"#06251b"},"features_eyebrow":"On this page","features_heading":"What this guide covers","related_eyebrow":"Keep exploring","related_heading":"Related applications"},"slug":"/application/argocd"},{"title":"Authelia","description":"Authelia is an open-source authentication and authorization server that adds two-factor authentication (2FA) and single sign-on (SSO) to your applications through a reverse proxy. It acts as a firewall-like access portal, securing services outside the scope of the application itself.","template":"splash","tableOfContents":false,"editUrl":false,"lastUpdated":false,"prev":false,"next":false,"sidebar":{"label":"Authelia","order":5},"unsplash":"1549605659-32d82da3a059","img":"https://images.unsplash.com/photo-1549605659-32d82da3a059?fit=crop&w=1400&h=700&q=75","tags":["security","auth","sso"],"sem":1,"ogTitle":"Authelia Guide — 2FA & Single Sign-On via Reverse Proxy","ogDescription":"Secure your web apps with Authelia, an open-source authentication and authorization server. Learn how forward auth works with Nginx and Traefik, prerequisites, Docker deployment, and 2FA/SSO setup.","jsonld":{"type":"Article","keywords":["authelia","two-factor authentication","single sign-on","sso","forward auth","reverse proxy authentication"],"faq":[{"question":"What is Authelia?","answer":"Authelia is an open-source authentication and authorization server that provides two-factor authentication (2FA) and single sign-on (SSO) for your web applications. It sits behind a reverse proxy like Nginx or Traefik and validates every request before it reaches the protected service, acting like an application-layer firewall."},{"question":"How does Authelia integrate with a reverse proxy?","answer":"Authelia uses forward auth (also called external or auth_request). The reverse proxy intercepts each request and asks Authelia whether the user is authenticated and authorized. If yes, the request passes through; if not, the user is redirected to Authelia's login portal. Nginx uses auth_request, and Traefik uses a forwardAuth middleware."},{"question":"What port does Authelia run on?","answer":"Authelia listens on port 9091 by default, but this is configurable. It must operate under SSL/TLS, so in practice you terminate HTTPS at your reverse proxy and forward authenticated traffic to Authelia and your backend services."},{"question":"Does Authelia support single sign-on across multiple domains?","answer":"Yes. Once a user authenticates through Authelia's portal, a session cookie scoped to your root domain grants access to every protected subdomain and service without logging in again, delivering true single sign-on across your ecosystem."},{"question":"What do I need before deploying Authelia?","answer":"A working reverse proxy (Nginx, Traefik, or HAProxy), a domain with valid SSL certificates, and a session/storage backend. If Cloudflare sits in front of your domain, verify your forwarded headers configuration so Authelia receives the correct original request details."}]},"bento":{"badge":"application · security · sso","title":"One login for everything,","accent":"Authelia.","lede":"An open-source authentication and authorization server that adds two-factor authentication and single sign-on to any app through your reverse proxy. Authelia validates every request before it reaches the protected service — an application-layer firewall with a friendly login portal.","ctas":[{"label":"How it works","href":"#how-it-works","primary":true},{"label":"Install","href":"#install"},{"label":"Information","href":"#information"}],"aside":{"icon":"shield","title":"Auth without touching your apps","body":"Authelia never modifies your applications. It plugs into Nginx, Traefik, or HAProxy via forward auth — the proxy asks Authelia whether each request is authenticated and authorized before letting it through.","points":["<strong>2FA</strong> — a second factor in front of every service.","<strong>SSO</strong> — one root-domain cookie unlocks all subdomains.","<strong>Forward auth</strong> — the proxy delegates the decision."]},"stats":[{"label":"Default port","value":"9091","icon":"server"},{"label":"Auth pattern","value":"Forward auth","icon":"route"},{"label":"Session scope","value":"Root domain","icon":"key"},{"label":"TLS","value":"Required","icon":"lock"}],"features":[{"title":"How it works","icon":"route","href":"#how-it-works","body":"The forward-auth flow step by step — proxy pauses, Authelia decides, the session cookie delivers SSO."},{"title":"Install","icon":"deploy","href":"#install","body":"Deployment options for Docker, Kubernetes, and bare metal, plus prerequisites and a minimal compose file."},{"title":"Traefik integration","icon":"network","href":"#install","body":"Wire Authelia into Traefik with a forwardAuth middleware and attach it to any protected router."},{"title":"TLS first","icon":"lock","body":"Authelia must operate under SSL/TLS — terminate HTTPS at the proxy and never expose port 9091 directly to the internet."}],"related":[{"title":"Traefik","href":"/application/traefik/","copy":"The reverse proxy our ecosystem pairs with Authelia's forwardAuth.","icon":"route"},{"title":"Nginx","href":"/application/nginx/","copy":"Forward auth via auth_request on the classic reverse proxy.","icon":"server"},{"title":"Docker","href":"/application/docker/","copy":"Deploy Authelia as a container alongside your services.","icon":"package"}],"theme":{"hero_bg":"https://images.unsplash.com/photo-1549605659-32d82da3a059?q=80&w=2400&auto=format&fit=crop","accent":"#34d399","accent2":"#22d3ee","btn_fg":"#06251b"},"features_eyebrow":"On this page","features_heading":"What this guide covers","related_eyebrow":"Keep exploring","related_heading":"Related applications"},"slug":"/application/authelia"},{"title":"Blender","description":"Blender is a powerful open-source 3D creation suite supporting the entire 3D pipeline—modeling, rigging, animation, simulation, rendering, compositing, motion tracking, and video editing.\nThe software provides professional-grade tools for artists, studios, and hobbyists across industries including game development, film production, architecture, and product visualization.\nWith Python scripting, extensive addon support, and active community development, Blender has become an industry-standard tool for 3D content creation.\n","template":"splash","tableOfContents":false,"editUrl":false,"lastUpdated":false,"prev":false,"next":false,"sidebar":{"label":"Blender","order":1303},"unsplash":"1618519764301-4dccc2c70c76","img":"https://images.unsplash.com/photo-1618519764301-4dccc2c70c76?fit=crop&w=1400&h=700&q=75","tags":["3d","software","modeling"],"bento":{"badge":"application · 3d · modeling","title":"The entire 3D pipeline,","accent":"Blender.","lede":"A free and open-source 3D creation suite covering modeling, rigging, animation, simulation, rendering, compositing, and video editing. This guide walks the full toolset — plus the KBVE sprite baker and headless CI workflows that turn 3D models into game-ready assets.","ctas":[{"label":"Getting started","href":"#getting-started","primary":true},{"label":"Sprite sheet baker","href":"#sprite-sheet-baker"},{"label":"Rendering","href":"#rendering"},{"label":"KBVE integration","href":"#kbve-integration"}],"aside":{"icon":"render","title":"One suite, every stage","body":"From the first polygon to the final composited frame, Blender handles every stage of 3D production — with a Python API deep enough to automate all of it.","points":["<strong>Modeling</strong> — polygons, sculpting, and Geometry Nodes.","<strong>Rendering</strong> — Cycles path tracing and real-time Eevee.","<strong>Automation</strong> — headless bakes and renders via bpy."]},"stats":[{"label":"License","value":"GPL-3.0","icon":"license"},{"label":"Path tracer","value":"Cycles","icon":"render"},{"label":"Scripting","value":"Python bpy","icon":"code"},{"label":"Open-sourced","value":"2002","icon":"calendar"}],"features":[{"title":"Getting started","icon":"box","href":"#getting-started","body":"Install via package managers on any OS, then tour the workspaces and default scene."},{"title":"Sprite sheet baker","icon":"camera","href":"#sprite-sheet-baker","body":"Bake 360° spins of 3D models into iso sprite sheets for the ARPG — in the browser or headless via Blender."},{"title":"Rendering","icon":"render","href":"#rendering","body":"Eevee, Cycles, and Workbench — sampling, denoising, light paths, and render passes for compositing."},{"title":"KBVE integration","icon":"gears","href":"#kbve-integration","body":"Headless render, export, and script tasks on the self-hosted mac-blender runner via router and flow workflows."}],"related":[{"title":"Unreal Engine","href":"/application/unreal/","copy":"Import baked FBX assets into UE for game production.","icon":"sword"},{"title":"Unity","href":"/application/unity/","copy":"FBX export settings and pipelines for Unity projects.","icon":"package"},{"title":"Godot","href":"/application/godot/","copy":"glTF 2.0 export for the open-source game engine.","icon":"code"}],"theme":{"hero_bg":"https://images.unsplash.com/photo-1618519764301-4dccc2c70c76?q=80&w=2400&auto=format&fit=crop","accent":"#34d399","accent2":"#22d3ee","btn_fg":"#06251b"},"features_eyebrow":"On this page","features_heading":"What this guide covers","related_eyebrow":"Keep exploring","related_heading":"Related applications"},"slug":"/application/blender"},{"title":"CSS","description":"CSS styles the web. From modern CSS features to TailwindCSS utilities and ready-to-use custom components.\n","template":"splash","tableOfContents":false,"editUrl":false,"lastUpdated":false,"prev":false,"next":false,"sidebar":{"label":"CSS","order":402},"unsplash":"1507721999472-8ed4421c4af2","img":"https://images.unsplash.com/photo-1507721999472-8ed4421c4af2?fit=crop&w=1400&h=700&q=75","tags":["css","tailwindcss","frontend","web"],"bento":{"badge":"application · css · frontend","title":"Style the web with,","accent":"CSS.","lede":"The styling layer of the web — layout, color, typography, motion and responsiveness. This all-in-one reference covers modern CSS features that ship in evergreen browsers today, the TailwindCSS utility framework, and a library of copy-paste custom components, from buttons and forms to text effects and glassmorphism.","ctas":[{"label":"Modern CSS","href":"#modern-css","primary":true},{"label":"TailwindCSS","href":"#tailwindcss"},{"label":"Custom components","href":"#custom-components"},{"label":"Accessibility","href":"#accessibility"}],"aside":{"icon":"code","title":"Form follows function","body":"Where HTML gives a page structure and JavaScript gives it behavior, CSS gives it form. Modern CSS removed the need for preprocessor tricks and JavaScript hacks — nesting, container queries and scroll-driven animation now ship natively.","points":["<strong>Modern features</strong> — nesting, :has(), container queries, view transitions.","<strong>Tailwind v4</strong> — CSS-first config with @theme, no config file.","<strong>Components</strong> — live, copy-paste buttons, cards, forms and effects."]},"stats":[{"label":"First shipped","value":"1996","icon":"calendar"},{"label":"Tailwind","value":"v4 CSS-first","icon":"zap"},{"label":"Layout engines","value":"Grid + Flexbox","icon":"expand"},{"label":"Live snippets","value":"80+ demos","icon":"package"}],"features":[{"title":"Modern CSS","icon":"code","href":"#modern-css","body":"Nesting, :has(), container queries, oklch colors, subgrid, scroll-driven animations and view transitions — baseline in evergreen browsers."},{"title":"TailwindCSS","icon":"zap","href":"#tailwindcss","body":"Utility-first styling with the v4 CSS-first setup, plus a full gallery of animated and everyday button patterns."},{"title":"Custom components","icon":"package","href":"#custom-components","body":"Copy-paste text effects, glass cards, spinners, toggles, tooltips, tabs, timelines and more — all live demos."},{"title":"Accessibility","icon":"shield","href":"#accessibility","body":"Visible focus with :focus-visible, screen-reader-only text, contrast and reduced-motion patterns that carry the weight."}],"related":[{"title":"JavaScript","href":"/application/javascript/","copy":"The behavior layer that pairs with your styles.","icon":"code"},{"title":"React Native","href":"/application/rn/","copy":"KBVE's Expo mobile stack, styled component by component.","icon":"box"},{"title":"Git","href":"/application/git/","copy":"Version every stylesheet and design token change.","icon":"branch"}],"theme":{"hero_bg":"https://images.unsplash.com/photo-1507721999472-8ed4421c4af2?q=80&w=2400&auto=format&fit=crop","accent":"#34d399","accent2":"#22d3ee","btn_fg":"#06251b"},"features_eyebrow":"On this page","features_heading":"What this guide covers","related_eyebrow":"Keep exploring","related_heading":"Related applications"},"slug":"/application/css"},{"title":"CubeJS","description":"CubeJS is a headless business intelligence application for various forms of data, including SQL, Mongo and Snowflake. CubeJS can be extended to external data warehouses, such as, Google BigQuery, Amazon Athena and Presto.\n","template":"splash","tableOfContents":false,"editUrl":false,"lastUpdated":false,"prev":false,"next":false,"sidebar":{"label":"CubeJS","order":7},"unsplash":"1635492491273-455af7728453","img":"https://images.unsplash.com/photo-1635492491273-455af7728453?fit=crop&w=1400&h=700&q=75","tags":["database"],"bento":{"badge":"application · database","title":"The semantic layer,","accent":"CubeJS.","lede":"A headless business intelligence platform that connects to any SQL-based data source — Postgres, ClickHouse, BigQuery, Snowflake, and more — defines consistent data models, and exposes them through blazing-fast REST, GraphQL, and SQL APIs. This guide covers install, schema design, queries, security, and the KBVE deployment.","ctas":[{"label":"Install","href":"#install","primary":true},{"label":"Data schema","href":"#data-schema"},{"label":"API queries","href":"#api-queries"},{"label":"KBVE integration","href":"#kbve-integration"}],"aside":{"icon":"database","title":"One API over every source","body":"Whether you want an internal dashboard for business insights or a customer-facing analytics feature, CubeJS models your data once and serves it everywhere — with pre-aggregations cached in Cube Store for sub-second responses.","points":["<strong>Schema</strong> — cubes, measures, dimensions, joins.","<strong>APIs</strong> — REST, GraphQL, and SQL from one model.","<strong>Cache</strong> — Cube Store pre-aggregations built in."]},"stats":[{"label":"API port","value":"4000","icon":"server"},{"label":"APIs","value":"REST · GraphQL · SQL","icon":"code"},{"label":"Cache layer","value":"Cube Store","icon":"database"},{"label":"License","value":"Apache-2.0","icon":"license"}],"features":[{"title":"Install","icon":"package","href":"#install","body":"Run CubeJS via Docker with env-driven config, or scaffold a project with cubejs-cli on NodeJS."},{"title":"Data Schema","icon":"database","href":"#data-schema","body":"Define cubes with measures, dimensions, joins, and pre-aggregations that cache query results."},{"title":"API Queries","icon":"bolt","href":"#api-queries","body":"The shared query format across REST and GraphQL — measures, dimensions, time ranges, and filter operators."},{"title":"KBVE Integration","icon":"deploy","href":"#kbve-integration","body":"CubeJS as a unified semantic layer over ClickHouse and Postgres, deployed on Kubernetes with Cube Store."}],"related":[{"title":"SQL","href":"/application/sql/","copy":"The query language behind every CubeJS data source.","icon":"database"},{"title":"Supabase","href":"/application/supabase/","copy":"Postgres platform that pairs with CubeJS for transactional data.","icon":"bolt"},{"title":"Kubernetes","href":"/application/kubernetes/","copy":"Where the KBVE Cube API, refresh workers, and Cube Store run.","icon":"deploy"}],"theme":{"hero_bg":"https://images.unsplash.com/photo-1635492491273-455af7728453?q=80&w=2400&auto=format&fit=crop","accent":"#34d399","accent2":"#22d3ee","btn_fg":"#06251b"},"features_eyebrow":"On this page","features_heading":"What this guide covers","related_eyebrow":"Keep exploring","related_heading":"Related applications"},"slug":"/application/cubejs"},{"title":"Docker","description":"Docker packages applications and their dependencies into portable containers that run identically across\nmachines. This reference covers the Docker CLI cheatsheet, every Dockerfile instruction (FROM, RUN, CMD,\nENTRYPOINT, and more), GPU passthrough, BuildX, WatchTower, and container management scripts.\n","template":"splash","tableOfContents":false,"editUrl":false,"lastUpdated":false,"prev":false,"next":false,"sidebar":{"label":"Docker","order":100},"unsplash":"1605745341112-85968b19335b","img":"https://images.unsplash.com/photo-1605745341112-85968b19335b?fit=crop&w=1400&h=700&q=75","tags":["containers","devops","virtualization"],"sem":1,"ogTitle":"Docker Reference — CLI Cheatsheet, Dockerfile Instructions & BuildX","ogDescription":"A practical Docker reference — the CLI cheatsheet, every Dockerfile instruction explained, GPU passthrough, BuildX multi-arch builds, WatchTower auto-updates, and management scripts.","jsonld":{"type":"Article","keywords":["docker","dockerfile","containers","buildx","docker cli"],"faq":[{"question":"What is the difference between CMD and ENTRYPOINT in a Dockerfile?","answer":"ENTRYPOINT sets the executable that always runs and is not overridden by arguments passed to docker run. CMD provides default arguments that are easily overridden. Use ENTRYPOINT for the fixed command and CMD for its default flags."},{"question":"What is the difference between ADD and COPY?","answer":"COPY only copies local files and directories into the image. ADD does the same but also unpacks local tar archives and can fetch remote URLs. Prefer COPY unless you specifically need ADD's extraction behavior."},{"question":"How do I reduce Docker image size?","answer":"Use a small base image like alpine, combine RUN steps to reduce layers, leverage multi-stage builds to drop build-time dependencies, and add a .dockerignore to keep unneeded files out of the build context."},{"question":"What is Docker BuildX used for?","answer":"BuildX is Docker's extended build engine built on BuildKit. It enables multi-platform (multi-arch) images, better caching, and building for architectures other than the host, such as arm64 images from an amd64 machine."},{"question":"What is the difference between a Docker image and a container?","answer":"An image is an immutable, layered template built from a Dockerfile. A container is a running (or stopped) instance of an image with its own writable layer. One image can spawn many containers."},{"question":"How do I persist data in Docker?","answer":"Use a named volume (docker volume create, mounted with -v name:/path) for durable storage managed by Docker, or a bind mount to map a host directory into the container. Data written to the container's own writable layer is lost when the container is removed."},{"question":"What is Docker Compose used for?","answer":"Compose defines a multi-container application in one docker-compose.yml file. A single docker compose up -d starts every service, creates a shared network so they resolve each other by name, and provisions named volumes for persistence."},{"question":"How do multi-stage builds reduce image size?","answer":"A multi-stage build compiles the application in a heavy build stage with all toolchains, then copies only the final artifact into a minimal runtime stage. The build dependencies never ship in the final image, shrinking it significantly."}]},"bento":{"badge":"application · containers · devops","title":"Ship it anywhere,","accent":"Docker.","lede":"Package an application and its dependencies into a portable container that runs identically on any machine. This working reference covers the day-to-day CLI cheatsheet, every Dockerfile instruction, GPU passthrough, BuildX multi-arch builds, WatchTower auto-updates, and container management scripts.","ctas":[{"label":"CLI cheatsheet","href":"#cheatsheet","primary":true},{"label":"Dockerfile instructions","href":"#dockerfile"},{"label":"BuildX","href":"#buildx"},{"label":"Compose","href":"#docker-compose"}],"aside":{"icon":"package","title":"One image, many containers","body":"A Dockerfile describes how to build an immutable, layered image; docker run launches isolated containers from it. Containers share the host kernel, so they start in seconds and use far less memory than full virtual machines.","points":["<strong>Cheatsheet</strong> — the commands you reach for daily.","<strong>Dockerfile</strong> — every instruction, explained.","<strong>Automation</strong> — BuildX, WatchTower, and scripts."]},"stats":[{"label":"Build engine","value":"BuildKit","icon":"gears"},{"label":"Image recipe","value":"Dockerfile","icon":"code"},{"label":"Multi-arch","value":"BuildX","icon":"deploy"},{"label":"Multi-container","value":"Compose","icon":"box"}],"features":[{"title":"CLI cheatsheet","icon":"code","href":"#cheatsheet","body":"Container management, inspection, networks, Compose, Swarm, and prune — the full command tables in one place."},{"title":"Dockerfile instructions","icon":"box","href":"#dockerfile","body":"FROM, RUN, CMD, ENTRYPOINT, COPY vs ADD, HEALTHCHECK, and every other instruction with usage tables."},{"title":"BuildX multi-arch","icon":"deploy","href":"#buildx","body":"Extended builds on BuildKit — cache export, builder instances, and multi-platform images for ARM and x86."},{"title":"WatchTower auto-updates","icon":"clock","href":"#watchtower","body":"Automatically pull new images, restart containers, and notify your team when deployments update."}],"related":[{"title":"Kubernetes","href":"/application/kubernetes/","copy":"Orchestrate containers across clusters once one host is not enough.","icon":"deploy"},{"title":"Linux","href":"/application/linux/","copy":"The kernel and command-line foundation containers run on.","icon":"server"},{"title":"Portainer","href":"/application/portainer/","copy":"A web UI for managing Docker containers, images, and stacks.","icon":"settings"}],"theme":{"hero_bg":"https://images.unsplash.com/photo-1605745341112-85968b19335b?q=80&w=2400&auto=format&fit=crop","accent":"#34d399","accent2":"#22d3ee","btn_fg":"#06251b"},"features_eyebrow":"On this page","features_heading":"What this guide covers","related_eyebrow":"Keep exploring","related_heading":"Related applications"},"slug":"/application/docker"},{"title":"FlipperZero","description":"Flipper Zero is a pen test multi-tool! Think of it as a Swiss Army knife for wireless hacking.\n","template":"splash","tableOfContents":false,"editUrl":false,"lastUpdated":false,"prev":false,"next":false,"sidebar":{"label":"FlipperZero","order":9999},"unsplash":"1525826212383-92e29530133e","img":"https://images.unsplash.com/photo-1525826212383-92e29530133e?fit=crop&w=1400&h=700&q=75","tags":["security","redteam","nfc"],"sem":1,"ogTitle":"Flipper Zero Guide — Firmware, Sub-GHz, NFC & pyFlipper","ogDescription":"Learn the Flipper Zero pentest multi-tool — installing official and custom firmware (Unleashed, RogueMaster), the Sub-GHz CC1101 radio, NFC read/emulate at 13.56 MHz, and the pyFlipper CLI.","jsonld":{"type":"Article","keywords":["flipper zero","flipperzero firmware","sub-ghz","nfc","rfid","unleashed firmware","pentest multi-tool"],"faq":[{"question":"What is the Flipper Zero?","answer":"Flipper Zero is a portable, open-source multi-tool for pentesters and hardware hobbyists. It reads, saves, and emulates a range of wireless and access-control signals — Sub-GHz radio, NFC and RFID cards, infrared, iButton, and GPIO — behind a playful Tamagotchi-like interface."},{"question":"What is custom firmware for the Flipper Zero?","answer":"Custom firmware replaces the official firmware to unlock extra features, protocols, and plugins the stock build restricts. Popular forks include Unleashed and its RogueMaster fork. The chip stores a New and Old firmware slot, which lowers (but does not remove) the risk of bricking when flashing."},{"question":"What frequencies does the Flipper Zero Sub-GHz radio use?","answer":"The Sub-GHz module uses the CC1101 chipset and operates in the 300-348 MHz, 387-464 MHz, and 779-928 MHz bands. Common targets include 315 MHz and 433 MHz car key fobs and remotes, within the limits of local radio regulations."},{"question":"How does NFC work on the Flipper Zero?","answer":"The NFC module operates at 13.56 MHz (ISO/IEC 18000-3) and can read, save, and emulate NFC cards, capturing data like UID, ATQA, and SAK. It supports many card types, though full ISO 15693 (NFC-V) support is limited. A microSD stores saved cards for later emulation."},{"question":"How do I update Flipper Zero firmware?","answer":"The most reliable method is a direct USB cable update via the qFlipper desktop app, which avoids the corruption risk of wireless flashing. You can also update over the Flipper Mobile App or the web updater, but a wired qFlipper upgrade is recommended."}]},"bento":{"badge":"application · security · redteam","title":"The cyber-buddy,","accent":"Flipper Zero.","lede":"A portable pentest multi-tool with a Tamagotchi-like personality — Sub-GHz radio, NFC and RFID, infrared, iButton, and GPIO in one pocketable device. This guide covers official and custom firmware, safe updating over qFlipper, the CC1101 Sub-GHz radio, the 13.56 MHz NFC module, and the pyFlipper CLI wrapper.","ctas":[{"label":"Firmware","href":"#firmware","primary":true},{"label":"Sub-GHz radio","href":"#ghz"},{"label":"NFC module","href":"#nfc"}],"aside":{"icon":"sensor","title":"A Swiss Army knife for wireless","body":"Flipper Zero reads, saves, and emulates the signals that surround you — radio remotes, access cards, infrared blasters — with full access to its source code and hardware design so you can tailor it to your own needs.","points":["<strong>Firmware</strong> — stock, dev, and custom forks like Unleashed.","<strong>Sub-GHz</strong> — CC1101 radio across three bands.","<strong>NFC</strong> — read, save, and emulate 13.56 MHz cards."]},"stats":[{"label":"Sub-GHz chipset","value":"CC1101","icon":"sensor"},{"label":"NFC frequency","value":"13.56 MHz","icon":"network"},{"label":"Firmware slots","value":"New + Old","icon":"package"},{"label":"Updater","value":"qFlipper","icon":"deploy"}],"features":[{"title":"Firmware","icon":"package","href":"#firmware","body":"Official, release candidate, dev, and custom builds — including the Unleashed fork and its RogueMaster variant."},{"title":"Sub-GHz radio","icon":"sensor","href":"#ghz","body":"The CC1101 radio reads, records, and replays signals across the 300-348, 387-464, and 779-928 MHz bands."},{"title":"NFC module","icon":"key","href":"#nfc","body":"Read, save, and emulate 13.56 MHz NFC cards — UID, ATQA, SAK — with saved cards stored on microSD."},{"title":"Authorized targets only","icon":"shield","body":"Only interact with signals and access-control systems you own or are explicitly authorized to test — cloning others' is illegal in most jurisdictions."}],"related":[{"title":"Nmap","href":"/application/nmap/","copy":"Network scanning and recon to pair with hardware pentesting.","icon":"eye"},{"title":"WireGuard","href":"/application/wireguard/","copy":"Modern VPN tunnels for securing your own infrastructure.","icon":"lock"},{"title":"Linux","href":"/application/linux/","copy":"The sysadmin foundation beneath every security toolkit.","icon":"server"}],"theme":{"hero_bg":"https://images.unsplash.com/photo-1525826212383-92e29530133e?q=80&w=2400&auto=format&fit=crop","accent":"#34d399","accent2":"#22d3ee","btn_fg":"#06251b"},"features_eyebrow":"On this page","features_heading":"What this guide covers","related_eyebrow":"Keep exploring","related_heading":"Related applications"},"slug":"/application/flipperzero"},{"title":"Flutter","description":"Flutter is Google's open-source UI toolkit for building natively compiled apps for mobile, web, and desktop\nfrom a single Dart codebase. This guide covers installing the SDK, running flutter doctor, the essential CLI\ncheatsheet, the widget model, and where to find packages on pub.dev.\n","template":"splash","tableOfContents":false,"editUrl":false,"lastUpdated":false,"prev":false,"next":false,"sidebar":{"label":"Flutter","order":475},"unsplash":"1628277613967-6abca504d0ac","img":"https://images.unsplash.com/photo-1628277613967-6abca504d0ac?fit=crop&w=1400&h=700&q=75","tags":["dart","mobile","cross-platform"],"sem":1,"ogTitle":"Flutter Guide — Install the SDK, CLI Cheatsheet & Widget Basics","ogDescription":"Get started with Flutter, Google's cross-platform UI toolkit — install the SDK, verify with flutter doctor, learn the core CLI commands, and understand the widget-based build model.","jsonld":{"type":"Article","keywords":["flutter","dart","cross-platform","mobile development","flutter widgets"],"faq":[{"question":"What is Flutter?","answer":"Flutter is Google's open-source UI toolkit for building natively compiled applications for mobile (iOS and Android), web, and desktop from a single Dart codebase. It renders its own widgets, so the UI looks and behaves consistently across platforms."},{"question":"What language does Flutter use?","answer":"Flutter apps are written in Dart, an object-oriented, strongly typed language by Google. Dart compiles ahead-of-time to native machine code for release builds and just-in-time during development to enable hot reload."},{"question":"What is flutter doctor?","answer":"flutter doctor is a diagnostic command that checks your environment for everything Flutter needs — the SDK, platform toolchains (Android SDK, Xcode), connected devices, and IDE plugins — and reports what is missing with fix suggestions."},{"question":"What is a widget in Flutter?","answer":"In Flutter everything on screen is a widget — a lightweight, immutable description of part of the UI. Widgets compose into a tree; StatelessWidget describes UI that never changes, while StatefulWidget rebuilds when its state updates."},{"question":"Where do I find Flutter packages?","answer":"pub.dev is the official package repository for Dart and Flutter. Add a package with flutter pub add <name>, which updates pubspec.yaml and downloads it, then import it in your Dart code."}]},"bento":{"badge":"application · dart · mobile","title":"One codebase, every screen,","accent":"Flutter.","lede":"Google's open-source UI toolkit compiles a single Dart codebase into natively compiled apps for mobile, web, and desktop — with hot reload showing changes in under a second. This guide covers installing the SDK, verifying with flutter doctor, the essential CLI cheatsheet, the widget model, and finding packages on pub.dev.","ctas":[{"label":"Install the SDK","href":"#install","primary":true},{"label":"CLI cheatsheet","href":"#cheatsheet"},{"label":"Widget model","href":"#widgets"}],"aside":{"icon":"code","title":"Rendered, not wrapped","body":"Instead of wrapping native controls, Flutter ships its own rendering engine and widget set — a single design looks and behaves identically on Android, iOS, the web, and desktop.","points":["<strong>SDK</strong> — clone, add to PATH, run flutter doctor.","<strong>CLI</strong> — run, devices, logs, pub add in one cheatsheet.","<strong>Widgets</strong> — Stateless vs Stateful and the build cycle."]},"stats":[{"label":"Language","value":"Dart","icon":"code"},{"label":"Dev loop","value":"Hot reload","icon":"zap"},{"label":"Diagnostics","value":"flutter doctor","icon":"check"},{"label":"Packages","value":"pub.dev","icon":"package"}],"features":[{"title":"Install the SDK","icon":"deploy","href":"#install","body":"Windows, macOS, and Linux setup — clone the SDK, add it to PATH, and resolve every flutter doctor warning."},{"title":"CLI cheatsheet","icon":"code","href":"#cheatsheet","body":"The daily commands — doctor, upgrade, pub get, devices, run, logs, clean, and package management."},{"title":"Widget model","icon":"box","href":"#widgets","body":"Everything is a widget — Stateless vs Stateful, the build method, and Flutter's reactive rebuild cycle."},{"title":"Packages on pub.dev","icon":"package","href":"#packages","body":"The official Dart and Flutter package repository — add dependencies with flutter pub add."}],"related":[{"title":"Android","href":"/application/android/","copy":"The native platform tooling behind Flutter's Android builds.","icon":"settings"},{"title":"iOS","href":"/application/ios/","copy":"Xcode and Apple toolchain notes for the other mobile target.","icon":"package"},{"title":"React Native","href":"/application/rn/","copy":"The other major cross-platform framework in the KBVE stack.","icon":"code"}],"theme":{"hero_bg":"https://images.unsplash.com/photo-1628277613967-6abca504d0ac?q=80&w=2400&auto=format&fit=crop","accent":"#34d399","accent2":"#22d3ee","btn_fg":"#06251b"},"features_eyebrow":"On this page","features_heading":"What this guide covers","related_eyebrow":"Keep exploring","related_heading":"Related applications"},"slug":"/application/flutter"},{"title":"GCloud","description":"gcloud is the Google Cloud CLI for creating, configuring, and scaling Google Cloud resources — Compute\nEngine VMs, load balancers, networking, and more. This guide covers the CLI structure, Compute Engine,\nand building an HTTP load balancer with managed instance groups.\n","template":"splash","tableOfContents":false,"editUrl":false,"lastUpdated":false,"prev":false,"next":false,"sidebar":{"label":"GCloud","order":205},"unsplash":"1498354136128-58f790194fa7","img":"https://images.unsplash.com/photo-1498354136128-58f790194fa7?fit=crop&w=1400&h=700&q=75","tags":["cloud","gcp","devops"],"sem":1,"ogTitle":"gcloud CLI Guide — Compute Engine & HTTP Load Balancers","ogDescription":"Learn the gcloud CLI for Google Cloud — the GROUP/COMMAND structure, creating Compute Engine VMs, managed instance groups (MIGs), and wiring up an external HTTP load balancer with health checks.","jsonld":{"type":"Article","keywords":["gcloud","google cloud cli","compute engine","load balancer","managed instance group","gcp"],"faq":[{"question":"What is the gcloud CLI?","answer":"gcloud is the command-line interface for Google Cloud Platform. It lets you create, configure, and scale resources — Compute Engine VMs, networks, load balancers, storage, and more — from a terminal or scripts. Commands follow a gcloud GROUP COMMAND structure, for example gcloud compute instances create."},{"question":"How do I create a VM with gcloud?","answer":"Use gcloud compute instances create NAME with flags for zone, machine type, and image, e.g. gcloud compute instances create www-1 --zone=us-west1-b --machine-type=e2-medium --image-family=debian-11 --image-project=debian-cloud. A startup-script metadata flag can install software like Nginx on first boot."},{"question":"What is a managed instance group (MIG)?","answer":"A managed instance group runs multiple identical VMs from a single instance template. MIGs provide autoscaling, autohealing, multi-zone (regional) deployment, and automatic rolling updates, making them the backend for scalable, highly available load-balanced applications."},{"question":"How does an HTTP load balancer work on Google Cloud?","answer":"An external HTTP load balancer chains a global forwarding rule and IP to a target HTTP proxy, which uses a URL map to route requests to backend services. Each backend service points at one or more instance groups and a health check, so traffic only reaches healthy VMs."},{"question":"What is a forwarding rule in Google Cloud?","answer":"A forwarding rule and its IP address form the frontend of a Google Cloud load balancer. It matches incoming traffic on a protocol and port and forwards it to a target proxy or backend, tying the public entry point to the load balancing configuration behind it."}]},"bento":{"badge":"application · cloud · gcp","title":"One CLI for the cloud,","accent":"gcloud.","lede":"The Google Cloud CLI creates, configures, and scales GCP resources — Compute Engine VMs, networking, and load balancers — straight from a terminal or script. This guide walks the GROUP/COMMAND structure, Compute Engine basics, and wiring an external HTTP load balancer on top of a managed instance group.","ctas":[{"label":"Compute Engine","href":"#gcloud-compute","primary":true},{"label":"Load balancer","href":"#load-balancer"},{"label":"Forwarding rules","href":"#google-rules"}],"aside":{"icon":"deploy","title":"Script it, don't click it","body":"Every gcloud command follows the same GROUP COMMAND grammar, so the console workflow you clicked through once becomes a script you can rerun — from a single VM to a full load-balanced fleet.","points":["<strong>Compute</strong> — create VMs with zones, images, and startup scripts.","<strong>MIGs</strong> — identical VMs from one template, autoscaled and autohealed.","<strong>Load balancing</strong> — forwarding rule → proxy → URL map → backends."]},"stats":[{"label":"Platform","value":"GCP","icon":"deploy"},{"label":"Compute","value":"Compute Engine","icon":"server"},{"label":"Scaling","value":"MIGs","icon":"chart"},{"label":"LB frontend","value":"Forwarding rule","icon":"route"}],"features":[{"title":"GCloud Compute","icon":"server","href":"#gcloud-compute","body":"The gcloud compute GROUP | COMMAND structure and creating, configuring, and manipulating VMs."},{"title":"HTTP load balancer","icon":"network","href":"#load-balancer","body":"Instance templates, managed instance groups, health checks, backend services, URL maps, and proxies."},{"title":"Forwarding rules","icon":"route","href":"#google-rules","body":"The frontend of every Google Cloud load balancer — matching traffic and handing it to the target proxy."},{"title":"Startup scripts","icon":"code","body":"Bootstrap VMs on first boot with a startup-script metadata flag — apt-get install nginx and go."}],"related":[{"title":"Nginx","href":"/application/nginx/","copy":"The web server the load-balanced backend VMs run.","icon":"server"},{"title":"Kubernetes","href":"/application/kubernetes/","copy":"Container orchestration when VMs and MIGs are not enough.","icon":"deploy"},{"title":"Terraform","href":"/application/terraform/","copy":"Declare the same cloud resources as versioned infrastructure code.","icon":"settings"}],"theme":{"hero_bg":"https://images.unsplash.com/photo-1498354136128-58f790194fa7?q=80&w=2400&auto=format&fit=crop","accent":"#34d399","accent2":"#22d3ee","btn_fg":"#06251b"},"features_eyebrow":"On this page","features_heading":"What this guide covers","related_eyebrow":"Keep exploring","related_heading":"Related applications"},"slug":"/application/gcloud"},{"title":"Git","description":"Git is a distributed version control system designed to handle everything from small to very large projects with speed and efficiency.\nGit allows multiple developers to collaborate, track changes, and manage project history effectively. Ideal for version tracking and collaboration.\n","template":"splash","tableOfContents":false,"editUrl":false,"lastUpdated":false,"prev":false,"next":false,"sidebar":{"label":"Git","order":1000},"unsplash":"1618401479427-c8ef9465fbe1","img":"https://images.unsplash.com/photo-1618401479427-c8ef9465fbe1?fit=crop&w=1400&h=700&q=75","tags":["cloud"],"bento":{"badge":"application · cloud · vcs","title":"Every line of history,","accent":"Git.","lede":"The distributed version control system behind nearly all modern software — fast, flexible, and built for collaboration. This guide collects the command cheatsheet, conventional commits, hosting platforms from GitHub to Forgejo, and the CI/CD automation patterns the KBVE monorepo runs on.","ctas":[{"label":"Command cheatsheet","href":"#cheatsheet","primary":true},{"label":"GitHub & CI/CD","href":"#github"},{"label":"Submodules","href":"#submodules"},{"label":"Monorepo","href":"#monorepo"}],"aside":{"icon":"branch","title":"Distributed by design","body":"Every clone is a full repository with complete history — commit offline, branch freely, and reconcile with remotes when you are ready. Git tracks changes, resolves conflicts, and keeps every contribution accounted for.","points":["<strong>Cheatsheet</strong> — the commands you reach for daily.","<strong>Hosting</strong> — GitHub, GitLab, Gitea, and Forgejo.","<strong>Automation</strong> — fanout CI, auto-merge, cleanup."]},"stats":[{"label":"Model","value":"Distributed","icon":"network"},{"label":"First release","value":"2005","icon":"clock"},{"label":"License","value":"GPLv2","icon":"license"},{"label":"Created by","value":"Linus Torvalds","icon":"code"}],"features":[{"title":"Command cheatsheet","icon":"code","href":"#cheatsheet","body":"The full quick-reference table — init, branch, rebase, stash, bisect, reflog, and everything between."},{"title":"GitHub Actions & fanout CI","icon":"deploy","href":"#github","body":"Pages, Actions, the fanout Docker pipeline, package publishing, queue guards, and failure tracking."},{"title":"Forgejo OAuth with Supabase","icon":"lock","href":"#forgejo","body":"Wire the self-hosted forge into Supabase OIDC for automatic login and account creation."},{"title":"Auto-merge & registry cleanup","icon":"gears","href":"#auto-merge-bot-prs","body":"Gated bot PR merging for version bumps plus weekly GHCR pruning that never touches releases."}],"related":[{"title":"Docker","href":"/application/docker/","copy":"The container images that Git-driven CI builds and publishes.","icon":"package"},{"title":"Kubernetes","href":"/application/kubernetes/","copy":"Where the manifest-update PRs from CI land and deploy.","icon":"deploy"},{"title":"Linux","href":"/application/linux/","copy":"The command-line foundation every Git workflow lives on.","icon":"server"}],"theme":{"hero_bg":"https://images.unsplash.com/photo-1618401479427-c8ef9465fbe1?q=80&w=2400&auto=format&fit=crop","accent":"#34d399","accent2":"#22d3ee","btn_fg":"#06251b"},"features_eyebrow":"On this page","features_heading":"What this guide covers","related_eyebrow":"Keep exploring","related_heading":"Related applications"},"slug":"/application/git"},{"title":"Godot","description":"Godot is a cross-platform and open source game engine written in GDScript, C#, C++ and Rust.\nGodot is a free and open source game engine that offers a unique and innovative way to create 2D and 3D games for various platforms, using a node and scene system, multiple programming languages, and a community-driven development model.\n","template":"splash","tableOfContents":false,"editUrl":false,"lastUpdated":false,"prev":false,"next":false,"sidebar":{"label":"Godot","order":1310},"unsplash":"1605347086577-706b21474ed7","img":"https://images.unsplash.com/photo-1605347086577-706b21474ed7?fit=crop&w=1400&h=700&q=75","tags":["game-engine","gamedev","software"],"sem":1,"ogTitle":"Godot Guide — Open-Source 2D/3D Game Engine, Animation & Shaders","ogDescription":"Learn the Godot game engine — the node and scene system, GDScript vs C#, 2D sprite animation with AnimationPlayer, GDShader basics, and exporting to HTML5/Web with Supabase integration.","jsonld":{"type":"Article","keywords":["godot","game engine","gdscript","gdshader","godot animation","2d 3d games"],"faq":[{"question":"What is Godot?","answer":"Godot is a free, open-source game engine for building 2D and 3D games across desktop, mobile, and web. It uses a node and scene system as its core building blocks, supports GDScript, C#, and C++, and ships under the permissive MIT license with no fees or royalties."},{"question":"What languages does Godot support?","answer":"Godot's primary language is GDScript, a lightweight, Python-inspired language tightly integrated with the engine. It also supports C# (via .NET), and C++ or Rust through GDExtension for performance-critical code. Most gameplay logic is written in GDScript."},{"question":"What is the difference between nodes and scenes in Godot?","answer":"A node is the smallest building block — it handles one job like a sprite, a collision shape, or a sound. A scene is a tree of nodes saved together and reused as a unit; scenes can be instanced inside other scenes, giving Godot its modular, LEGO-like structure."},{"question":"How do I animate 2D sprites in Godot?","answer":"Use AnimatedSprite2D for frame-by-frame sprite-sheet animation with adjustable speed, looping, and finished signals, or drive any node property with an AnimationPlayer. Import a sprite sheet, slice it into frames, and play the sequence — no external rigging required."},{"question":"Can Godot export to the web?","answer":"Yes. Godot exports games to HTML5/WebAssembly so they run in a browser. You need the matching export templates installed, and platforms like itch.io host the build. Web builds can integrate services such as Supabase via a CDN client for auth and data."}]},"bento":{"badge":"application · game-engine · gamedev","title":"Nodes, scenes, and freedom,","accent":"Godot.","lede":"A free, open-source game engine for 2D and 3D games across desktop, mobile, and web — built on a modular node and scene system, scripted in GDScript, C#, or C++/Rust, and shipped under the MIT license with no fees or royalties. This guide covers animation, GDShader, and building for the web with Supabase integration.","ctas":[{"label":"Animations","href":"#animations","primary":true},{"label":"Shaders","href":"#shaders"},{"label":"Build & export","href":"#build"}],"aside":{"icon":"box","title":"LEGO-like by design","body":"Nodes are the building blocks — sprites, physics, sounds — and scenes combine them into reusable, hierarchical chunks you can instance anywhere. Community-driven and free from corporate gate-keeping.","points":["<strong>Animation</strong> — AnimationPlayer and AnimatedSprite2D built in.","<strong>Shaders</strong> — GDShader, a GLSL-derived engine language.","<strong>Web</strong> — HTML5/WASM exports with Supabase via CDN."]},"stats":[{"label":"License","value":"MIT","icon":"license"},{"label":"Language","value":"GDScript","icon":"code"},{"label":"Dimensions","value":"2D + 3D","icon":"render"},{"label":"Web export","value":"HTML5/WASM","icon":"deploy"}],"features":[{"title":"Animations","icon":"video","href":"#animations","body":"AnimationPlayer keyframes, AnimationTree state machines, and frame-by-frame sprite sheets with AnimatedSprite2D."},{"title":"Shaders","icon":"render","href":"#shaders","body":"The GDShader language — shader_type contexts, processor functions, built-in I/O, uniforms, and cel shader references."},{"title":"Build & export","icon":"deploy","href":"#build","body":"WASM configuration notes for GDExtension plus wiring a web build to Supabase for itch.io deploys."},{"title":"Guides & demos","icon":"book","href":"#guides","body":"Official HTML5 export tutorials, export-template troubleshooting, and the GDQuest demo repository."}],"related":[{"title":"Unity","href":"/application/unity/","copy":"The C# engine alternative with DOTS and Burst.","icon":"box"},{"title":"Unreal","href":"/application/unreal/","copy":"The C++ heavyweight for high-fidelity 3D projects.","icon":"render"},{"title":"Supabase","href":"/application/supabase/","copy":"Auth and data for your Godot web builds.","icon":"database"}],"theme":{"hero_bg":"https://images.unsplash.com/photo-1605347086577-706b21474ed7?q=80&w=2400&auto=format&fit=crop","accent":"#34d399","accent2":"#22d3ee","btn_fg":"#06251b"},"features_eyebrow":"On this page","features_heading":"What this guide covers","related_eyebrow":"Keep exploring","related_heading":"Related applications"},"slug":"/application/godot"},{"title":"Application Navigator","description":"The KBVE Tech Navigator is a comprehensive guide that maps out the diverse software technologies used in our projects, from foundational systems like Linux to cutting-edge applications in AI and game development, all designed to enhance collaboration and streamline workflows.\n","template":"splash","tableOfContents":false,"editUrl":false,"lastUpdated":false,"next":false,"prev":false,"unsplash":"1688413399498-e35ed74b554f","img":"https://images.unsplash.com/photo-1688413399498-e35ed74b554f?fit=crop&w=1400&h=700&q=75","sidebar":{"label":"Application Navigator","order":1},"tags":["applications","devops","guides","developers"],"ogTitle":"KBVE Application Navigator — Guides for Every Tool in the Stack","ogDescription":"Field guides for the software that powers KBVE — Linux, Docker, Kubernetes, JavaScript, Rust, Unity, and dozens more, all maintained in one open monorepo.","ogImage":"https://images.unsplash.com/photo-1688413399498-e35ed74b554f?fit=crop&w=1400&h=700&q=75","jsonld":{"type":"WebPage","breadcrumb":[{"name":"Home","path":"/"},{"name":"Applications","path":"/application/"}],"faq":[{"question":"What is the Application Navigator?","answer":"A curated set of field guides for the software KBVE runs in production — operating systems, container platforms, languages, databases, and creative tools — each with the commands, configs, and gotchas we actually use."},{"question":"How are these guides different from official docs?","answer":"They are opinionated and battle-tested. Each page distills what we learned running the tool inside the KBVE monorepo and cluster, so you get working recipes instead of exhaustive references."},{"question":"Can I contribute a guide or a fix?","answer":"Yes — every page is an MDX file in the open monorepo. Open a pull request against KBVE on GitHub and the change ships with the next deploy."},{"question":"Where do the project-specific docs live?","answer":"Application guides cover third-party tools. KBVE's own services, games, and libraries are documented under /project/ and the broader project hub at /projects/."}]},"slug":"/application/index"},{"title":"Intel NUC Talos Worker Nodes","description":"Guide for adding Intel NUC devices as Talos Linux worker nodes to the existing KBVE cluster\n","template":"splash","tableOfContents":false,"editUrl":false,"lastUpdated":false,"prev":false,"next":false,"sidebar":{"label":"Intel NUC Setup","order":150},"unsplash":"1518834107796-18cc03584b9a","img":"https://images.unsplash.com/photo-1518834107796-18cc03584b9a?fit=crop&w=1400&h=700&q=75","tags":["kubernetes","talos","homelab"],"sem":1,"ogTitle":"Intel NUC Talos Worker Nodes — Add Bare-Metal Workers to Kubernetes","ogDescription":"Step-by-step guide to add Intel NUC devices as Talos Linux worker nodes on an existing Kubernetes cluster over WireGuard — hardware prep, Talos install, key generation, joining, and troubleshooting.","jsonld":{"type":"Article","keywords":["talos linux","intel nuc","kubernetes worker node","bare metal kubernetes","wireguard","homelab cluster"],"faq":[{"question":"What is Talos Linux?","answer":"Talos Linux is a minimal, immutable, API-driven operating system purpose-built for Kubernetes. It has no shell or SSH — every node is managed declaratively through talosctl and a machine config — which makes bare-metal nodes like Intel NUCs reproducible and secure."},{"question":"Can I add bare-metal Intel NUCs to a cloud Kubernetes cluster?","answer":"Yes. This guide joins Intel NUC workers to an existing Talos control plane running on Hetzner by tunneling cluster traffic over WireGuard. Each NUC gets a unique WireGuard key and IP, applies a worker machine config, and registers as a standard worker node."},{"question":"Why use WireGuard to join remote worker nodes?","answer":"WireGuard creates an encrypted overlay network so home-based NUCs and cloud control-plane nodes communicate securely across the public internet as if on one private subnet. It is lightweight, fast, and integrates directly into the Talos machine network config."},{"question":"What are the minimum hardware requirements for a Talos NUC worker?","answer":"An Intel NUC 11th gen or newer with at least 8GB RAM (16GB recommended), a 256GB+ SSD (NVMe preferred), and gigabit Ethernet. Enable UEFI boot, disable Secure Boot, and turn on Intel VT-x/VT-d in the BIOS before installing Talos."},{"question":"How do I troubleshoot a NUC that will not join the cluster?","answer":"Check WireGuard connectivity with wg show and ping the control-plane endpoint, inspect kubelet logs via talosctl logs --nodes, and confirm the cluster secrets and keys match. Most join failures trace back to an incorrect WireGuard key or an unreachable endpoint."}]},"bento":{"badge":"application · talos · homelab","title":"Bare-metal workers,","accent":"Talos.","lede":"Add Intel NUC devices as Talos Linux worker nodes to the existing KBVE cluster on Hetzner. Cluster traffic tunnels over WireGuard, every node is managed declaratively through talosctl, and each NUC joins as a standard Kubernetes worker — from hardware prep to troubleshooting.","ctas":[{"label":"Hardware prep","href":"#phase-1-hardware-preparation","primary":true},{"label":"Install Talos","href":"#phase-2-talos-linux-installation"},{"label":"Join the cluster","href":"#phase-4-join-nucs-to-cluster"},{"label":"Troubleshooting","href":"#troubleshooting"}],"aside":{"icon":"server","title":"Homelab meets cloud","body":"Home-based NUCs and Hetzner control-plane nodes communicate over an encrypted WireGuard overlay as if on one private subnet — no shell, no SSH, just declarative machine configs.","points":["<strong>Immutable OS</strong> — Talos is API-driven with no shell or SSH.","<strong>WireGuard overlay</strong> — unique key and 10.0.0.x IP per NUC.","<strong>Declarative join</strong> — talosctl apply-config per worker."]},"stats":[{"label":"NUC generation","value":"11th+","icon":"box"},{"label":"Minimum RAM","value":"8GB","icon":"chart"},{"label":"Storage","value":"256GB NVMe","icon":"database"},{"label":"Overlay","value":"WireGuard","icon":"network"}],"features":[{"title":"Hardware requirements","icon":"box","href":"#hardware-requirements","body":"Compatible NUC models, RAM and SSD sizing, and the full assembly checklist before any software touches the box."},{"title":"Talos installation","icon":"gears","href":"#phase-2-talos-linux-installation","body":"Download and verify the ISO, flash bootable USB drives, and boot each NUC into Talos maintenance mode."},{"title":"Join the cluster","icon":"deploy","href":"#phase-4-join-nucs-to-cluster","body":"Apply the per-node worker config, verify the node registers, and test pod scheduling over the WireGuard mesh."},{"title":"Troubleshooting","icon":"alert","href":"#troubleshooting","body":"WireGuard connection failures, nodes that refuse to join, and hardware compatibility checks with talosctl."}],"related":[{"title":"WireGuard","href":"/application/wireguard/","copy":"The encrypted overlay network that links home NUCs to the cloud control plane.","icon":"lock"},{"title":"Kubernetes","href":"/application/kubernetes/","copy":"The cluster these bare-metal workers join and serve.","icon":"deploy"},{"title":"Proxmox","href":"/application/proxmox/","copy":"The other homelab pillar — virtualized nodes alongside bare metal.","icon":"server"}],"theme":{"hero_bg":"https://images.unsplash.com/photo-1518834107796-18cc03584b9a?q=80&w=2400&auto=format&fit=crop","accent":"#34d399","accent2":"#22d3ee","btn_fg":"#06251b"},"features_eyebrow":"On this page","features_heading":"What this guide covers","related_eyebrow":"Keep exploring","related_heading":"Related applications"},"slug":"/application/intel-nuc-talos"},{"title":"iOS","description":"iOS is Apple's proprietary mobile operating system that powers iPhone, iPad, and iPod Touch devices.\nBuilt on a Unix-based foundation, iOS provides a secure, tightly integrated ecosystem optimized for performance and user experience.\nThe platform enforces strict app sandboxing and code signing requirements through the Apple Developer Program.\niOS development utilizes Swift or Objective-C with the iOS SDK, Xcode IDE, and Apple's frameworks including UIKit, SwiftUI, and Foundation.\nThe platform's closed ecosystem ensures consistent hardware-software integration, enabling features like seamless iCloud sync, handoff between devices, and strict privacy controls.\niOS applications must be distributed through the App Store or via enterprise provisioning, requiring Apple Developer membership and adherence to App Store Review Guidelines.\n","template":"splash","tableOfContents":false,"editUrl":false,"lastUpdated":false,"prev":false,"next":false,"sidebar":{"label":"iOS","order":106},"unsplash":"1611472173362-3f53dbd65d80","img":"https://images.unsplash.com/photo-1611472173362-3f53dbd65d80?fit=crop&w=1400&h=700&q=75","tags":["os","mobile","ios"],"sem":1,"ogTitle":"iOS Development Guide — Code Signing, Provisioning & CI/CD","ogDescription":"Build and ship iOS apps at KBVE — Apple code signing, certificates and provisioning profiles, GitHub Actions CI/CD with macOS runners, exportOptions.plist, and UE5 iOS builds.","jsonld":{"type":"Article","keywords":["ios development","code signing","provisioning profile","apple developer","ios ci cd","react native ios"],"faq":[{"question":"What do I need to develop and distribute iOS apps?","answer":"A macOS machine with Xcode, and enrollment in the Apple Developer Program at $99/year. Membership is required to test on physical devices and distribute through the App Store. You also need a signing certificate, a provisioning profile, and a unique bundle identifier such as com.kbve.app."},{"question":"What is the difference between a certificate and a provisioning profile?","answer":"A signing certificate proves your identity to Apple and signs the app binary. A provisioning profile links that certificate, the app ID, and (for development/ad-hoc) allowed device UDIDs, authorizing where the app can run. App Store profiles do not need device registration."},{"question":"How do I sign an iOS build in CI/CD?","answer":"Store the .p12 certificate and .mobileprovision profile as base64 GitHub secrets, then in the workflow create a temporary keychain, import the decoded certificate, install the profile, and build with xcodebuild archive plus exportArchive using an exportOptions.plist. Never commit certificates to the repo."},{"question":"Can I build an unsigned iOS app for testing?","answer":"Yes. A simulator build for the iphonesimulator SDK does not require signing, so CI can produce an unsigned x86_64 build for testing. Signing is only required for device installs, TestFlight, and App Store submission using the iphoneos SDK."},{"question":"Do Unreal Engine 5 iOS builds use the same Apple setup?","answer":"Yes. UE5 iOS builds reuse the same Apple Developer certificates, provisioning profiles, and Team ID as React Native builds. The difference is the build system — UE5 uses UnrealBuildTool and RunUAT instead of xcodebuild directly, and produces larger binaries with precompiled Metal shaders."}]},"bento":{"badge":"application · mobile · ios","title":"Signed, sealed, shipped,","accent":"iOS.","lede":"Apple's tightly integrated mobile platform demands strict code signing and provisioning before anything reaches a device. This guide walks the full KBVE pipeline — certificates and profiles, GitHub secrets, CI/CD on macOS runners, local build testing, and the shared Apple setup that UE5 iOS builds reuse.","ctas":[{"label":"Code signing","href":"#code-signing-setup","primary":true},{"label":"CI/CD workflow","href":"#cicd-workflow"},{"label":"Troubleshooting","href":"#troubleshooting"},{"label":"UE5 iOS builds","href":"#unreal-engine-5-ios-builds"}],"aside":{"icon":"lock","title":"One Apple setup, every project","body":"Certificates, provisioning profiles, and the Team ID are shared infrastructure — complete the Apple Developer setup once and reuse the same credentials across React Native, UE5, and future frameworks.","points":["<strong>Certificates</strong> — .p12 exports stored as base64 secrets.","<strong>Profiles</strong> — link cert, app ID, and device UDIDs.","<strong>CI/CD</strong> — temporary keychains on macOS runners."]},"stats":[{"label":"Developer Program","value":"$99/year","icon":"key"},{"label":"Bundle ID","value":"com.kbve.app","icon":"package"},{"label":"Build tool","value":"xcodebuild","icon":"gears"},{"label":"CI runners","value":"macOS","icon":"server"}],"features":[{"title":"Code signing setup","icon":"lock","href":"#code-signing-setup","body":"Apple Developer prerequisites, development and distribution certificates, and the three flavors of provisioning profile."},{"title":"CI/CD workflow","icon":"deploy","href":"#cicd-workflow","body":"GitHub Actions on macOS runners — unsigned simulator builds, signed IPAs, keychain import, and exportOptions.plist."},{"title":"Troubleshooting","icon":"alert","href":"#troubleshooting","body":"Certificate not found, profile mismatches, signing errors, and CocoaPods cache fixes."},{"title":"UE5 iOS builds","icon":"render","href":"#unreal-engine-5-ios-builds","body":"UnrealBuildTool and RunUAT reuse the same Apple credentials — with bigger binaries and precompiled Metal shaders."}],"related":[{"title":"Android","href":"/application/android/","copy":"The other half of KBVE mobile — Gradle, keystores, and Play releases.","icon":"package"},{"title":"React Native","href":"/application/rn/","copy":"The Expo-based app these iOS builds package and ship.","icon":"code"},{"title":"Unreal Engine","href":"/application/unreal/","copy":"KBVE UE5 development — shares the Apple signing infrastructure.","icon":"render"}],"theme":{"hero_bg":"https://images.unsplash.com/photo-1611472173362-3f53dbd65d80?q=80&w=2400&auto=format&fit=crop","accent":"#34d399","accent2":"#22d3ee","btn_fg":"#06251b"},"features_eyebrow":"On this page","features_heading":"What this guide covers","related_eyebrow":"Keep exploring","related_heading":"Related applications"},"slug":"/application/ios"},{"title":"Javascript","description":"JS is a scripting language that enables dynamic content from client and server side.\n","template":"splash","tableOfContents":false,"editUrl":false,"lastUpdated":false,"prev":false,"next":false,"sidebar":{"label":"Javascript","order":401},"unsplash":"1581276879432-15e50529f34b","img":"https://images.unsplash.com/photo-1581276879432-15e50529f34b?fit=crop&w=1400&h=700&q=75","tags":["react","nodejs","software","js"],"bento":{"badge":"application · js · nodejs","title":"The king of the web,","accent":"JavaScript.","lede":"The scripting language that powers dynamic content on both client and server. This guide tours the KBVE JavaScript stack — design patterns, the NodeJS and Bun runtimes, frameworks like React, Svelte, and Astro, plus the bundlers, testers, and tooling that keep it all shipping.","ctas":[{"label":"Design patterns","href":"#design","primary":true},{"label":"NodeJS","href":"#nodejs"},{"label":"pnpm","href":"#pnpm"},{"label":"Bun","href":"#bun"},{"label":"Tools","href":"#tools"}],"aside":{"icon":"code","title":"One language, every layer","body":"From browser interactivity to server-side APIs and mobile apps with Expo, JavaScript runs the full stack — a single language across client, server, and tooling.","points":["<strong>Patterns</strong> — creational, structural, and behavioral designs.","<strong>Runtimes</strong> — NodeJS and the batteries-included Bun.","<strong>Tooling</strong> — Cypress, Playwright, Biome, and ESBuild."]},"stats":[{"label":"First released","value":1995,"icon":"clock"},{"label":"Node engine","value":"V8","icon":"bolt"},{"label":"Package registry","value":"npm","icon":"package"},{"label":"Standard","value":"ECMAScript","icon":"book"}],"features":[{"title":"Design patterns","icon":"gears","href":"#design","body":"Creational, structural, and behavioral patterns — factories, builders, singletons, and adapters in plain JavaScript."},{"title":"NodeJS and Bun","icon":"server","href":"#nodejs","body":"Install Node with nvm on Ubuntu, Windows, or MacOS — then meet Bun, the fast all-in-one runtime, bundler, and package manager."},{"title":"pnpm workspaces","icon":"package","href":"#pnpm","body":"The fast, disk-efficient package manager behind the KBVE monorepo — version pinning, workspaces, and pnpm 11's allowBuilds."},{"title":"Frameworks and UI","icon":"code","href":"#react","body":"React, Svelte with Threlte, Astro islands, MUI components, and Lottie animations for the front end."},{"title":"Testing and tooling","icon":"check","href":"#tools","body":"Cypress and Playwright for end-to-end tests, Biome for linting and formatting, Size Limit for bundle budgets."}],"related":[{"title":"CSS","href":"/application/css/","copy":"TailwindCSS setup, the button gallery, forms, and modern CSS features.","icon":"zap"},{"title":"React Native","href":"/application/rn/","copy":"JavaScript on mobile — the KBVE React Native and Expo stack.","icon":"package"},{"title":"Git","href":"/application/git/","copy":"Version control and the CI/CD pipelines behind every JS project.","icon":"branch"}],"theme":{"hero_bg":"https://images.unsplash.com/photo-1581276879432-15e50529f34b?q=80&w=2400&auto=format&fit=crop","accent":"#34d399","accent2":"#22d3ee","btn_fg":"#06251b"},"features_eyebrow":"On this page","features_heading":"What this guide covers","related_eyebrow":"Keep exploring","related_heading":"Related applications"},"slug":"/application/javascript"},{"title":"Kubernetes","description":"Kubernetes is a container orchestration system for VMs in a cloud.\n","template":"splash","tableOfContents":false,"editUrl":false,"lastUpdated":false,"prev":false,"next":false,"sidebar":{"label":"Kubernetes","order":101},"unsplash":"1610429559733-a222e865f34a","img":"https://images.unsplash.com/photo-1610429559733-a222e865f34a?fit=crop&w=1400&h=700&q=75","bento":{"badge":"application · k8s · cloud","title":"Orchestrate everything,","accent":"Kubernetes.","lede":"The CNCF-certified container orchestration system that automates deployment, scaling, and management across a hybrid cloud. This guide collects the KBVE cluster playbook — k3s and Talos operations, a kubectl cheatsheet, namespace hygiene, KubeVirt, Firecracker microVMs, and sealed secrets.","ctas":[{"label":"Talos operations","href":"#talos","primary":true},{"label":"k3s install","href":"#k3s"},{"label":"Cheatsheet","href":"#cheatsheet"},{"label":"Namespace audit","href":"#namespace-orphan-check"}],"aside":{"icon":"deploy","title":"The KBVE production cluster","body":"KBVE runs Kubernetes on Talos Linux — an immutable, API-only OS with no SSH — and delivers every application through ArgoCD GitOps. These notes are the operational memory of that cluster.","points":["<strong>Talos</strong> — upgrades, Longhorn pre-drain, recovery.","<strong>GitOps</strong> — ArgoCD reconciles apps from Git.","<strong>VMs</strong> — KubeVirt and Firecracker on the same nodes."]},"stats":[{"label":"Governance","value":"CNCF","icon":"crown"},{"label":"KBVE node OS","value":"Talos Linux","icon":"server"},{"label":"Delivery","value":"ArgoCD GitOps","icon":"branch"},{"label":"CLI","value":"kubectl","icon":"code"}],"features":[{"title":"Talos operations","icon":"server","href":"#talos","body":"Image Factory schematics, the full upgrade procedure with Longhorn pre-drain, stuck-upgrade recovery, and known post-upgrade gotchas."},{"title":"k3s","icon":"bolt","href":"#k3s","body":"Install the lightweight distribution on Ubuntu, wire up kubectl, and connect agents to the master with the node token."},{"title":"Cheatsheet","icon":"code","href":"#cheatsheet","body":"The kubectl commands you reach for daily — cluster info, namespaces, services, deployments, and storage classes."},{"title":"Namespace orphan check","icon":"eye","href":"#namespace-orphan-check","body":"A read-only audit script that flags empty namespaces whose stale secrets, ingresses, and SecretStores pollute controller logs."}],"related":[{"title":"Longhorn","href":"/application/longhorn/","copy":"Distributed block storage backing the cluster's persistent volumes.","icon":"database"},{"title":"ArgoCD","href":"/application/argocd/","copy":"GitOps continuous delivery for every app on the cluster.","icon":"branch"},{"title":"Docker","href":"/application/docker/","copy":"The container fundamentals underneath every pod.","icon":"package"}],"theme":{"hero_bg":"https://images.unsplash.com/photo-1610429559733-a222e865f34a?q=80&w=2400&auto=format&fit=crop","accent":"#34d399","accent2":"#22d3ee","btn_fg":"#06251b"},"features_eyebrow":"On this page","features_heading":"What this guide covers","related_eyebrow":"Keep exploring","related_heading":"Related applications"},"slug":"/application/kubernetes"},{"title":"Linux","description":"Linux has become the heartbeat of modern infrastructure, driving cloud servers, Kubernetes clusters, desktops, and even the tiniest embedded devices across the world.\nIt offers unmatched flexibility, security, and performance for developers, system administrators, and tinkerers alike.\nWhether you're managing containers, automating infrastructure, or exploring the command line, Linux remains the foundation for innovation in the open-source ecosystem.\nThis section explores its distributions, tools, and best practices within the KBVE stack.\n","template":"splash","tableOfContents":false,"editUrl":false,"lastUpdated":false,"prev":false,"next":false,"sidebar":{"label":"Linux","order":2},"unsplash":"1695820716792-bb317bc02822","img":"https://images.unsplash.com/photo-1695820716792-bb317bc02822?fit=crop&w=1400&h=700&q=75","tags":["os","linux","sysadmin"],"sem":1,"ogTitle":"Linux Guide — LVM Storage, ZSH Setup & Essential Commands","ogDescription":"Practical Linux administration — extend storage with LVM, set up ZSH with Oh My Zsh and Powerlevel10k, and reference the essential command-line toolkit for servers and desktops.","jsonld":{"type":"Article","keywords":["linux","lvm","zsh","command line","system administration"],"faq":[{"question":"How do I extend a disk partition on Linux with LVM?","answer":"Grow the partition with growpart, update the physical volume with pvresize, extend the logical volume using lvextend -l +100%FREE, then resize the filesystem with resize2fs (EXT4) or xfs_growfs (XFS). Verify with df -h."},{"question":"What is LVM in Linux?","answer":"Logical Volume Management is a storage abstraction layer that lets you resize, extend, or move volumes without repartitioning. It is especially useful in virtualized environments like Proxmox where disk size can grow dynamically."},{"question":"How do I change my default shell to ZSH?","answer":"Install ZSH with your package manager, then run chsh -s $(which zsh) and log out and back in. Many users add Oh My Zsh and a theme like Powerlevel10k for autocompletion, history, and prompt customization."},{"question":"What is the difference between ext4 and XFS when resizing?","answer":"Both are Linux filesystems, but they grow with different tools. Use resize2fs to expand an ext4 filesystem and xfs_growfs to expand XFS. XFS can only grow, never shrink, so plan capacity accordingly."}]},"bento":{"badge":"application · os · sysadmin","title":"The quiet force,","accent":"Linux.","lede":"The heartbeat of modern infrastructure — cloud servers, Kubernetes clusters, desktops, and embedded devices alike. This guide covers the everyday sysadmin skills the KBVE stack leans on: extending storage with LVM, a productive ZSH shell, and the command-line essentials.","ctas":[{"label":"Essential commands","href":"#essential-commands","primary":true},{"label":"LVM storage","href":"#lvm"},{"label":"ZSH setup","href":"#zsh"}],"aside":{"icon":"server","title":"Everywhere, often invisible","body":"From the servers powering your favorite websites to the clusters orchestrating entire cloud platforms — understanding Linux means understanding the language of modern computing.","points":["<strong>Storage</strong> — resize volumes live with LVM.","<strong>Shell</strong> — ZSH with Oh My Zsh and Powerlevel10k.","<strong>Reference</strong> — the commands you reach for daily."]},"stats":[{"label":"Storage layer","value":"LVM","icon":"database"},{"label":"Shell","value":"ZSH","icon":"code"},{"label":"Init system","value":"systemd","icon":"gears"},{"label":"Kernel license","value":"GPLv2","icon":"license"}],"features":[{"title":"Essential commands","icon":"code","href":"#essential-commands","body":"The quick-reference toolkit — files, permissions, processes, systemd services, disk usage, and search."},{"title":"LVM extension","icon":"database","href":"#lvm","body":"Grow partitions, physical volumes, and logical volumes without disrupting a running system — ideal under Proxmox."},{"title":"ZSH + Powerlevel10k","icon":"zap","href":"#zsh","body":"A faster, more expressive terminal — Oh My Zsh, themes, fonts, autosuggestions, and syntax highlighting."},{"title":"Permissions first","icon":"shield","body":"Most \"works for root, not the app\" bugs are ownership problems — fix with chown and chmod, not by running everything as root."}],"related":[{"title":"Proxmox","href":"/application/proxmox/","copy":"The virtualization platform where LVM resizing pays off most.","icon":"server"},{"title":"Kubernetes","href":"/application/kubernetes/","copy":"Cluster orchestration on top of the Linux foundation.","icon":"deploy"},{"title":"Docker","href":"/application/docker/","copy":"Containers, images, and Compose on the Linux kernel.","icon":"package"}],"theme":{"hero_bg":"https://images.unsplash.com/photo-1695820716792-bb317bc02822?q=80&w=2400&auto=format&fit=crop","accent":"#34d399","accent2":"#22d3ee","btn_fg":"#06251b"},"features_eyebrow":"On this page","features_heading":"What this guide covers","related_eyebrow":"Keep exploring","related_heading":"Related applications"},"slug":"/application/linux"},{"title":"Longhorn","description":"Longhorn is a cloud-native, distributed block storage system for Kubernetes that delivers persistent,\nreplicated volumes with snapshots and backups. This guide covers the architecture, installation,\nStorageClass configuration, and NFS setup.\n","template":"splash","tableOfContents":false,"editUrl":false,"lastUpdated":false,"prev":false,"next":false,"sidebar":{"label":"Longhorn","order":1009},"unsplash":"1575405380157-1fc4e4b3f227","img":"https://images.unsplash.com/photo-1575405380157-1fc4e4b3f227?fit=crop&w=1400&h=700&q=75","tags":["storage","kubernetes","cloud-native"],"sem":1,"ogTitle":"Longhorn Guide — Distributed Block Storage for Kubernetes","ogDescription":"Learn Longhorn, the cloud-native distributed block storage system for Kubernetes — how replication and snapshots work, install via Helm, configure a StorageClass, and set up NFS-backed backups.","jsonld":{"type":"Article","keywords":["longhorn","kubernetes storage","distributed block storage","persistent volume","storageclass","volume replication"],"faq":[{"question":"What is Longhorn?","answer":"Longhorn is a cloud-native, distributed block storage system for Kubernetes, originally by Rancher and now a CNCF project. It provides persistent volumes with synchronous replication across nodes, snapshots, and backups to external targets like NFS or S3, all managed through a Kubernetes-native UI and CRDs."},{"question":"How does Longhorn replicate data?","answer":"Longhorn creates a replica of each volume on multiple nodes and writes to them synchronously, so the volume survives a node failure. The number of copies is set by the numberOfReplicas parameter on the StorageClass — for example 3 for high availability, or 1 for single-node or non-critical data."},{"question":"How do I install Longhorn on Kubernetes?","answer":"The recommended path is Helm — add the longhorn repo, then helm install longhorn longhorn/longhorn --namespace longhorn-system --create-namespace. Every node needs open-iscsi installed and a compatible kernel. You can also apply the official YAML manifest directly with kubectl."},{"question":"Does Longhorn support backups?","answer":"Yes. Longhorn takes in-cluster snapshots of a volume and can back them up to an external backup target such as an NFS share or an S3-compatible bucket. Backups are incremental after the first full copy and can be restored to a new volume in the same or another cluster."},{"question":"What is a Longhorn StorageClass?","answer":"A StorageClass tells Kubernetes to provision volumes with Longhorn's CSI driver (driver.longhorn.io) and carries parameters like numberOfReplicas, staleReplicaTimeout, fsType, and dataLocality. Marking it the default class lets PersistentVolumeClaims use Longhorn automatically without naming it."}]},"bento":{"badge":"application · storage · kubernetes","title":"Block storage that survives,","accent":"Longhorn.","lede":"A cloud-native, distributed block storage system for Kubernetes that turns the local disks across your nodes into replicated, persistent volumes — with snapshots and backups to NFS or S3. This guide covers installation via Helm, NFS setup, the storage namespace, and the StorageClass that provisions it all.","ctas":[{"label":"Install via Helm","href":"#install","primary":true},{"label":"NFS setup","href":"#nfs"},{"label":"StorageClass","href":"#longhorn-uno"}],"aside":{"icon":"database","title":"Replicated by default","body":"Every volume is synchronously replicated across nodes, so a single node failure doesn't lose data. Snapshots stay in-cluster; backups ship incrementally to NFS or S3 targets and restore anywhere.","points":["<strong>Replication</strong> — synchronous copies via numberOfReplicas.","<strong>Backups</strong> — incremental, to NFS or S3 targets.","<strong>CSI native</strong> — provisioned through driver.longhorn.io."]},"stats":[{"label":"Governance","value":"CNCF","icon":"crown"},{"label":"CSI driver","value":"driver.longhorn.io","icon":"gears"},{"label":"Node prerequisite","value":"open-iscsi","icon":"alert"},{"label":"Backup targets","value":"NFS / S3","icon":"box"}],"features":[{"title":"Install","icon":"deploy","href":"#install","body":"The Helm install path, plus the open-iscsi prerequisite that trips up most first attempts with volumes stuck in Attaching."},{"title":"NFS setup","icon":"server","href":"#nfs","body":"Prepare an Ubuntu host with nfs-common and nfs-kernel-server for NFS-backed storage and backup targets."},{"title":"Longhorn Uno StorageClass","icon":"settings","href":"#longhorn-uno","body":"The KBVE StorageClass — replica count, data locality, reclaim policy, and the parameters worth tuning."},{"title":"Namespace","icon":"box","href":"#namespace","body":"Create the dedicated storage namespace that holds production data resources."}],"related":[{"title":"Kubernetes","href":"/application/kubernetes/","copy":"The cluster orchestration layer Longhorn provisions volumes for.","icon":"deploy"},{"title":"Proxmox","href":"/application/proxmox/","copy":"Virtualization host layer underneath many KBVE nodes.","icon":"server"},{"title":"Linux","href":"/application/linux/","copy":"LVM, filesystems, and the sysadmin skills behind node disks.","icon":"code"}],"theme":{"hero_bg":"https://images.unsplash.com/photo-1575405380157-1fc4e4b3f227?q=80&w=2400&auto=format&fit=crop","accent":"#34d399","accent2":"#22d3ee","btn_fg":"#06251b"},"features_eyebrow":"On this page","features_heading":"What this guide covers","related_eyebrow":"Keep exploring","related_heading":"Related applications"},"slug":"/application/longhorn"},{"title":"Machine Learning & Artificial Intelligence","description":"Get ready to explore the exciting world of Machine Learning and Artificial Intelligence.\nOur guide covers everything from basic principles and key algorithms to the latest models and tools.\nWhether you're just starting out or already have some experience, you'll find valuable insights and practical tips to help you navigate this dynamic field.\nLearn about the newest advancements, popular frameworks, and real-world applications.\nPerfect for anyone eager to deepen their understanding and skills in AI and ML, this resource is your go-to for all things AI and ML.\n","template":"splash","tableOfContents":false,"editUrl":false,"lastUpdated":false,"prev":false,"next":false,"sidebar":{"label":"Machine Learning & AI","order":300},"unsplash":"1620712943543-bcc4688e7485","img":"https://images.unsplash.com/photo-1620712943543-bcc4688e7485?fit=crop&w=1400&h=700&q=75","tags":["ai"],"prompt-index":"example","prompts":[{"ulid":"01J05G1PCD6ZXPNHEFBDYHYS77","name":"Role Examples","description":"Common role examples for text transformers.","items":["Act as a javascript console","Act as an excel sheet","Act as a HR interviewer","Act as an advertiser","Act as a publisher","Act as a music teacher","Act as a relationship coach","Act as a World of Warcraft player and limit the response to 50 characters"],"task":"Define the role for the AI model and prompt it to perform actions specific to that role. For example, you can ask it to act as a JavaScript console and provide code snippets, or act as a music teacher and give lessons.\n","tools":[{"type":"function","function":{"name":"get_role_specific_info","description":"Get specific information for a given role","parameters":{"type":"object","properties":{"role_name":{"type":"string","description":"The name of the role (e.g. 'JavaScript console')"}},"required":["role_name"]}}}],"output":"text","pathways":{"initial":{"prompt":"Choose a role for the AI to act as:","next":[{"condition":"javascript console","action":"pathway1"},{"condition":"excel sheet","action":"pathway2"}]},"pathway1":{"prompt":"You chose JavaScript console. Provide a JavaScript code snippet:","next":[{"condition":"valid js code","action":"pathway3"},{"condition":"invalid js code","action":"pathway4"}]},"pathway2":{"prompt":"You chose Excel sheet. What operation would you like to perform?","next":[{"condition":"create sheet","action":"pathway5"},{"condition":"edit sheet","action":"pathway6"}]}}},{"ulid":"01J05G2G0NWW48HEV485DY63W5","name":"Rewrite Prompt Example","description":"Example task to rewrite user-provided text with human-like perplexity and burstiness.","items":["Maintain consistent and coherent narrative","Incorporate unique perspectives and creativity","Include personal anecdotes and emotions","Understand and incorporate nuanced context","Organize content with purposeful structure","Include nuanced inconsistencies and idiosyncrasies"],"task":"Task: Rewrite user-provided text with the most human-like perplexity and burstiness.\n\nObjectives: Prompt the user to input a block of text. Use a language model to rewrite the text with the most human-like perplexity and burstiness. Provide the rewritten text to the user.\n\nRules: Keep burstiness as low as possible. Keep perplexity as low as possible. Go to extraordinary lengths to make the text more human-like. Burstiness is on a scale of 0-100. Perplexity is on a scale of 0-100. Burstiness starts at 0. Perplexity starts at 0. Don’t answer for user.\n\nRoles: AI model responsible for rewriting the text. User: Provides the initial block of text to be rewritten.\n\nStrategy: Use an AI model to generate the most human-like perplexity and burstiness. Prompt the user to input a block of text. Provide the rewritten text to the user. Additional Instructions: Ask the user to input a block of text that they would like to be rewritten. Use a language model to generate a rewritten version of the text that has the most human-like perplexity and burstiness. Provide the rewritten text to the user. Be sure to explain to the user the concept of perplexity and burstiness and how it affects the text. Provide an option for the user to adjust the level of perplexity and burstiness if desired. Perplexity and Burstiness start at 0.\n","tools":[{"type":"function","function":{"name":"analyze_text","description":"Analyze the provided text for perplexity and burstiness","parameters":{"type":"object","properties":{"text":{"type":"string","description":"The text to be analyzed"}},"required":["text"]}}}],"output":"text","pathways":{"initial":{"prompt":"Please input a block of text you want rewritten:","next":[{"condition":"text provided","action":"pathway1"},{"condition":"no text provided","action":"pathway2"}]},"pathway1":{"prompt":"Rewrite the provided text focusing on human-like perplexity and burstiness.","next":[{"condition":"good rewrite","action":"pathway3"},{"condition":"bad rewrite","action":"pathway4"}]},"pathway2":{"prompt":"No text provided. Please input a block of text to proceed.","next":[{"condition":"text provided","action":"pathway1"}]}}},{"ulid":"01J05G2X0S673J53HWCPE6831J","name":"Rewrite Prompt Follow-Up","description":"Follow-up advice for the rewrite prompt to generate better content.","items":["Consistency and Coherence - Human writing tends to maintain a consistent and coherent narrative throughout, reflecting a deeper understanding of context and topic.","Creativity and Originality - While AI can be creative, humans often bring unique perspectives, experiences, and creativity to their writing that might be harder for AI to replicate authentically.","Personal Touch - Human writing may include personal anecdotes, emotions, or subjective elements that are reflective of individual experiences and perspectives.","Context Understanding - Humans excel at understanding nuanced context and incorporating it into their writing, whereas AI might sometimes produce contextually inaccurate or mismatched information.","Purposeful Structure - Human writers often have a purposeful structure in their content, carefully organizing information for clarity and impact. AI might generate text that lacks intentional structure.","Inconsistencies - Human writing may include nuanced inconsistencies, errors, or idiosyncrasies that reflect the natural variability present in human language, while AI-generated content may exhibit a higher degree of consistency."],"task":"Provide the rewritten text to the user with a focus on consistency, coherence, creativity, originality, personal touch, context understanding, purposeful structure, and natural inconsistencies. Explain how these factors contribute to making the text more human-like.\n","tools":[{"type":"function","function":{"name":"evaluate_text_quality","description":"Evaluate the quality of the rewritten text","parameters":{"type":"object","properties":{"text":{"type":"string","description":"The text to be evaluated"}},"required":["text"]}}}],"output":"text","pathways":{"initial":{"prompt":"Here is the rewritten text:","next":[{"condition":"positive feedback","action":"pathway1"},{"condition":"negative feedback","action":"pathway2"}]},"pathway1":{"prompt":"Great! If you need further assistance, feel free to ask.","next":[]},"pathway2":{"prompt":"What specific areas need improvement?","next":[{"condition":"identified areas","action":"pathway3"}]},"pathway3":{"prompt":"Let's focus on improving those areas in the rewrite.","next":[]}}},{"ulid":"01J0YEVWK8ZA1Z0Q8B0GDG6871","name":"JSON Output Example","description":"Task to create a JSON output with a provided data set.","items":["Title - The title of the song with artist or band.","Genre - The genre of the song, which must fit one of the specified genres - dnb, chillstep, lofihiphop, nujazz, electroswing, edm, rock, jrock, studybeats, anime","YTID - The YouTube ID extracted from the provided YouTube link"],"task":"Create a JSON output for a given dataset including a song's title with the band/artist, genre (selected from the specified set), and YouTube ID.\n\nObjectives: Prompt the user to input a song title with the band/artist within the title, select a genre from the specified set, and provide a YouTube link. Extract the YouTube ID from the link and generate a JSON output containing the following keys: \"title\", \"genre\", and \"youtube_id\".\n\nRules: \n  - The genre must be one of the specified genres: dnb, chillstep, lofihiphop, nujazz, electroswing, edm, rock, jrock, studybeats, anime\n  - The YouTube link must be valid and the YouTube ID must be correctly extracted.\n  - The JSON output must use the exact keys: \"title\", \"genre\", and \"youtube_id\".\n  - The output must be in valid JSON format, not Python code or any other format.\n\nExample JSON Output:\nYour response should be in the following JSON format:\n```json\n{\n  \"title\": \"<Song Title with Artist/Band>\",\n  \"genre\": \"<specified_genre>\",\n  \"youtube_id\": \"<valid_youtube_id>\"\n}\n```\n\nNote: Ensure that your output is a valid JSON object, not Python code or any other format.\n","tools":[{"type":"function","function":{"name":"create_json_output","description":"Create JSON output for the provided dataset","parameters":{"type":"object","properties":{"title":{"type":"string","description":"The title of the song with artist or band name"},"genre":{"type":"string","description":"The genre of the song"},"youtube_link":{"type":"string","description":"The YouTube link of the song"}},"required":["title","genre","youtube_link"]}}}],"output":"json","pathways":{"initial":{"prompt":"Please provide the song title, genre, and YouTube link:","next":[{"condition":"data provided","action":"pathway1"},{"condition":"no data provided","action":"pathway2"}]},"pathway1":{"prompt":"Generating JSON output for the provided data.","next":[]},"pathway2":{"prompt":"Incomplete data. Please provide the song title, genre, and YouTube link to proceed.","next":[{"condition":"data provided","action":"pathway1"}]}}}],"bento":{"badge":"application · ai · ml","title":"Teach the machine,","accent":"ML & AI.","lede":"A reference guide to the vast realm of machine learning and artificial intelligence — from computational foundations and key algorithms to GPT models, Groq, LLaMa, Stable Diffusion, prompt engineering, and data-processing subagent pipelines used across the KBVE stack.","ctas":[{"label":"ML foundations","href":"#ml","primary":true},{"label":"GPT models","href":"#gpt"},{"label":"Prompt engineering","href":"#prompt-engineering"},{"label":"Subagent pipelines","href":"#data-processing-subagents"}],"aside":{"icon":"activity","title":"One stop for all things AI","body":"An ever growing list of mL and AI services, concepts, and ideas — covering the theory behind computational training and the models and tools you can put to work today.","points":["<strong>Foundations</strong> — supervised, unsupervised, and reinforcement learning.","<strong>Models</strong> — GPT, LLaMa, Groq, and Stable Diffusion.","<strong>Practice</strong> — prompt engineering and data-processing subagents."]},"stats":[{"label":"Core language","value":"Python","icon":"code"},{"label":"Learning paradigms","value":"3","icon":"branch"},{"label":"AI coined","value":"1956","icon":"calendar"},{"label":"Frameworks","value":"PyTorch · TensorFlow","icon":"package"}],"features":[{"title":"ML foundations","icon":"book","href":"#ml","body":"The math, computer science, and training paradigms you need before diving into frameworks."},{"title":"Models & platforms","icon":"bolt","href":"#gpt","body":"GPT variants, Groq's accelerated API, Meta's LLaMa, and Stable Diffusion image generation."},{"title":"Prompt engineering","icon":"message","href":"#prompt-engineering","body":"Roles, chaining, rewrite tasks, and the Zod-validated Prompt Engine schema."},{"title":"Data-processing subagents","icon":"gears","href":"#data-processing-subagents","body":"Build deterministic LLM pipelines with mdream pre-processing, runbooks, and validation gates."}],"related":[{"title":"Python","href":"/application/python/","copy":"The core language behind PyTorch, TensorFlow, and Scikit-Learn.","icon":"code"},{"title":"Javascript","href":"/application/javascript/","copy":"The tooling ecosystem behind mdream and agent pipelines.","icon":"zap"},{"title":"Supabase","href":"/application/supabase/","copy":"Store and serve the structured data your models produce.","icon":"database"}],"theme":{"hero_bg":"https://images.unsplash.com/photo-1620712943543-bcc4688e7485?q=80&w=2400&auto=format&fit=crop","accent":"#34d399","accent2":"#22d3ee","btn_fg":"#06251b"},"features_eyebrow":"On this page","features_heading":"What this guide covers","related_eyebrow":"Keep exploring","related_heading":"Related applications"},"slug":"/application/ml"},{"title":"n8n","description":"n8n is a fair-code, node-based workflow automation tool that connects APIs, databases, and services without\nwriting glue code. This guide covers core concepts, self-hosting with Docker, building your first workflow,\nand using AI agent nodes.\n","template":"splash","tableOfContents":false,"editUrl":false,"lastUpdated":false,"prev":false,"next":false,"sidebar":{"label":"N8N","order":1040},"unsplash":"1615014672571-461f4f80db5a","img":"https://images.unsplash.com/photo-1615014672571-461f4f80db5a?fit=crop&w=1400&h=700&q=75","tags":["automation","workflow","self-hosted"],"sem":1,"ogTitle":"n8n Guide — Workflow Automation, Self-Hosting & AI Agents","ogDescription":"Learn n8n, the fair-code node-based automation tool — core concepts (nodes, triggers, workflows), self-hosting with Docker, building your first workflow, and connecting AI agent nodes.","jsonld":{"type":"Article","keywords":["n8n","workflow automation","node-based automation","self-hosted automation","n8n docker","ai agents"],"faq":[{"question":"What is n8n?","answer":"n8n is a fair-code, node-based workflow automation tool that connects apps, APIs, databases, and services into automated workflows. You build flows visually by wiring nodes together on a canvas, with the option to drop into JavaScript or Python for custom logic. It can be self-hosted or used as a managed cloud service."},{"question":"Is n8n free and open source?","answer":"n8n is fair-code, released under the Sustainable Use License. You can self-host it for free, including commercial internal use. It is source-available rather than strictly OSI open source, and n8n also offers a paid cloud and enterprise tier."},{"question":"How do I self-host n8n?","answer":"The simplest route is Docker. Run the n8nio/n8n image with a persisted volume for the SQLite or Postgres database, set N8N_HOST and a webhook URL, and expose port 5678 behind a reverse proxy with TLS. For production, use Postgres and, at scale, queue mode with a Redis-backed worker pool."},{"question":"What is the difference between a node and a workflow in n8n?","answer":"A node is a single step — a trigger, an API call, a transformation, or a condition. A workflow is the connected graph of nodes that runs start to finish. Data flows between nodes as JSON items, and each node operates on the items it receives from the previous one."},{"question":"Can n8n run AI agents?","answer":"Yes. n8n ships AI/LangChain nodes including an AI Agent node that can call language models, use tools, and query vector stores. You can wire an agent to your workflow data and other nodes, letting it take actions across your connected services."}]},"bento":{"badge":"application · automation · workflow","title":"Wire everything together,","accent":"n8n.","lede":"A fair-code, node-based workflow automation tool — connect your CRM, email, databases, and IoT devices on a visual canvas instead of writing glue code, and drop into JavaScript or Python when a step needs custom logic. This guide covers the core concepts, self-hosting with Docker, your first workflow, and AI agent nodes.","ctas":[{"label":"Core concepts","href":"#concepts","primary":true},{"label":"Self-host","href":"#self-host"},{"label":"First workflow","href":"#first-workflow"},{"label":"AI agents","href":"#agents"}],"aside":{"icon":"route","title":"Your data, your infrastructure","body":"Because n8n is self-hostable, your data and credentials stay on your own infrastructure — unlike fully managed SaaS automation platforms.","points":["<strong>Nodes</strong> — triggers, API calls, transforms, conditions.","<strong>Items</strong> — data flows node to node as JSON.","<strong>Agents</strong> — AI/LangChain nodes with tools and vector stores."]},"stats":[{"label":"License","value":"Fair-code","icon":"license"},{"label":"Default port","value":"5678","icon":"network"},{"label":"Custom code","value":"JS · Python","icon":"code"},{"label":"AI nodes","value":"LangChain","icon":"zap"}],"features":[{"title":"Concepts","icon":"book","href":"#concepts","body":"Nodes, triggers, workflows, items, credentials, and executions — the vocabulary of the canvas."},{"title":"Self-Host","icon":"server","href":"#self-host","body":"A Docker Compose deployment with persisted data, plus the Postgres and queue-mode path for production."},{"title":"First Workflow","icon":"route","href":"#first-workflow","body":"Add a trigger, wire action nodes, map data with expressions, then test and activate."},{"title":"Agents","icon":"zap","href":"#agents","body":"The AI Agent node — call language models, use tools, and query vector stores across your services."}],"related":[{"title":"Docker","href":"/application/docker/","copy":"The container runtime behind the simplest n8n deployment.","icon":"package"},{"title":"Redis","href":"/application/redis/","copy":"Backs n8n's queue mode for concurrent workflow executions.","icon":"database"},{"title":"Kubernetes","href":"/application/kubernetes/","copy":"Run n8n and its worker pool at cluster scale.","icon":"deploy"}],"theme":{"hero_bg":"https://images.unsplash.com/photo-1615014672571-461f4f80db5a?q=80&w=2400&auto=format&fit=crop","accent":"#34d399","accent2":"#22d3ee","btn_fg":"#06251b"},"features_eyebrow":"On this page","features_heading":"What this guide covers","related_eyebrow":"Keep exploring","related_heading":"Related applications"},"slug":"/application/n8n"},{"title":"Nginx","description":"Nginx is a high-performance web server, reverse proxy, and load balancer used to serve static content,\nterminate TLS, and route traffic to upstream applications. This guide covers a minimal server block,\na wildcard virtual host, and the KBVE reverse-proxy configuration.\n","template":"splash","tableOfContents":false,"editUrl":false,"lastUpdated":false,"prev":false,"next":false,"sidebar":{"label":"Nginx","order":1041},"unsplash":"1551609189-eba71b3a8566","img":"https://images.unsplash.com/photo-1551609189-eba71b3a8566?fit=crop&w=1400&h=700&q=75","tags":["network","webserver","reverse-proxy"],"sem":1,"ogTitle":"Nginx Configuration Guide — Reverse Proxy, TLS & Virtual Hosts","ogDescription":"Practical Nginx configuration examples — a minimal server block, wildcard virtual hosts, and a reverse proxy that terminates TLS and forwards to upstream apps.","jsonld":{"type":"Article","keywords":["nginx","reverse proxy","web server","load balancer","tls termination"],"faq":[{"question":"What is Nginx used for?","answer":"Nginx is a web server that also works as a reverse proxy, load balancer, and TLS terminator. It serves static files directly and forwards dynamic requests to upstream application servers."},{"question":"Where is the main Nginx configuration file?","answer":"The primary file is /etc/nginx/nginx.conf. Site-specific server blocks usually live in /etc/nginx/conf.d/ or /etc/nginx/sites-available/ and are enabled by symlinking into sites-enabled."},{"question":"How do I reload Nginx without dropping connections?","answer":"Run nginx -t to validate the configuration, then nginx -s reload (or systemctl reload nginx). A reload applies new config with a graceful worker restart and no dropped connections, unlike a full restart."},{"question":"What is a reverse proxy in Nginx?","answer":"A reverse proxy accepts client requests and forwards them to one or more backend servers using proxy_pass. Nginx handles TLS, caching, and load balancing in front of the application, which never faces the client directly."},{"question":"How do I load balance across multiple servers with Nginx?","answer":"Define an upstream block listing each backend server, then point proxy_pass at that upstream. Nginx defaults to round-robin and also supports least_conn and ip_hash. Use weight, backup, and max_fails to tune distribution and failover."},{"question":"What causes a 502 Bad Gateway error in Nginx?","answer":"A 502 means Nginx reached the proxy_pass target but received no valid response — usually the upstream application is down or listening on a different port or socket. Verify the backend with curl on the host and check the Nginx error log."},{"question":"How do I enable Gzip compression in Nginx?","answer":"Set gzip on and list the MIME types to compress with gzip_types (text/html is always compressed). Combine it with expires and Cache-Control headers on static assets to reduce payload size and improve Core Web Vitals."}]},"bento":{"badge":"application · webserver · proxy","title":"The traffic director,","accent":"Nginx.","lede":"A high-performance web server, reverse proxy, and load balancer that serves static content, terminates TLS, and routes traffic to upstream applications. This guide walks through a minimal server block, a wildcard virtual host, the KBVE reverse-proxy pattern, and the tuning that keeps it all fast and secure.","ctas":[{"label":"Configuration","href":"#nginx-configuration","primary":true},{"label":"Load balancing","href":"#load-balancing"},{"label":"Security headers","href":"#security-headers"},{"label":"Troubleshooting","href":"#troubleshooting"}],"aside":{"icon":"network","title":"One instance, many hosts","body":"A single Nginx instance can front dozens of virtual hosts, each defined by a server block that matches on server_name and port — serving static assets from disk while proxying dynamic requests upstream.","points":["<strong>Reverse proxy</strong> — terminate TLS and forward with proxy_pass.","<strong>Load balancer</strong> — round-robin, least_conn, and ip_hash.","<strong>Safe reloads</strong> — nginx -t then a graceful reload."]},"stats":[{"label":"Reload","value":"Graceful","icon":"gears"},{"label":"Config root","value":"/etc/nginx","icon":"settings"},{"label":"TLS","value":"Terminated","icon":"lock"},{"label":"Balancing","value":"Round-robin","icon":"route"}],"features":[{"title":"Nginx configuration","icon":"code","href":"#nginx-configuration","body":"Three configs in rising complexity — a minimal static block, a wildcard virtual host, and the KBVE reverse proxy with TLS."},{"title":"Load balancing","icon":"route","href":"#load-balancing","body":"Upstream pools with weight, backup, least_conn, and ip_hash for distribution, failover, and sticky sessions."},{"title":"Gzip and caching","icon":"zap","href":"#performance-gzip-caching","body":"Compression and immutable cache headers — the highest-impact, lowest-effort wins for Core Web Vitals."},{"title":"Security headers","icon":"shield","href":"#security-headers","body":"Baseline hardening against clickjacking, MIME sniffing, and mixed content, plus a careful approach to HSTS."}],"related":[{"title":"Traefik","href":"/application/traefik/","copy":"The cloud-native alternative — dynamic routing with automatic service discovery.","icon":"route"},{"title":"Docker","href":"/application/docker/","copy":"The upstream containers Nginx fronts, proxies, and load-balances.","icon":"package"},{"title":"Kubernetes","href":"/application/kubernetes/","copy":"Where ingress controllers take the reverse-proxy pattern cluster-wide.","icon":"deploy"}],"theme":{"hero_bg":"https://images.unsplash.com/photo-1551609189-eba71b3a8566?q=80&w=2400&auto=format&fit=crop","accent":"#34d399","accent2":"#22d3ee","btn_fg":"#06251b"},"features_eyebrow":"On this page","features_heading":"What this guide covers","related_eyebrow":"Keep exploring","related_heading":"Related applications"},"slug":"/application/nginx"},{"title":"Nmap Cheatsheet: Commands, Examples & Tutorials","description":"Nmap is a network scanner, port mapper, service fingerprinter and\nNSE-driven security probe. Full cheatsheet with practical recipes.\n","template":"splash","tableOfContents":false,"editUrl":false,"lastUpdated":false,"prev":false,"next":false,"sidebar":{"label":"Nmap","order":2000},"unsplash":"1551609189-eba71b3a8566","img":"https://images.unsplash.com/photo-1551609189-eba71b3a8566?fit=crop&w=1400&h=700&q=75","tags":["network","security"],"sem":1,"ogTitle":"Nmap Cheatsheet — Port Scanning, Service Detection & NSE","ogDescription":"Practical Nmap cheatsheet — host discovery, SYN vs connect scans, scanning all 65535 ports, service/OS fingerprinting, the Nmap Scripting Engine (NSE), and firewall evasion with copy-paste recipes.","jsonld":{"type":"Article","section":"Security","author":"KBVE","datePublished":"2026-06-24","dateModified":"2026-06-24","keywords":["nmap","network scanner","port scanning","service detection","OS fingerprinting","NSE","Nmap Scripting Engine","vulnerability scanning","penetration testing","firewall evasion","host discovery","cybersecurity tools","nmap vs masscan","filtered vs closed ports"],"breadcrumb":[{"name":"KBVE","path":"/"},{"name":"Application","path":"/application/"},{"name":"Nmap","path":"/application/nmap/"}],"faq":[{"question":"Is it legal to use Nmap?","answer":"Nmap itself is legal, but scanning networks you do not own or lack written permission to scan is illegal in most jurisdictions. Stick to your own infrastructure, CTF ranges like HackTheBox or TryHackMe, scanme.nmap.org, and engagements with a signed scope."},{"question":"What is the difference between an -sS and -sT scan in Nmap?","answer":"-sS is a TCP SYN (half-open) scan that never completes the handshake, making it fast and stealthier, but it requires root. -sT is a full TCP connect() scan that completes the handshake; it works unprivileged but is slower and noisier."},{"question":"How do I scan all 65535 ports with Nmap?","answer":"Use the -p- flag, for example \"sudo nmap -p- TARGET\", to scan every TCP port. Combine with --min-rate and -T4 for speed, e.g. \"sudo nmap -p- --min-rate 5000 -T4 TARGET\"."},{"question":"What is the Nmap Scripting Engine (NSE)?","answer":"NSE lets Nmap run Lua scripts for advanced discovery, version detection, vulnerability checks and brute forcing. Scripts are grouped into categories such as default, safe, vuln and intrusive, and run via --script, for example \"sudo nmap --script vuln TARGET\"."},{"question":"What does filtered mean in an Nmap scan, and how is it different from closed?","answer":"\"closed\" means the port is reachable and the host replied, but no application is listening. \"filtered\" means a firewall or filter dropped the probe, so Nmap cannot tell whether the port is open or closed. Filtered almost always indicates a firewall; re-probe with -Pn, a trusted source port, or an ACK scan."},{"question":"How do I detect service versions and the operating system with Nmap?","answer":"Use -sV for service and version detection and -O for OS fingerprinting. The -A flag bundles both with default scripts and traceroute, equivalent to \"-sV -sC -O --traceroute\"."}]},"bento":{"badge":"application · network · security","title":"Map the network,","accent":"Nmap.","lede":"Nmap (\"Network Mapper\") is the default tool in every pentest playbook — an open-source utility for host discovery, port scanning, service detection, OS fingerprinting, and scriptable probes via the Nmap Scripting Engine. This cheatsheet covers scan types, NSE, firewall evasion, and copy-paste recipes for real engagements.","ctas":[{"label":"Install","href":"#install","primary":true},{"label":"Port scanning","href":"#port-scanning"},{"label":"NSE scripting","href":"#nse"},{"label":"Common recipes","href":"#common-recipes"}],"aside":{"icon":"shield","title":"Authorization first","body":"Scanning networks you don't own or have written permission to scan is illegal in most jurisdictions. Stick to your own infrastructure, CTF ranges, scanme.nmap.org, and engagements with a signed scope.","points":["<strong>Discovery</strong> — find live hosts before port scanning.","<strong>NSE</strong> — Lua scripts for version, vuln, and brute checks.","<strong>Evasion</strong> — fragmentation, decoys, and source-port spoofing."]},"stats":[{"label":"TCP ports","value":"65535","icon":"network"},{"label":"Default scan","value":"SYN","icon":"bolt"},{"label":"NSE categories","value":"14","icon":"code"},{"label":"Timing levels","value":"T0–T5","icon":"clock"}],"features":[{"title":"Port scanning","icon":"network","href":"#port-scanning","body":"SYN, connect, UDP, ACK, and stealth scans — the scan shape that makes Nmap fast or slow."},{"title":"NSE scripting","icon":"code","href":"#nse","body":"The Nmap Scripting Engine — default, safe, vuln, and intrusive Lua scripts with high-value recipes."},{"title":"Firewall evasion","icon":"shield","href":"#firewall-ids-evasion","body":"Source-port spoofing, fragmentation, decoys, and MAC spoofing for sanctioned engagements only."},{"title":"Common recipes","icon":"route","href":"#common-recipes","body":"Subnet inventory, web-server triage, CTF first contact, and continuous monitoring workflows."}],"related":[{"title":"WireGuard","href":"/application/wireguard/","copy":"Secure the network you just mapped with an encrypted mesh.","icon":"lock"},{"title":"Nginx","href":"/application/nginx/","copy":"The web server you'll fingerprint on ports 80 and 443.","icon":"server"},{"title":"Flipper Zero","href":"/application/flipperzero/","copy":"A hardware companion for the wider security toolkit.","icon":"sensor"}],"theme":{"hero_bg":"https://images.unsplash.com/photo-1551609189-eba71b3a8566?q=80&w=2400&auto=format&fit=crop","accent":"#34d399","accent2":"#22d3ee","btn_fg":"#06251b"},"features_eyebrow":"On this page","features_heading":"What this guide covers","related_eyebrow":"Keep exploring","related_heading":"Related applications"},"slug":"/application/nmap"},{"title":"Nomad","description":"Nomad by HashiCorp is a lightweight, flexible workload orchestrator that deploys and manages containers,\nbinaries, and batch jobs across a cluster from a single binary. This guide covers the architecture,\ninstallation, job specification, and the essential CLI compared to Kubernetes.\n","template":"splash","tableOfContents":false,"editUrl":false,"lastUpdated":false,"prev":false,"next":false,"sidebar":{"label":"Nomad","order":103},"unsplash":"1572511443032-a3cfe6823872","img":"https://images.unsplash.com/photo-1572511443032-a3cfe6823872?fit=crop&w=1400&h=700&q=75","tags":["orchestration","cloud","nomad"],"sem":1,"ogTitle":"Nomad Guide — HashiCorp Workload Orchestrator, Jobs & CLI","ogDescription":"Learn Nomad, HashiCorp's lightweight workload orchestrator — how it compares to Kubernetes, the client/server architecture, writing a job specification, and the essential nomad CLI commands.","jsonld":{"type":"Article","keywords":["nomad","hashicorp nomad","workload orchestration","container orchestration","nomad vs kubernetes","job scheduler"],"faq":[{"question":"What is HashiCorp Nomad?","answer":"Nomad is a lightweight, single-binary workload orchestrator from HashiCorp that schedules and manages containers, standalone binaries, Java apps, and batch jobs across a cluster. It pairs naturally with Consul for service discovery and Vault for secrets."},{"question":"How is Nomad different from Kubernetes?","answer":"Nomad is a single ~100MB binary that orchestrates more than just containers (raw executables, Java, QEMU VMs), with far less operational overhead than Kubernetes. Kubernetes is a larger, container-focused platform with a bigger built-in ecosystem. Nomad favors simplicity and flexible workload types; Kubernetes favors breadth and a rich API surface."},{"question":"What is an allocation in Nomad?","answer":"An allocation (alloc) is a set of tasks from a job placed and running on a single client node — the rough equivalent of a Pod in Kubernetes. Each allocation gets a unique ID you use to inspect status and stream logs with nomad alloc logs."},{"question":"How many servers does a Nomad cluster need for high availability?","answer":"A production HA control plane needs an odd number of server nodes to hold quorum, typically 3 or 5. A full HashiCorp stack with Vault and Consul also at HA means 3 instances of each, for 9 total, though Nomad itself can run standalone."},{"question":"What is a Nomad job specification?","answer":"A job spec is an HCL (or JSON) file that declares what to run — the job, its groups, tasks, driver (docker, exec, java), resources, and count. You submit it with nomad job run, and the scheduler places allocations onto healthy clients that meet the constraints."}]},"bento":{"badge":"application · orchestration · cloud","title":"One binary to run it all,","accent":"Nomad.","lede":"HashiCorp's lightweight, flexible workload orchestrator — a single binary that schedules and scales containers, plain executables, Java apps, and batch jobs across a cluster with a fraction of the operational overhead of Kubernetes. This guide covers the architecture, installation, job specs, and the essential CLI.","ctas":[{"label":"Architecture","href":"#architecture","primary":true},{"label":"Install","href":"#install"},{"label":"Job specs","href":"#jobs"},{"label":"CLI cheatsheet","href":"#cheatsheet"}],"aside":{"icon":"server","title":"Simplicity over sprawl","body":"Nomad slots into the HashiCorp stack — Consul for service discovery, Vault for secrets — and orchestrates far more than containers while staying a single, small binary.","points":["<strong>Servers</strong> — hold state and elect a Raft leader.","<strong>Clients</strong> — run allocations and report health.","<strong>Drivers</strong> — docker, exec, java, and qemu workloads."]},"stats":[{"label":"Binary size","value":"~100MB","icon":"package"},{"label":"HA quorum","value":"3 or 5","icon":"server"},{"label":"Drivers","value":"docker · exec · java","icon":"gears"},{"label":"Dev UI port","value":"4646","icon":"activity"}],"features":[{"title":"Architecture","icon":"server","href":"#architecture","body":"Server and client roles from one binary — jobs, tasks, groups, and allocations explained."},{"title":"Install","icon":"package","href":"#install","body":"Grab the single binary via Homebrew or apt, then start a local dev agent with UI."},{"title":"Jobs","icon":"code","href":"#jobs","body":"Declare workloads in an HCL job spec — service, batch, and system types with Docker drivers."},{"title":"Cheatsheet","icon":"book","href":"#cheatsheet","body":"The nomad CLI commands you reach for daily — run, status, logs, nodes, and server members."}],"related":[{"title":"Kubernetes","href":"/application/kubernetes/","copy":"The heavyweight alternative — container orchestration at platform scale.","icon":"deploy"},{"title":"Docker","href":"/application/docker/","copy":"The container runtime behind Nomad's most common task driver.","icon":"package"},{"title":"Terraform","href":"/application/terraform/","copy":"HashiCorp's infrastructure-as-code sibling to Nomad.","icon":"gears"}],"theme":{"hero_bg":"https://images.unsplash.com/photo-1572511443032-a3cfe6823872?q=80&w=2400&auto=format&fit=crop","accent":"#34d399","accent2":"#22d3ee","btn_fg":"#06251b"},"features_eyebrow":"On this page","features_heading":"What this guide covers","related_eyebrow":"Keep exploring","related_heading":"Related applications"},"slug":"/application/nomad"},{"title":"OBS Studio","description":"OBS Studio (Open Broadcaster Software) is a free, open-source application for screen recording and live\nstreaming to Twitch, YouTube, and beyond. This guide covers scenes and sources, encoder settings, streaming\nsetup, and extending OBS with plugins.\n","template":"splash","tableOfContents":false,"editUrl":false,"lastUpdated":false,"prev":false,"next":false,"sidebar":{"label":"OBS","order":1100},"unsplash":"1572511443032-a3cfe6823872","img":"https://images.unsplash.com/photo-1572511443032-a3cfe6823872?fit=crop&w=1400&h=700&q=75","tags":["media","streaming","video"],"sem":1,"ogTitle":"OBS Studio Guide — Screen Recording, Live Streaming & Plugins","ogDescription":"Get started with OBS Studio, the free open-source broadcaster — understand scenes and sources, configure encoder and bitrate settings, stream to Twitch or YouTube, and extend OBS with plugins.","jsonld":{"type":"Article","keywords":["obs studio","open broadcaster software","screen recording","live streaming","twitch streaming","obs plugins"],"faq":[{"question":"What is OBS Studio?","answer":"OBS Studio (Open Broadcaster Software) is a free, open-source application for screen recording and live streaming. It composites multiple sources — screen captures, webcams, images, and audio — into scenes and encodes them for local recording or streaming to platforms like Twitch and YouTube."},{"question":"Is OBS Studio free?","answer":"Yes. OBS Studio is completely free and open source under the GPLv2 license, with no watermarks, time limits, or paid tiers. It runs on Windows, macOS, and Linux."},{"question":"What is the difference between a scene and a source in OBS?","answer":"A source is a single input such as a display capture, webcam, image, or audio device. A scene is a named arrangement of one or more sources with their positions and sizes. You switch between scenes live to change your layout during a stream or recording."},{"question":"What bitrate should I use for streaming in OBS?","answer":"For 1080p60 streaming, 6000 kbps with the x264 or NVENC encoder is a common baseline for Twitch, and higher for YouTube. Match your bitrate to your upload bandwidth — leave headroom so network spikes do not drop frames. Use CBR for streaming and a quality-based rate control for local recording."},{"question":"How do I add plugins to OBS?","answer":"Download a plugin compatible with your OBS version and operating system, then place its files in the OBS plugins directory (or run its installer). Restart OBS, and the plugin's filters, sources, or docks appear in the relevant menus."}]},"bento":{"badge":"application · media · streaming","title":"The open broadcaster,","accent":"OBS Studio.","lede":"The free, open-source application for screen recording and live streaming. OBS composites display captures, webcams, and audio into scenes, encodes them in real time, and streams to Twitch, YouTube, or any RTMP endpoint — no watermarks, no time limits.","ctas":[{"label":"Core concepts","href":"#concepts","primary":true},{"label":"Streaming setup","href":"#streaming"},{"label":"Plugins","href":"#plugins"}],"aside":{"icon":"video","title":"Scenes, sources, and encoders","body":"Build a scene for every layout you need — Starting Soon, Gameplay, Just Chatting — then switch between them live while OBS encodes your composite for the stream or a local recording.","points":["<strong>Sources</strong> — captures, webcams, browsers, and audio.","<strong>Encoders</strong> — NVENC on the GPU or x264 on the CPU.","<strong>Plugins</strong> — extra filters, transitions, and remote control."]},"stats":[{"label":"License","value":"GPLv2","icon":"license"},{"label":"Platforms","value":"Win / macOS / Linux","icon":"server"},{"label":"1080p60 baseline","value":"6000 kbps","icon":"activity"},{"label":"Rate control","value":"CBR","icon":"chart"}],"features":[{"title":"Concepts","icon":"book","href":"#concepts","body":"Sources, scenes, scene collections, filters, and profiles — the vocabulary of every OBS layout."},{"title":"Streaming","icon":"twitch","href":"#streaming","body":"Stream key, encoder choice, bitrate, resolution, and FPS — the four steps from blank canvas to live."},{"title":"Plugins","icon":"package","href":"#plugins","body":"Extend OBS with StreamFX, Move Transition, and obs-websocket for automation and stream decks."},{"title":"Bandwidth first","icon":"alert","body":"Streaming bitrate is capped by upload, not download — stay well under your ceiling or frames drop."}],"related":[{"title":"Linux","href":"/application/linux/","copy":"One of the three platforms OBS runs on, watermark-free.","icon":"server"},{"title":"Blender","href":"/application/blender/","copy":"Open-source 3D creation for overlays, renders, and assets.","icon":"render"},{"title":"JavaScript","href":"/application/javascript/","copy":"Drive obs-websocket automations and browser-source overlays.","icon":"code"}],"theme":{"hero_bg":"https://images.unsplash.com/photo-1572511443032-a3cfe6823872?q=80&w=2400&auto=format&fit=crop","accent":"#34d399","accent2":"#22d3ee","btn_fg":"#06251b"},"features_eyebrow":"On this page","features_heading":"What this guide covers","related_eyebrow":"Keep exploring","related_heading":"Related applications"},"slug":"/application/obs"},{"title":"PHP","description":"PHP (Hypertext Preprocessor) is a widely-used, dynamic, server-side scripting language for web development\nthat embeds directly into HTML and powers the classic LAMP stack. This guide covers install, syntax basics,\nand reusable functions.\n","template":"splash","tableOfContents":false,"editUrl":false,"lastUpdated":false,"prev":false,"next":false,"sidebar":{"label":"PHP","order":409},"unsplash":"1599507593499-a3f7d7d97667","img":"https://images.unsplash.com/photo-1599507593499-a3f7d7d97667?fit=crop&w=1400&h=700&q=75","tags":["programming","php","backend"],"sem":1,"ogTitle":"PHP Guide — Server-Side Scripting, LAMP Stack & Syntax Basics","ogDescription":"Learn PHP, the server-side scripting language behind the LAMP stack — install with a package manager, understand variables and functions, embed PHP in HTML, and reuse practical string helpers.","jsonld":{"type":"Article","keywords":["php","hypertext preprocessor","server-side scripting","lamp stack","web development","php functions"],"faq":[{"question":"What is PHP used for?","answer":"PHP is a server-side scripting language used mainly for web development. It runs on the server, generates HTML sent to the browser, and powers dynamic, data-driven applications and content management systems like WordPress, Drupal, and Laravel apps. It is the P in the classic LAMP stack."},{"question":"What does PHP stand for?","answer":"PHP is a recursive acronym for PHP Hypertext Preprocessor. It originally stood for Personal Home Page, reflecting its origins, but was renamed as it grew into a general-purpose web scripting language."},{"question":"Is PHP still relevant in modern web development?","answer":"Yes. PHP powers a large share of the web, including WordPress. Modern PHP 8.x brings the JIT compiler, strong typing, attributes, enums, and major performance gains, and frameworks like Laravel and Symfony keep it a productive, well-supported choice for backends."},{"question":"How do I embed PHP in HTML?","answer":"Wrap PHP code in <?php ... ?> tags anywhere inside an .php file. The server executes the code between the tags and replaces it with its output, while everything outside the tags is sent to the browser as plain HTML."},{"question":"What is the LAMP stack?","answer":"LAMP is a classic web hosting stack of Linux (OS), Apache (web server), MySQL (database), and PHP (scripting language). It is a fully open-source foundation that has powered countless websites and web applications for decades."}]},"bento":{"badge":"application · programming · backend","title":"The web's workhorse,","accent":"PHP.","lede":"Hypertext Preprocessor — the dynamic, server-side scripting language that embeds directly into HTML and powers the classic LAMP stack. From WordPress to Laravel and Symfony, PHP still drives a huge share of the web. This guide covers install, syntax basics, and reusable functions.","ctas":[{"label":"Install PHP","href":"#install","primary":true},{"label":"Syntax basics","href":"#syntax"},{"label":"Functions","href":"#functions"}],"aside":{"icon":"code","title":"The P in LAMP","body":"PHP runs on the server, generates HTML for the browser, and pairs with Linux, Apache, and MySQL in the stack that has powered countless servers across the globe for decades.","points":["<strong>Embedded</strong> — code lives inside HTML between PHP tags.","<strong>Modern</strong> — PHP 8.x adds JIT, enums, and strict typing.","<strong>Reusable</strong> — practical string helpers like ss_between."]},"stats":[{"label":"Acronym","value":"Hypertext Preprocessor","icon":"info"},{"label":"Modern line","value":"PHP 8.x","icon":"bolt"},{"label":"Stack","value":"LAMP","icon":"server"},{"label":"Dev server","value":"php -S","icon":"zap"}],"features":[{"title":"Background","icon":"book","href":"#information","body":"Where PHP came from, why it embeds into HTML, and its place in the LAMP stack."},{"title":"Install","icon":"package","href":"#install","body":"Grab the CLI with apt or Homebrew, verify the version, and spin up the built-in dev server."},{"title":"Syntax","icon":"code","href":"#syntax","body":"Variables, functions, loops, and the PHP tags that separate server code from plain HTML."},{"title":"Functions","icon":"gears","href":"#functions","body":"Reusable helpers — the ss_between string extractor with a proof of concept."}],"related":[{"title":"Linux","href":"/application/linux/","copy":"The L in LAMP — the OS foundation under every PHP server.","icon":"server"},{"title":"SQL","href":"/application/sql/","copy":"MySQL and friends — the database layer PHP apps lean on.","icon":"database"},{"title":"JavaScript","href":"/application/javascript/","copy":"The client-side counterpart to PHP's server-side rendering.","icon":"code"}],"theme":{"hero_bg":"https://images.unsplash.com/photo-1599507593499-a3f7d7d97667?q=80&w=2400&auto=format&fit=crop","accent":"#34d399","accent2":"#22d3ee","btn_fg":"#06251b"},"features_eyebrow":"On this page","features_heading":"What this guide covers","related_eyebrow":"Keep exploring","related_heading":"Related applications"},"slug":"/application/php"},{"title":"Pocketbase","description":"PocketBase is an open-source backend in a single file — an embedded SQLite database with a realtime REST API,\nauthentication, file storage, and an admin dashboard. This guide covers installing it with Docker Compose,\nthe CLI, and Coolify, plus collections, auth, and the realtime API.\n","template":"splash","tableOfContents":false,"editUrl":false,"lastUpdated":false,"prev":false,"next":false,"sidebar":{"label":"Pocketbase","order":1010},"unsplash":"1599507593499-a3f7d7d97667","img":"https://images.unsplash.com/photo-1599507593499-a3f7d7d97667?fit=crop&w=1400&h=700&q=75","tags":["database","backend","self-hosted"],"sem":1,"ogTitle":"PocketBase Guide — Self-Hosted Backend with Docker, Auth & Realtime API","ogDescription":"Run PocketBase, the open-source single-file backend — install via Docker Compose, CLI, or Coolify, then use its SQLite database, REST API, authentication, and realtime subscriptions.","jsonld":{"type":"Article","keywords":["pocketbase","self-hosted backend","sqlite","baas","realtime api"],"faq":[{"question":"What is PocketBase?","answer":"PocketBase is an open-source backend packaged as a single executable. It bundles an embedded SQLite database, a realtime REST API, user authentication, file storage, and an admin dashboard, making it a lightweight self-hosted alternative to Firebase or Supabase."},{"question":"How do I run PocketBase with Docker?","answer":"Use a docker-compose.yml with a PocketBase image such as ghcr.io/muchobien/pocketbase, expose port 8090, and mount volumes for /pb_data (database) and optionally /pb_public (static files). Then run docker compose up -d and open the admin UI at /_/."},{"question":"Where is the PocketBase admin dashboard?","answer":"The admin dashboard is served at /_/ on the PocketBase host, for example http://localhost:8090/_/. On first launch you create the initial admin account there, then manage collections, records, users, and settings."},{"question":"Is PocketBase a good alternative to Firebase?","answer":"For small to medium self-hosted projects, yes. PocketBase offers realtime subscriptions, auth, and file storage with no vendor lock-in and a single-file deployment. It runs on SQLite, so it suits single-node workloads rather than horizontally sharded, massive-scale apps."}]},"bento":{"badge":"application · database · self-hosted","title":"A whole backend in one file,","accent":"PocketBase.","lede":"An open-source backend packaged as a single executable — embedded SQLite, a realtime REST API, authentication, file storage, and an admin dashboard with nothing else to install. This guide installs it with Docker Compose, the CLI, and Coolify, then walks the first run and the realtime API.","ctas":[{"label":"Install","href":"#install","primary":true},{"label":"First run","href":"#first-run"},{"label":"Realtime API","href":"#rest-and-realtime-api"}],"aside":{"icon":"database","title":"Firebase, without the lock-in","body":"Define collections in the admin UI and PocketBase instantly exposes CRUD endpoints and realtime subscriptions for them — a lightweight self-hosted alternative to Firebase or Supabase.","points":["<strong>SQLite</strong> — the whole database lives in /pb_data.","<strong>Auth</strong> — email/password and OAuth2 built in.","<strong>Realtime</strong> — live record updates over SSE."]},"stats":[{"label":"Database","value":"SQLite","icon":"database"},{"label":"Default port","value":"8090","icon":"network"},{"label":"Admin UI","value":"/_/","icon":"settings"},{"label":"Extend with","value":"Go · JS hooks","icon":"code"}],"features":[{"title":"Install","icon":"package","href":"#install","body":"Three ways up — Docker Compose, the Docker CLI, or a one-click Coolify service."},{"title":"First Run","icon":"zap","href":"#first-run","body":"Create the admin account, build your first collection, and set API rules with filter expressions."},{"title":"REST and Realtime API","icon":"bolt","href":"#rest-and-realtime-api","body":"CRUD every collection over plain HTTP, then subscribe to live record changes with the JS SDK."},{"title":"Persist pb_data","icon":"shield","body":"Everything — database, uploads, logs — lives under /pb_data. Mount it to a persistent volume so data survives restarts and upgrades."}],"related":[{"title":"Supabase","href":"/application/supabase/","copy":"The Postgres-powered big sibling in the self-hosted BaaS space.","icon":"database"},{"title":"Appwrite","href":"/application/appwrite/","copy":"Another open-source backend platform with auth and storage.","icon":"server"},{"title":"Docker","href":"/application/docker/","copy":"The container runtime behind the Compose and CLI installs.","icon":"package"}],"theme":{"hero_bg":"https://images.unsplash.com/photo-1599507593499-a3f7d7d97667?q=80&w=2400&auto=format&fit=crop","accent":"#34d399","accent2":"#22d3ee","btn_fg":"#06251b"},"features_eyebrow":"On this page","features_heading":"What this guide covers","related_eyebrow":"Keep exploring","related_heading":"Related applications"},"slug":"/application/pocketbase"},{"title":"Portainer","description":"Portainer is a user-friendly backend management tool for containerized applications, offering a visual interface for Docker and Kubernetes environments. \nThink of it as a backend panel that helps design and manage container infrastructure within Docker and Kubernetes.\nIt simplifies the deployment, monitoring, and scaling of containers, making it easier to manage complex infrastructure.\nThus, with Portainer, teams can streamline their workflows and gain full control over their containerized ecosystem.\nThis guide covers deploying Portainer on Docker, Docker Swarm, and Kubernetes, plus Edge agents and upgrades.\n","template":"splash","tableOfContents":false,"editUrl":false,"lastUpdated":false,"prev":false,"next":false,"sidebar":{"label":"Portainer","order":105},"unsplash":"1544256718-3bcf237f3974","img":"https://images.unsplash.com/photo-1544256718-3bcf237f3974?fit=crop&w=1400&h=700&q=75","tags":["containers","devops","kubernetes"],"sem":1,"ogTitle":"Portainer Guide — Docker, Swarm & Kubernetes Container Management","ogDescription":"Deploy and manage Portainer across Docker, Docker Swarm, and Kubernetes — CLI and Compose install, Community vs Business Edition, Edge agents, and upgrade strategies.","jsonld":{"type":"Article","keywords":["portainer","docker management","kubernetes dashboard","container management","docker swarm"],"faq":[{"question":"What is Portainer used for?","answer":"Portainer is a web-based management UI for containers. It gives a visual dashboard to deploy, monitor, and manage Docker, Docker Swarm, and Kubernetes environments without memorizing CLI commands, with role-based access control for teams."},{"question":"What is the difference between Portainer CE and Business Edition?","answer":"Community Edition (CE) is free and open-source with core container management. Business Edition (BE/EE) is the commercial version that adds RBAC, registry management, and support. BE requires a license key, though a free tier covers up to a small number of nodes."},{"question":"How do I install Portainer on Docker?","answer":"Create a portainer_data volume, then run the portainer/portainer-ce image with the Docker socket mounted at /var/run/docker.sock and ports 8000 and 9443 published. Portainer's UI is then reachable over HTTPS on port 9443."},{"question":"What is a Portainer Edge agent?","answer":"The Edge agent connects remote or air-gapped Docker/Kubernetes hosts back to a central Portainer instance using an EDGE_ID and EDGE_KEY over an outbound tunnel. It lets one Portainer manage many distributed environments without exposing each host's API."}]},"bento":{"badge":"application · containers · devops","title":"Command your containers,","accent":"Portainer.","lede":"A visual backend panel for containerized infrastructure — deploy, monitor, and scale workloads across Docker, Docker Swarm, and Kubernetes from one dashboard. This guide covers installation with Compose and the CLI, Swarm and Kubernetes agents, Edge devices at scale, and safe upgrade strategies.","ctas":[{"label":"Docker install","href":"#docker","primary":true},{"label":"Kubernetes","href":"#kubernetes"},{"label":"Edge agents","href":"#edge"},{"label":"Upgrades","href":"#upgrades"}],"aside":{"icon":"package","title":"One panel, every cluster","body":"Portainer sits on top of the Docker socket or a Kubernetes namespace and turns container operations into a visual workflow — granular control without memorizing CLI commands.","points":["<strong>Docker</strong> — Compose or CLI install with a persistent volume.","<strong>Kubernetes</strong> — official manifest into a portainer namespace.","<strong>Edge</strong> — thousands of remote devices over outbound tunnels."]},"stats":[{"label":"UI port","value":"9443","icon":"server"},{"label":"Edge tunnel","value":"8000","icon":"network"},{"label":"Editions","value":"CE / BE","icon":"license"},{"label":"Data volume","value":"portainer_data","icon":"database"}],"features":[{"title":"Docker","icon":"package","href":"#docker","body":"Compose and CLI deployment — persistent volume, socket mount, and the CE versus Business Edition choice."},{"title":"Kubernetes","icon":"deploy","href":"#kubernetes","body":"Namespace creation, the official manifest, and upgrading the Portainer agent inside a cluster."},{"title":"Edge","icon":"network","href":"#edge","body":"EDGE_ID and EDGE_KEY setup with Consul, Terraform, and Ansible automation — scaling to 15000 devices."},{"title":"Upgrades","icon":"gears","href":"#upgrades","body":"Back up first, test in staging, and apply the right strategy for Docker, Swarm, or Kubernetes environments."}],"related":[{"title":"Docker","href":"/application/docker/","copy":"The container engine Portainer manages through the socket mount.","icon":"package"},{"title":"Kubernetes","href":"/application/kubernetes/","copy":"Cluster orchestration that Portainer surfaces in a visual dashboard.","icon":"deploy"},{"title":"Proxmox","href":"/application/proxmox/","copy":"The virtualization layer many Portainer-managed hosts run on.","icon":"server"}],"theme":{"hero_bg":"https://images.unsplash.com/photo-1544256718-3bcf237f3974?q=80&w=2400&auto=format&fit=crop","accent":"#34d399","accent2":"#22d3ee","btn_fg":"#06251b"},"features_eyebrow":"On this page","features_heading":"What this guide covers","related_eyebrow":"Keep exploring","related_heading":"Related applications"},"slug":"/application/portainer"},{"title":"Proxmox","description":"Proxmox VE is an open-source virtualization platform built on Debian that runs KVM virtual machines and LXC\ncontainers with a web UI, CLI, and REST API. This guide covers the qm and pct command cheatsheet, container\nnetworking with netplan, Windows VM setup with VirtIO drivers, and theming.\n","template":"splash","tableOfContents":false,"editUrl":false,"lastUpdated":false,"prev":false,"next":false,"sidebar":{"label":"Proxmox","order":110},"unsplash":"1558494949-ef010cbdcc31","img":"https://images.unsplash.com/photo-1558494949-ef010cbdcc31?fit=crop&w=1400&h=700&q=75","tags":["virtualization","homelab","linux"],"sem":1,"ogTitle":"Proxmox VE Guide — qm & pct CLI, Networking & Windows VMs","ogDescription":"Manage Proxmox VE virtual machines and containers — the qm and pct command cheatsheet, container networking with netplan, Windows KVM setup with VirtIO drivers, and dark-mode theming.","jsonld":{"type":"Article","keywords":["proxmox","kvm","lxc","virtualization","homelab"],"faq":[{"question":"What is Proxmox VE?","answer":"Proxmox Virtual Environment is an open-source server virtualization platform based on Debian Linux. It runs KVM/QEMU virtual machines and LXC containers under one web interface, with clustering, high availability, Ceph storage, and backups built in."},{"question":"What is the difference between qm and pct in Proxmox?","answer":"qm manages KVM/QEMU virtual machines (full hardware virtualization), while pct manages LXC containers (lightweight OS-level virtualization). For example qm start <id> boots a VM and pct start <id> starts a container."},{"question":"What port is the Proxmox web interface on?","answer":"The Proxmox web panel listens on port 8006 over HTTPS, and the PVEDaemon uses port 85. You log in with PAM or Proxmox PVE authentication. Confirm the open ports with nmap 127.0.0.1 -p- or netstat."},{"question":"How do I install VirtIO drivers on a Windows VM in Proxmox?","answer":"Download the VirtIO ISO into /var/lib/vz/template/iso with wget, attach it to the Windows KVM as a second CD drive, reboot, and run the installer from the ISO so Windows recognizes the paravirtualized disk and network devices."}]},"bento":{"badge":"application · virtualization · homelab","title":"The homelab hypervisor,","accent":"Proxmox.","lede":"An open-source virtualization platform built on Debian that runs KVM virtual machines and LXC containers behind one web UI, CLI, and REST API. This working reference covers the qm and pct command cheatsheet, container networking with netplan, Windows VM setup with VirtIO drivers, and dark-mode theming.","ctas":[{"label":"Command cheatsheet","href":"#cheatsheet","primary":true},{"label":"Networking","href":"#network"},{"label":"Windows VMs","href":"#windows"},{"label":"Dark theme","href":"#style"}],"aside":{"icon":"server","title":"One panel, every workload","body":"KVM for full hardware virtualization, LXC for lightweight containers — with clustering, high availability, Ceph storage, and backups built into the same Debian-based platform.","points":["<strong>qm</strong> — start, stop, and configure KVM/QEMU VMs.","<strong>pct</strong> — manage LXC containers from the shell.","<strong>Web panel</strong> — HTTPS on port 8006, PAM or PVE auth."]},"stats":[{"label":"Base OS","value":"Debian","icon":"server"},{"label":"VMs","value":"KVM / QEMU","icon":"gears"},{"label":"Containers","value":"LXC","icon":"package"},{"label":"Web UI port","value":"8006","icon":"network"}],"features":[{"title":"Command cheatsheet","icon":"code","href":"#cheatsheet","body":"The qm and pct CLI quick reference — list, start, shutdown, reboot, and configure VMs and containers."},{"title":"Container networking","icon":"network","href":"#network","body":"Default ports, OVH IPv4 configuration, and a working Ubuntu 22.04 netplan config for containers."},{"title":"Windows VM setup","icon":"settings","href":"#windows","body":"Audio device args for the qemu-server config and installing stable or latest VirtIO driver ISOs."},{"title":"Dark-mode theming","icon":"render","href":"#style","body":"Give the web panel a Discord-style dark theme with the PVEDiscordDark install script."}],"related":[{"title":"Linux","href":"/application/linux/","copy":"Extend guest disks with LVM after growing them in Proxmox.","icon":"server"},{"title":"Docker","href":"/application/docker/","copy":"Containers and Compose inside your Proxmox VMs and LXCs.","icon":"package"},{"title":"Kubernetes","href":"/application/kubernetes/","copy":"Cluster orchestration on top of your virtualized nodes.","icon":"deploy"}],"theme":{"hero_bg":"https://images.unsplash.com/photo-1558494949-ef010cbdcc31?q=80&w=2400&auto=format&fit=crop","accent":"#34d399","accent2":"#22d3ee","btn_fg":"#06251b"},"features_eyebrow":"On this page","features_heading":"What this guide covers","related_eyebrow":"Keep exploring","related_heading":"Related applications"},"slug":"/application/proxmox"},{"title":"Python","description":"Python is a general-purpose, high-level programming language known for its readability and versatility.\nThis guide covers installing Python on Windows, macOS, and Linux, managing virtual environments and pip,\nand building typed web APIs with FastAPI, Pydantic, and Haystack.\n","template":"splash","tableOfContents":false,"editUrl":false,"lastUpdated":false,"prev":false,"next":false,"sidebar":{"label":"Python","order":420},"unsplash":"1553413077-190dd305871c","img":"https://images.unsplash.com/photo-1553413077-190dd305871c?fit=crop&w=1400&h=700&q=75","tags":["programming","python","backend"],"sem":1,"ogTitle":"Python Guide — Install, Virtual Environments, pip & FastAPI","ogDescription":"A practical Python guide — install on Windows, macOS, and Linux, isolate dependencies with virtual environments and pip, and build typed web APIs using FastAPI and Pydantic.","jsonld":{"type":"Article","keywords":["python","virtual environment","pip","fastapi","pydantic"],"faq":[{"question":"How do I create a Python virtual environment?","answer":"Run python -m venv .venv to create an isolated environment in a .venv folder, then activate it with source .venv/bin/activate on macOS/Linux or .venv\\Scripts\\activate on Windows. Packages you install with pip then stay scoped to that project."},{"question":"What is the difference between pip and a virtual environment?","answer":"pip is Python's package installer; a virtual environment is an isolated directory of Python and its packages. You use pip inside a virtual environment so each project has its own dependency versions without polluting the global system Python."},{"question":"What is FastAPI used for?","answer":"FastAPI is a modern Python web framework for building APIs. It uses standard type hints and Pydantic models for automatic request validation and generates interactive OpenAPI documentation, while running on ASGI for high async performance."},{"question":"What is Pydantic?","answer":"Pydantic is a data-validation library that uses Python type hints to parse and validate data at runtime. It powers FastAPI's request and response models, coercing and checking incoming JSON against your declared types and raising clear errors on mismatch."},{"question":"Which Python version should I use?","answer":"Use the latest stable Python 3 release for new projects to get current syntax, performance, and security fixes. Pin the version per project with a virtual environment or a tool like pyenv so upgrades never break existing work."},{"question":"What is uv and should I use it instead of pip?","answer":"uv is a fast Python package and project manager written in Rust that replaces pip, virtualenv, and pip-tools with a single tool. It resolves and installs dependencies 10-100x faster, writes a uv.lock for reproducible installs, and can install and pin the Python toolchain itself. Use uv for new projects and CI; pip still works everywhere and remains the fallback."}]},"bento":{"badge":"application · programming · backend","title":"Readable power,","accent":"Python.","lede":"A general-purpose, high-level language prized for clear syntax and a vast ecosystem — web development, data science, machine learning, and automation. This guide moves from setup to real APIs: install Python on any OS, isolate dependencies with virtual environments and pip, then build typed web services with FastAPI and Pydantic.","ctas":[{"label":"Install Python","href":"#setup","primary":true},{"label":"Virtual environments","href":"#virtual-environments"},{"label":"uv","href":"#uv"},{"label":"FastAPI","href":"#fastapi"},{"label":"Pydantic","href":"#pydantic"}],"aside":{"icon":"code","title":"From script to service","body":"Python's interpreter runs on every major platform, and its package manager plus virtual environments make per-project dependency isolation straightforward — a clean path from a first script to a production API.","points":["<strong>Isolation</strong> — venv keeps each project's packages scoped.","<strong>Typed APIs</strong> — FastAPI validates requests with type hints.","<strong>Validation</strong> — Pydantic parses and checks data at runtime."]},"stats":[{"label":"Package manager","value":"pip","icon":"package"},{"label":"Web framework","value":"FastAPI","icon":"bolt"},{"label":"Validation","value":"Pydantic","icon":"check"},{"label":"Major version","value":"Python 3","icon":"code"}],"features":[{"title":"Setup on any OS","icon":"settings","href":"#setup","body":"Step-by-step installers for Windows, macOS, and Linux — plus verifying python and pip from the terminal."},{"title":"Virtual environments & pip","icon":"package","href":"#virtual-environments","body":"Create and activate isolated environments, then install, list, and upgrade packages from PyPI."},{"title":"uv — fast toolchain","icon":"bolt","href":"#uv","body":"A Rust-based drop-in for pip, venv, and pip-tools — resolves and installs 10-100x faster, with a lockfile and pinned toolchain."},{"title":"FastAPI + Pydantic","icon":"bolt","href":"#fastapi","body":"Build a typed API with Uvicorn, automatic Swagger docs, and Pydantic models for request validation."},{"title":"Haystack search","icon":"eye","href":"#haystack","body":"NLP-powered search systems and question answering over Elasticsearch, FAISS, and other backends."}],"related":[{"title":"Machine Learning","href":"/application/ml/","copy":"Models, training, and the Python-first ML toolchain.","icon":"chart"},{"title":"Docker","href":"/application/docker/","copy":"Containerize Python apps and APIs for reproducible deploys.","icon":"package"},{"title":"Rust","href":"/application/rust/","copy":"The systems language powering Pydantic's core validation.","icon":"rust"}],"theme":{"hero_bg":"https://images.unsplash.com/photo-1553413077-190dd305871c?q=80&w=2400&auto=format&fit=crop","accent":"#34d399","accent2":"#22d3ee","btn_fg":"#06251b"},"features_eyebrow":"On this page","features_heading":"What this guide covers","related_eyebrow":"Keep exploring","related_heading":"Related applications"},"slug":"/application/python"},{"title":"Redis","description":"Redis is an open-source, in-memory data structure store used as a database, cache, and message broker.\nThis guide covers running Redis with Docker Compose, deploying it on Kubernetes as a StatefulSet, and\nconnecting with the redis-cli. Redis supports strings, hashes, lists, sets, sorted sets, bitmaps,\nhyperloglogs, geospatial indexes, and streams.\n","template":"splash","tableOfContents":false,"editUrl":false,"lastUpdated":false,"prev":false,"next":false,"sidebar":{"label":"Redis","order":1420},"unsplash":"1553413077-190dd305871c","img":"https://images.unsplash.com/photo-1553413077-190dd305871c?fit=crop&w=1400&h=700&q=75","tags":["database","cache","in-memory"],"sem":1,"ogTitle":"Redis Guide — Docker Compose, Kubernetes & redis-cli","ogDescription":"Run Redis with Docker Compose, deploy it on Kubernetes as a StatefulSet, and connect using redis-cli. Practical, copy-paste configuration for the in-memory data store.","jsonld":{"type":"Article","keywords":["redis","in-memory database","cache","docker compose","kubernetes statefulset"],"faq":[{"question":"Is Redis a database or a cache?","answer":"Both. Redis is an in-memory data structure store that can act as a primary database, a cache in front of a slower store, or a message broker. Persistence options (RDB snapshots and AOF logs) let it survive restarts when used as a database."},{"question":"How do I run Redis with Docker Compose?","answer":"Define a redis service using the official redis image, expose port 6379, pass a password with --requirepass, and mount a named volume at /data for persistence. Then run docker compose up -d."},{"question":"Why deploy Redis as a StatefulSet on Kubernetes?","answer":"A StatefulSet gives each Redis pod a stable network identity and persistent volume that survive rescheduling. This is required for data durability and for replication, where replicas must reliably find the primary."},{"question":"How do I connect to a Redis instance from the command line?","answer":"Use redis-cli -h <host> -p <port> -a <password>. Inside Docker, exec into the container first, for example docker exec -it kilobase-redis redis-cli -a redispassword."},{"question":"What is the difference between RDB and AOF persistence in Redis?","answer":"RDB writes periodic point-in-time snapshots — compact and fast to restore, but you can lose data since the last snapshot. AOF logs every write command and replays it on restart, giving far better durability at the cost of larger files. They can be enabled together."},{"question":"Which Redis data structure should I use for a leaderboard?","answer":"A sorted set (ZSET). Members are ranked by a score, so ZADD updates a player's score and ZREVRANGE returns the top N in O(log N) time — far more efficient than sorting a list on every read."},{"question":"Why should I avoid KEYS in production Redis?","answer":"KEYS scans the entire keyspace and blocks the single-threaded server until it finishes, stalling all other clients. Use SCAN instead, which returns keys in small cursor-based batches without blocking."},{"question":"Does Redis lose data when it restarts?","answer":"Only if persistence is disabled. With RDB snapshots or AOF enabled (and a mounted volume in Docker or Kubernetes), Redis reloads its dataset on startup. A pure in-memory cache with no persistence starts empty after a restart."}]},"bento":{"badge":"application · database · cache","title":"Memory-speed data,","accent":"Redis.","lede":"An open-source, in-memory data structure store that works as a database, cache, and message broker — microsecond reads with optional disk persistence. This guide runs Redis three ways: Docker Compose for local development, a Kubernetes StatefulSet for production, and the redis-cli for testing and debugging.","ctas":[{"label":"Data structures","href":"#core-data-structures","primary":true},{"label":"Persistence","href":"#persistence-rdb-vs-aof"},{"label":"Docker Compose","href":"#redis-docker-integration"},{"label":"Kubernetes","href":"#redis-on-kubernetes"}],"aside":{"icon":"database","title":"More than a key-value cache","body":"Every Redis value is a native data structure with commands tuned to a specific access pattern — picking the right one is the single biggest Redis performance decision you will make.","points":["<strong>Structures</strong> — strings, hashes, sets, sorted sets, streams.","<strong>Durability</strong> — RDB snapshots, AOF logs, or both together.","<strong>Safety</strong> — SCAN in production, never KEYS *."]},"stats":[{"label":"Port","value":"6379","icon":"network"},{"label":"Latency","value":"Microseconds","icon":"bolt"},{"label":"Persistence","value":"RDB + AOF","icon":"database"},{"label":"Structures","value":"8+ native","icon":"box"}],"features":[{"title":"Core data structures","icon":"box","href":"#core-data-structures","body":"Strings, hashes, lists, sets, sorted sets, streams, and bitmaps — matched to the access pattern each one is optimized for."},{"title":"Persistence modes","icon":"shield","href":"#persistence-rdb-vs-aof","body":"RDB snapshots versus the append-only file — when to use each, and when to run both together."},{"title":"Docker Compose setup","icon":"package","href":"#redis-docker-integration","body":"A password-protected, AOF-enabled Redis with a persistent volume in a minimal copy-paste compose file."},{"title":"Kubernetes StatefulSet","icon":"deploy","href":"#redis-on-kubernetes","body":"Stable pod identity, per-replica volumes, a headless Service, plus the redis-cli and essential commands."}],"related":[{"title":"Docker","href":"/application/docker/","copy":"The container runtime behind the Compose workflow.","icon":"package"},{"title":"Kubernetes","href":"/application/kubernetes/","copy":"Orchestration fundamentals for the StatefulSet deployment.","icon":"deploy"},{"title":"Supabase","href":"/application/supabase/","copy":"The Postgres-backed platform Redis often caches for.","icon":"database"}],"theme":{"hero_bg":"https://images.unsplash.com/photo-1553413077-190dd305871c?q=80&w=2400&auto=format&fit=crop","accent":"#34d399","accent2":"#22d3ee","btn_fg":"#06251b"},"features_eyebrow":"On this page","features_heading":"What this guide covers","related_eyebrow":"Keep exploring","related_heading":"Related applications"},"slug":"/application/redis"},{"title":"React Native","description":"React Native is Meta's open-source framework for building native mobile apps for iOS and Android from a\nsingle React + JavaScript/TypeScript codebase. This guide covers core concepts, the @kbve/rn shared\ncomponent package, running the app, and rendering the same components on the web via react-native-web.\n","template":"splash","tableOfContents":false,"editUrl":false,"lastUpdated":false,"prev":false,"next":false,"sidebar":{"label":"React Native","order":476},"unsplash":"1633356122544-f134324a6cee","img":"https://images.unsplash.com/photo-1633356122544-f134324a6cee?fit=crop&w=1400&h=700&q=75","tags":["react-native","mobile","cross-platform"],"sem":1,"ogTitle":"React Native Guide — Build iOS & Android Apps + Web with @kbve/rn","ogDescription":"Learn React Native, Meta's framework for native iOS and Android apps from one React codebase — core primitives, the @kbve/rn shared package, running with Expo, and rendering the same components on the web via react-native-web.","jsonld":{"type":"Article","keywords":["react native","react-native-web","expo","cross-platform mobile","ios android app","kbve rn"],"faq":[{"question":"What is React Native?","answer":"React Native is Meta's open-source framework for building native mobile apps for iOS and Android from a single React and JavaScript/TypeScript codebase. Instead of rendering to the DOM, it maps components like View and Text to real native platform widgets, so the UI is genuinely native rather than a web view."},{"question":"What is the difference between React and React Native?","answer":"React renders to the DOM for the web using HTML elements like div and span. React Native uses the same component model and hooks but renders to native platform views (View, Text, Image) on iOS and Android. Logic and patterns transfer; the primitives and styling (StyleSheet, flexbox-only layout) differ."},{"question":"What is react-native-web?","answer":"react-native-web maps React Native primitives — View, Text, Pressable, StyleSheet — to their DOM equivalents so the same React Native component code also renders in a browser. It lets a single component codebase target iOS, Android, and the web, and is the foundation of Expo's web support."},{"question":"What is Expo?","answer":"Expo is a framework and toolchain on top of React Native that streamlines building, running, and shipping apps. It provides a managed workflow, a large set of device APIs, over-the-air updates, and a web target via react-native-web, so you can run on a device in seconds without native build setup."},{"question":"What is the @kbve/rn package?","answer":"The @kbve/rn package is KBVE's shared React Native component package. Its View, Text, Pressable, and StyleSheet-based primitives render in the native app and, via react-native-web, inside these docs as an Astro island — so a UI component is written and styled once and reused across mobile and web."}]},"bento":{"badge":"application · mobile · cross-platform","title":"Native apps from one codebase,","accent":"React Native.","lede":"Meta's open-source framework for building genuinely native iOS and Android apps from a single React + TypeScript codebase — and, through react-native-web, the same components on the web. This guide covers the core primitives, KBVE's shared @kbve/rn package, running the app with Expo, and a live web island demo.","ctas":[{"label":"Core concepts","href":"#concepts","primary":true},{"label":"@kbve/rn package","href":"#kbve-rn"},{"label":"Run the app","href":"#running"},{"label":"Web demo","href":"#web"}],"aside":{"icon":"package","title":"Write once, render everywhere","body":"React Native maps View and Text to real platform widgets instead of the DOM — and react-native-web maps them back, so one component codebase serves mobile apps and these very docs.","points":["<strong>Primitives</strong> — View, Text, Pressable, StyleSheet.","<strong>Expo</strong> — managed toolchain, device APIs, Fast Refresh.","<strong>@kbve/rn</strong> — shared components across app and docs."]},"stats":[{"label":"Maintainer","value":"Meta","icon":"crown"},{"label":"Toolchain","value":"Expo","icon":"zap"},{"label":"Web target","value":"react-native-web","icon":"network"},{"label":"Language","value":"TypeScript","icon":"code"}],"features":[{"title":"Concepts","icon":"book","href":"#concepts","body":"The native primitives and how they map to the web — View, Text, Image, Pressable, and flexbox-only StyleSheet layout."},{"title":"@kbve/rn","icon":"package","href":"#kbve-rn","body":"KBVE's shared component package — write and style a UI component once, reuse it across mobile and web."},{"title":"Running","icon":"zap","href":"#running","body":"Create and run an app with Expo — dev server, Expo Go, simulators, and Fast Refresh in seconds."},{"title":"Web","icon":"network","href":"#web","body":"The same @kbve/rn component the native app renders, hydrated here as a client-only Astro island."}],"related":[{"title":"Android","href":"/application/android/","copy":"The platform half of your React Native builds and emulators.","icon":"gears"},{"title":"iOS","href":"/application/ios/","copy":"Simulators, signing, and shipping the Apple side of the app.","icon":"box"},{"title":"JavaScript","href":"/application/javascript/","copy":"The language and ecosystem underneath React and React Native.","icon":"code"}],"theme":{"hero_bg":"https://images.unsplash.com/photo-1633356122544-f134324a6cee?q=80&w=2400&auto=format&fit=crop","accent":"#34d399","accent2":"#22d3ee","btn_fg":"#06251b"},"features_eyebrow":"On this page","features_heading":"What this guide covers","related_eyebrow":"Keep exploring","related_heading":"Related applications"},"slug":"/application/rn"},{"title":"Rust","description":"Rust is a modern programming language known for its focus on safety, particularly memory safety, and performance.\nIt is designed to provide developers with the tools to create reliable and efficient software, often used in systems programming, web assembly, and embedded applications.\n","template":"splash","tableOfContents":false,"editUrl":false,"lastUpdated":false,"prev":false,"next":false,"sidebar":{"label":"Rust","order":404},"unsplash":"1565153907400-7e01a9ab25f3","img":"https://images.unsplash.com/photo-1565153907400-7e01a9ab25f3?fit=crop&w=1400&h=700&q=75","tags":["technology"],"bento":{"badge":"application · technology","title":"Fearless and fast,","accent":"Rust.","lede":"A modern systems language built around memory safety, concurrency, and performance without giving up control. This guide walks through installing the toolchain with rustup, mastering Cargo, and the corners of the ecosystem the KBVE stack leans on — from Axum and Bevy to Askama templating.","ctas":[{"label":"Install Rust","href":"#install","primary":true},{"label":"Cargo basics","href":"#cargo"},{"label":"Bevy engine","href":"#bevy"},{"label":"Askama templates","href":"#askama"}],"aside":{"icon":"rust","title":"Safety without sacrifice","body":"Rust's ownership model and strict compile-time checks eliminate entire classes of bugs — null dereferences, buffer overflows, data races — while keeping systems-level control and speed.","points":["<strong>Toolchain</strong> — rustup manages compilers and targets.","<strong>Cargo</strong> — dependencies, builds, tests, and docs.","<strong>Ecosystem</strong> — Axum, Bevy, egui, Askama, and more."]},"stats":[{"label":"Package manager","value":"Cargo","icon":"package"},{"label":"Registry","value":"crates.io","icon":"box"},{"label":"First stable","value":"2015","icon":"clock"},{"label":"Memory model","value":"Ownership","icon":"shield"}],"features":[{"title":"Install & update","icon":"bolt","href":"#install","body":"Set up rustup on Linux, macOS, or WSL, configure your shell, and keep the toolchain current."},{"title":"Cargo workflow","icon":"package","href":"#cargo","body":"Create projects, manage dependencies, run tests, and generate docs with Rust's build system."},{"title":"Bevy + WGPU","icon":"render","href":"#bevy","body":"How the KBVE isometric game renders — chunk meshes, sprite animation, and custom shader materials."},{"title":"Askama templating","icon":"code","href":"#askama","body":"Compile-time type-safe templates — Astro builds the HTML shell, Axum fills in the data."}],"related":[{"title":"Docker","href":"/application/docker/","copy":"Multi-stage builds and cargo-chef layer caching for Rust images.","icon":"package"},{"title":"Git","href":"/application/git/","copy":"CI workflows and version control for Rust projects.","icon":"branch"},{"title":"Godot","href":"/application/godot/","copy":"Pair Rust with Godot through the Q helper crate.","icon":"sword"}],"theme":{"hero_bg":"https://images.unsplash.com/photo-1565153907400-7e01a9ab25f3?q=80&w=2400&auto=format&fit=crop","accent":"#34d399","accent2":"#22d3ee","btn_fg":"#06251b"},"features_eyebrow":"On this page","features_heading":"What this guide covers","related_eyebrow":"Keep exploring","related_heading":"Related applications"},"slug":"/application/rust"},{"title":"SQL","description":"SQL is the standard language for managing data in relational databases like MySQL, MariaDB, and PostgreSQL.\nThis guide covers the MySQL/MariaDB cheatsheet, PostgreSQL with PSQL and extensions, CloudNativePG (CNPG)\nand Barman on Kubernetes, plus Supabase schemas and backups.\n","template":"splash","tableOfContents":false,"editUrl":false,"lastUpdated":false,"prev":false,"next":false,"sidebar":{"label":"SQL","order":409},"unsplash":"1567604713218-36a0f5841046","img":"https://images.unsplash.com/photo-1567604713218-36a0f5841046?fit=crop&w=1400&h=700&q=75","tags":["database","sql","postgresql"],"sem":1,"ogTitle":"SQL Guide — MySQL/MariaDB, PostgreSQL, CNPG & Supabase","ogDescription":"A practical SQL reference — MySQL and MariaDB command cheatsheet, PostgreSQL with PSQL and extensions, CloudNativePG and Barman on Kubernetes, and Supabase schemas and backups.","jsonld":{"type":"Article","keywords":["sql","mysql","postgresql","cloudnativepg","supabase"],"faq":[{"question":"What is the difference between SQL and MySQL?","answer":"SQL is the standard query language for relational databases. MySQL is a specific database system that implements SQL. PostgreSQL, MariaDB, and SQLite are other systems that also speak SQL with their own extensions."},{"question":"What is the difference between MySQL and PostgreSQL?","answer":"Both are open-source relational databases. MySQL is known for simplicity and read-heavy speed, while PostgreSQL offers richer SQL compliance, advanced types (JSONB, arrays), and extensions. PostgreSQL is often preferred for complex, write-heavy, or analytical workloads."},{"question":"What is CloudNativePG (CNPG)?","answer":"CloudNativePG is a Kubernetes operator that runs PostgreSQL clusters as native resources. It handles provisioning, failover, rolling updates, and backups (often via Barman), managing high-availability Postgres declaratively inside a cluster."},{"question":"How do I reset a MySQL root password?","answer":"Log into the MySQL shell and run ALTER USER 'root'@'localhost' IDENTIFIED BY 'newpassword'. On a fresh Ubuntu install that never prompted for a password, you may first need to authenticate through the auth_socket plugin."}]},"bento":{"badge":"application · database · sql","title":"Speak to your data,","accent":"SQL.","lede":"The standard language for relational databases — MySQL, MariaDB, and PostgreSQL alike. This reference collects working material across engines: a MySQL/MariaDB command cheatsheet, PostgreSQL with PSQL and extensions, CloudNativePG and Barman for Postgres on Kubernetes, and Supabase schemas and backups.","ctas":[{"label":"Cheatsheet","href":"#cheatsheet","primary":true},{"label":"PostgreSQL","href":"#postgresql"},{"label":"Supabase","href":"#supabase"},{"label":"Backups","href":"#backup"}],"aside":{"icon":"database","title":"One language, many engines","body":"From a quick GRANT on a MariaDB box to a declarative Postgres cluster on Kubernetes — the same SQL foundations carry across every engine in the KBVE stack.","points":["<strong>Cheatsheet</strong> — users, grants, and databases in MySQL/MariaDB.","<strong>Kubernetes</strong> — CNPG runs HA Postgres declaratively.","<strong>Recovery</strong> — Barman backups with point-in-time restore."]},"stats":[{"label":"Query language","value":"SQL","icon":"database"},{"label":"K8s operator","value":"CNPG","icon":"deploy"},{"label":"Backup tool","value":"Barman","icon":"shield"},{"label":"CLI","value":"psql","icon":"code"}],"features":[{"title":"MySQL/MariaDB cheatsheet","icon":"code","href":"#cheatsheet","body":"The admin commands you reach for — create and drop users, databases, and grant privileges."},{"title":"PostgreSQL deep dive","icon":"database","href":"#postgresql","body":"PSQL, extensions like pgvector and PGAudit, plus CNPG deployment, recovery, and backup examples on Kubernetes."},{"title":"Supabase","icon":"bolt","href":"#supabase","body":"The open-source backend-as-a-service built on hosted Postgres — auth, storage, realtime, and schemas."},{"title":"Backups","icon":"shield","href":"#backup","body":"Quick mysqldump one-liners for containerized databases, ready to wire into an AWX stack."}],"related":[{"title":"Supabase","href":"/application/supabase/","copy":"The full self-hosted Supabase stack on top of Postgres.","icon":"bolt"},{"title":"Kubernetes","href":"/application/kubernetes/","copy":"The cluster platform where CNPG runs Postgres declaratively.","icon":"deploy"},{"title":"Docker","href":"/application/docker/","copy":"Containers for running and backing up database instances.","icon":"package"}],"theme":{"hero_bg":"https://images.unsplash.com/photo-1567604713218-36a0f5841046?q=80&w=2400&auto=format&fit=crop","accent":"#34d399","accent2":"#22d3ee","btn_fg":"#06251b"},"features_eyebrow":"On this page","features_heading":"What this guide covers","related_eyebrow":"Keep exploring","related_heading":"Related applications"},"slug":"/application/sql"},{"title":"Supabase","description":"A deep dive into Supabase, an open-source Firebase alternative powered by PostgreSQL.","template":"splash","tableOfContents":false,"editUrl":false,"lastUpdated":false,"prev":false,"next":false,"sidebar":{"label":"Supabase","order":410},"tags":["supabase","postgres","database","deno","backend"],"unsplash":"1605902711622-cfb43c44367c","img":"https://images.unsplash.com/photo-1605902711622-cfb43c44367c?fit=crop&w=1400&h=700&q=75","bento":{"badge":"application · postgres · backend","title":"The open-source backend,","accent":"Supabase.","lede":"An open-source Firebase alternative powered by PostgreSQL — auth, storage, edge functions, and an encrypted vault on top of a real database. This deep dive builds locked-down private schemas, service-role RPC proxies, and vault-backed secrets the KBVE way.","ctas":[{"label":"User schema","href":"#user","primary":true},{"label":"Admin schema","href":"#admin"},{"label":"Utility functions","href":"#utility"}],"aside":{"icon":"database","title":"Private by default","body":"Every table here denies all access by default — only the service_role touches data directly, and authenticated users go through public proxy functions that validate every input.","points":["<strong>Vault</strong> — secrets encrypted at rest, fetched by key path.","<strong>RPC proxies</strong> — public functions wrap internal security-definer logic.","<strong>RLS</strong> — row level security locked to deny-all policies."]},"stats":[{"label":"Engine","value":"PostgreSQL","icon":"database"},{"label":"Edge runtime","value":"Deno","icon":"bolt"},{"label":"Secrets","value":"Vault","icon":"lock"},{"label":"Direct access","value":"service_role","icon":"key"}],"features":[{"title":"User schema","icon":"lock","href":"#user","body":"Vault-backed user secrets, OSRS account tables, a register edge function, and the hybrid stackable/instance inventory."},{"title":"Admin schema","icon":"gears","href":"#admin","body":"A service-role-only admin schema with refresh flags for caching heavy reads behind materialized views."},{"title":"Utility functions","icon":"code","href":"#utility","body":"ULID generation in plpgsql and a Discord webhook notification edge function."},{"title":"Proxy pattern","icon":"shield","body":"Internal security-definer functions stay private — public wrappers check auth.uid() and sanitize keys before delegating."}],"related":[{"title":"SQL","href":"/application/sql/","copy":"The query language underneath every Supabase RPC.","icon":"database"},{"title":"PocketBase","href":"/application/pocketbase/","copy":"A lighter single-binary backend alternative.","icon":"package"},{"title":"Redis","href":"/application/redis/","copy":"In-memory caching to pair with heavy Postgres reads.","icon":"bolt"}],"theme":{"hero_bg":"https://images.unsplash.com/photo-1605902711622-cfb43c44367c?q=80&w=2400&auto=format&fit=crop","accent":"#34d399","accent2":"#22d3ee","btn_fg":"#06251b"},"features_eyebrow":"On this page","features_heading":"What this guide covers","related_eyebrow":"Keep exploring","related_heading":"Related applications"},"slug":"/application/supabase"},{"title":"Terraform","description":"Terraform is HashiCorp's open-source infrastructure as code (IaC) tool that provisions and manages cloud\nresources across AWS, Azure, GCP, and hundreds of providers from declarative HCL configuration files.\nThis guide covers the core workflow, HCL basics, state management, and reusable modules.\n","template":"splash","tableOfContents":false,"editUrl":false,"lastUpdated":false,"prev":false,"next":false,"sidebar":{"label":"Terraform","order":120},"unsplash":"1524439188326-e47322d1cef2","img":"https://images.unsplash.com/photo-1524439188326-e47322d1cef2?fit=crop&w=1400&h=700&q=75","tags":["iac","devops","terraform"],"sem":1,"ogTitle":"Terraform Guide — Infrastructure as Code Workflow, State & Modules","ogDescription":"Learn Terraform, HashiCorp's infrastructure as code tool — the init/plan/apply workflow, HCL configuration basics, remote state management, and building reusable modules across cloud providers.","jsonld":{"type":"Article","keywords":["terraform","infrastructure as code","hashicorp","hcl","terraform state","terraform modules"],"faq":[{"question":"What is Terraform used for?","answer":"Terraform is an infrastructure as code tool that provisions and manages cloud and on-prem resources through declarative configuration files. You describe the desired end state in HCL, and Terraform figures out the create, update, and destroy actions needed to reach it across providers like AWS, Azure, and GCP."},{"question":"What is the difference between terraform plan and terraform apply?","answer":"terraform plan is a dry run that shows what changes Terraform would make without touching any infrastructure, so you can review adds, changes, and destroys. terraform apply executes those changes against real providers after an optional confirmation prompt."},{"question":"What is Terraform state and why does it matter?","answer":"State is a JSON file that maps your configuration to the real resources Terraform manages, tracking metadata and dependencies. It lets Terraform detect drift and plan minimal changes. In teams, store it remotely (e.g. an S3 bucket with locking) so no two people apply at once against a shared, stale state."},{"question":"What is a Terraform module?","answer":"A module is a reusable, parameterized package of Terraform configuration. The root module is your working directory; child modules are called with a module block and inputs. Modules let you package a VPC, cluster, or service once and reuse it across environments with different variables."},{"question":"Is Terraform free?","answer":"Terraform CLI is open source and free. HashiCorp also offers HCP Terraform (formerly Terraform Cloud) with paid tiers for remote state, run pipelines, and policy. OpenTofu is a community-driven, MPL-licensed fork of Terraform maintained under the Linux Foundation."}]},"bento":{"badge":"application · iac · devops","title":"Declare it once,","accent":"Terraform.","lede":"HashiCorp's infrastructure as code tool — describe servers, networks, and databases in HCL and let one workflow provision them across AWS, Azure, GCP, and hundreds of providers. This guide covers the init/plan/apply loop, HCL configuration basics, remote state with locking, and reusable modules.","ctas":[{"label":"Core workflow","href":"#workflow","primary":true},{"label":"HCL basics","href":"#configuration"},{"label":"State management","href":"#state"}],"aside":{"icon":"gears","title":"Infrastructure from version control","body":"Instead of clicking through cloud consoles, you declare the end state you want in .tf files — the same config reproduces an environment identically every time, with a full change history in git.","points":["<strong>Workflow</strong> — init, plan, apply, destroy.","<strong>State</strong> — remote backends with locking for teams.","<strong>Modules</strong> — package infrastructure once, reuse everywhere."]},"stats":[{"label":"Language","value":"HCL","icon":"code"},{"label":"Dry run","value":"terraform plan","icon":"eye"},{"label":"Providers","value":"Hundreds","icon":"network"},{"label":"OSS fork","value":"OpenTofu","icon":"branch"}],"features":[{"title":"Core workflow","icon":"deploy","href":"#workflow","body":"The four-command loop — init downloads providers, plan previews the diff, apply executes it, destroy tears it down."},{"title":"HCL configuration","icon":"code","href":"#configuration","body":"Providers, resources, variables, outputs, and data sources — the building blocks of every .tf file."},{"title":"State management","icon":"database","href":"#state","body":"Remote backends with locking and encryption keep team applies safe and the state file out of git."},{"title":"Reusable modules","icon":"package","href":"#modules","body":"Parameterized bundles of config from the Terraform Registry or your own modules/ directory keep environments DRY."}],"related":[{"title":"Ansible","href":"/application/ansible/","copy":"Configuration management to pair with Terraform provisioning.","icon":"settings"},{"title":"Kubernetes","href":"/application/kubernetes/","copy":"Cluster orchestration that Terraform can provision and manage.","icon":"deploy"},{"title":"Docker","href":"/application/docker/","copy":"Containers and images for the workloads your infrastructure runs.","icon":"package"}],"theme":{"hero_bg":"https://images.unsplash.com/photo-1524439188326-e47322d1cef2?q=80&w=2400&auto=format&fit=crop","accent":"#34d399","accent2":"#22d3ee","btn_fg":"#06251b"},"features_eyebrow":"On this page","features_heading":"What this guide covers","related_eyebrow":"Keep exploring","related_heading":"Related applications"},"slug":"/application/terraform"},{"title":"Traefik","description":"Traefik is a cloud-native reverse proxy and load balancer with automatic service discovery and Let's Encrypt TLS.\nThis guide covers running Traefik with Docker Compose, patching and installing it on a Kubernetes (k3s) cluster,\nwiring BasicAuth middleware, and automating Cloudflare DNS challenges for ACME certificates.\n","template":"splash","tableOfContents":false,"editUrl":false,"lastUpdated":false,"prev":false,"next":false,"sidebar":{"label":"Traefik","order":1040},"unsplash":"1524419986249-348e8fa6ad4a","img":"https://images.unsplash.com/photo-1524419986249-348e8fa6ad4a?fit=crop&w=1400&h=700&q=75","tags":["network","reverse-proxy","kubernetes"],"sem":1,"ogTitle":"Traefik Guide — Docker, Kubernetes CRDs, Middleware & Cloudflare TLS","ogDescription":"Configure Traefik as a cloud-native reverse proxy — Docker Compose setup, k3s patching, Custom Resource Definitions, BasicAuth middleware, and automated Cloudflare ACME certificates.","jsonld":{"type":"Article","keywords":["traefik","reverse proxy","kubernetes ingress","middleware","cloudflare acme"],"faq":[{"question":"What is Traefik?","answer":"Traefik is a cloud-native reverse proxy and load balancer that automatically discovers services from providers like Docker and Kubernetes, and provisions Let's Encrypt TLS certificates without manual configuration."},{"question":"How is Traefik different from Nginx?","answer":"Traefik discovers routes dynamically from labels and CRDs, so it reconfigures itself as containers start and stop. Nginx uses static config files that require a reload. Traefik also ships automatic ACME TLS, whereas Nginx needs an external tool like certbot."},{"question":"What is a Traefik middleware?","answer":"Middleware modifies requests or responses as they pass through a router — for example BasicAuth, rate limiting, or header rewrites. On Kubernetes it is a Middleware CRD referenced from an Ingress or IngressRoute by namespace-qualified name."},{"question":"How does Traefik get TLS certificates from Cloudflare?","answer":"Traefik uses the ACME DNS-01 challenge with Cloudflare's API. You supply a scoped API token (DNS:Edit and Zone:Read) via environment variables, and Traefik creates the required DNS TXT record automatically to prove domain ownership."},{"question":"What is the difference between Ingress and IngressRoute in Traefik?","answer":"Ingress is the standard Kubernetes resource that Traefik supports via annotations. IngressRoute is Traefik's own CRD that exposes middleware chains, TLS resolvers, and expressive match rules directly, without relying on annotations."},{"question":"How do I secure the Traefik dashboard?","answer":"Enable it with --api.dashboard=true, then attach a BasicAuth middleware referencing api@internal and never expose it publicly without authentication. In Docker Compose, escape dollar signs in the htpasswd hash as double dollar signs."},{"question":"Why does my Traefik htpasswd password break in Docker Compose?","answer":"Compose treats a single dollar sign as variable substitution. Escape every dollar sign in the BasicAuth hash as a double dollar sign so the literal htpasswd value is passed through to Traefik."},{"question":"How does Traefik discover services automatically?","answer":"Traefik watches a provider — the Docker socket, Kubernetes CRDs, or a config file — and builds routers from labels or resources as containers start and stop. This is why it needs no manual reload when your services change."}]},"bento":{"badge":"application · reverse-proxy · network","title":"Routes that find themselves,","accent":"Traefik.","lede":"A cloud-native reverse proxy that discovers services dynamically from Docker labels, Kubernetes CRDs, or file config — and provisions Let's Encrypt TLS automatically. This guide moves from local to production: Docker Compose, k3s patching, BasicAuth middleware, and Cloudflare DNS-01 challenges for ACME certificates.","ctas":[{"label":"Docker Compose","href":"#docker","primary":true},{"label":"Kubernetes","href":"#kubernetes"},{"label":"Config","href":"#config"},{"label":"Cloudflare ACME","href":"#cloudflare"}],"aside":{"icon":"route","title":"No reloads, no config drift","body":"Traefik watches a provider — the Docker socket, Kubernetes CRDs, or a config file — and rebuilds its routers as containers start and stop. Certificates renew themselves through ACME, so routing stays hands-off.","points":["<strong>Discovery</strong> — routers built from labels and CRDs.","<strong>Middleware</strong> — BasicAuth, rate limits, rewrites.","<strong>TLS</strong> — automatic ACME via Cloudflare DNS-01."]},"stats":[{"label":"TLS issuer","value":"Let's Encrypt","icon":"lock"},{"label":"ACME challenge","value":"DNS-01","icon":"key"},{"label":"Providers","value":"Docker · k8s","icon":"network"},{"label":"Dashboard port","value":":8080","icon":"chart"}],"features":[{"title":"Docker Compose","icon":"package","href":"#docker","body":"Stand up Traefik locally with the socket mounted read-only, label-driven routing, and a whoami test service."},{"title":"Kubernetes & CRDs","icon":"deploy","href":"#kubernetes","body":"Patch the k3s service, add the Helm repo, and wire Middleware resources into Ingress annotations."},{"title":"Config & IngressRoute","icon":"gears","href":"#config","body":"Static vs dynamic configuration, the chmod 600 acme.json store, and Traefik's native IngressRoute CRD."},{"title":"Cloudflare ACME","icon":"lock","href":"#cloudflare","body":"Scoped DNS:Edit and Zone:Read API tokens so Traefik solves the DNS-01 challenge automatically."}],"related":[{"title":"Nginx","href":"/application/nginx/","copy":"The static-config alternative — reloads, certbot, and classic proxying.","icon":"server"},{"title":"Kubernetes","href":"/application/kubernetes/","copy":"The cluster Traefik fronts — k3s, Talos, and operations.","icon":"deploy"},{"title":"Docker","href":"/application/docker/","copy":"Containers, labels, and Compose — the provider Traefik watches.","icon":"package"}],"theme":{"hero_bg":"https://images.unsplash.com/photo-1524419986249-348e8fa6ad4a?q=80&w=2400&auto=format&fit=crop","accent":"#34d399","accent2":"#22d3ee","btn_fg":"#06251b"},"features_eyebrow":"On this page","features_heading":"What this guide covers","related_eyebrow":"Keep exploring","related_heading":"Related applications"},"slug":"/application/traefik"},{"title":"Unity","description":"Unity is a powerful 3D and 2D game engine that enables the creation of cross-platform games, interactive experiences, and real-time 3D applications.\nThe Unity Engine offers tools for animation, physics, rendering, and artificial intelligence, supporting both beginners and professional developers.\nWith extensive support for VR, AR, and mobile platforms, Unity serves as a comprehensive development environment for building engaging content across a variety of industries.\n","template":"splash","tableOfContents":false,"editUrl":false,"lastUpdated":false,"prev":false,"next":false,"sidebar":{"label":"Unity","order":1301},"unsplash":"1519669556878-63bdad8a1a49","img":"https://images.unsplash.com/photo-1519669556878-63bdad8a1a49?fit=crop&w=1400&h=700&q=75","tags":["game-engine","software"],"bento":{"badge":"application · game engine","title":"Build once, ship everywhere,","accent":"Unity.","lede":"A powerful 2D and 3D engine for cross-platform games, interactive experiences, and real-time applications. This guide gathers KBVE's notes on the engine's core concepts, its services and APIs, the plugins we rely on, and the build errors we have already debugged.","ctas":[{"label":"Engine basics","href":"#information","primary":true},{"label":"Scenes","href":"#scene"},{"label":"Plugins","href":"#plugins"},{"label":"Common errors","href":"#errors"}],"aside":{"icon":"box","title":"One engine, every platform","body":"Unity spans desktop, mobile, console, and VR/AR from a single C# codebase — with real-time rendering, physics, and animation built in, plus an asset store and plugin ecosystem to extend it further.","points":["<strong>Scenes</strong> — the self-contained units every project builds on.","<strong>Integrations</strong> — Firebase, Steam, Strapi, AppWrite, and more.","<strong>Plugins</strong> — UCC, Corgi, Vuplex, and KBVE's own packages."]},"stats":[{"label":"Scripting","value":"C#","icon":"code"},{"label":"Dimensions","value":"2D & 3D","icon":"box"},{"label":"Platforms","value":"20+","icon":"deploy"},{"label":"Recommended build","value":"LTS","icon":"clock"}],"features":[{"title":"Engine fundamentals","icon":"box","href":"#scene","body":"Scenes, game objects, components, and async loading — the building blocks of every Unity project."},{"title":"Services & APIs","icon":"server","href":"#api","body":"Wire up multiplayer JWTs, Strapi, AppWrite, Firebase, and the Steamworks release pipeline."},{"title":"Plugin notes","icon":"package","href":"#plugins","body":"Field notes on UCC, Corgi, Vuplex webviews, OneJS, and KBVE's own Unity packages."},{"title":"Errors & fixes","icon":"alert","href":"#errors","body":"A running log of WebGL, il2cpp, and dirty-branch build errors — and how we solved them."}],"related":[{"title":"Unreal Engine","href":"/application/unreal/","copy":"The other heavyweight engine — C++, Blueprints, and Nanite.","icon":"render"},{"title":"Godot","href":"/application/godot/","copy":"The open-source engine alternative for 2D and 3D projects.","icon":"sword"},{"title":"Git","href":"/application/git/","copy":"Where the Unity CI/CD and GameCI pipeline notes now live.","icon":"branch"}],"theme":{"hero_bg":"https://images.unsplash.com/photo-1519669556878-63bdad8a1a49?q=80&w=2400&auto=format&fit=crop","accent":"#34d399","accent2":"#22d3ee","btn_fg":"#06251b"},"features_eyebrow":"On this page","features_heading":"What this guide covers","related_eyebrow":"Keep exploring","related_heading":"Related applications"},"slug":"/application/unity"},{"title":"Unreal Engine","description":"Unreal Engine is a powerful real-time 3D creation platform developed by Epic Games, widely used for building high-fidelity games, simulations, and interactive experiences.\nThe engine offers advanced rendering capabilities, including Nanite virtualized geometry and Lumen global illumination, alongside robust tools for animation, physics, and AI.\nWith support for C++ and Blueprints visual scripting, Unreal Engine provides flexibility for both programmers and designers across industries including gaming, film, architecture, and automotive.\n","template":"splash","tableOfContents":false,"editUrl":false,"lastUpdated":false,"prev":false,"next":false,"sidebar":{"label":"Unreal Engine","order":1302},"unsplash":"1542751371-adc38448a05e","img":"https://images.unsplash.com/photo-1542751371-adc38448a05e?fit=crop&w=1400&h=700&q=75","tags":["game-engine","software"],"bento":{"badge":"application · game-engine · software","title":"Real-time worlds,","accent":"Unreal Engine.","lede":"Epic Games' real-time 3D platform behind high-fidelity games, simulations, and interactive experiences. This guide covers the engine from Blueprints and C++ through Nanite, Lumen, and multiplayer — plus the KBVE plugin collection and the CI/CD pipeline that builds and ships Unreal projects from the monorepo.","ctas":[{"label":"Getting started","href":"#getting-started","primary":true},{"label":"C++ development","href":"#cpp-development"},{"label":"Rendering","href":"#rendering"},{"label":"KBVE plugins","href":"#kbve-plugins"}],"aside":{"icon":"render","title":"One engine, every platform","body":"From Nanite virtualized geometry to Lumen global illumination, Unreal Engine 5 pairs film-quality rendering with tools for animation, physics, AI, and networking — deployable to desktop, console, mobile, and XR from a single project.","points":["<strong>Scripting</strong> — C++ for depth, Blueprints for speed.","<strong>Rendering</strong> — Nanite, Lumen, and Virtual Shadow Maps.","<strong>Pipeline</strong> — RunUAT builds shipped via KBVE CI/CD."]},"stats":[{"label":"Developer","value":"Epic Games","icon":"crown"},{"label":"First release","value":"1998","icon":"clock"},{"label":"Languages","value":"C++ / Blueprints","icon":"code"},{"label":"Royalty","value":"5% after $1M","icon":"license"}],"features":[{"title":"Blueprints","icon":"route","href":"#blueprints","body":"Visual scripting for gameplay logic — Blueprint types, communication patterns, and hybrid C++ workflows."},{"title":"C++ framework","icon":"code","href":"#cpp-development","body":"The Gameplay Framework, reflection macros, and the module-based build system behind every Unreal project."},{"title":"Nanite & Lumen","icon":"render","href":"#rendering","body":"Virtualized geometry, dynamic global illumination, Virtual Shadow Maps, and the render pipeline options."},{"title":"KBVE CI/CD & plugins","icon":"deploy","href":"#cicd","body":"RunUAT automation, Agones server builds, and the open-source KBVE plugin collection at packages/unreal."}],"related":[{"title":"Unity","href":"/application/unity/","copy":"The DOTS-based engine powering Rareicon.","icon":"box"},{"title":"Godot","href":"/application/godot/","copy":"The open-source engine alternative with Rust bindings.","icon":"sword"},{"title":"Blender","href":"/application/blender/","copy":"Asset creation and sprite baking for game pipelines.","icon":"camera"}],"theme":{"hero_bg":"https://images.unsplash.com/photo-1542751371-adc38448a05e?q=80&w=2400&auto=format&fit=crop","accent":"#34d399","accent2":"#22d3ee","btn_fg":"#06251b"},"features_eyebrow":"On this page","features_heading":"What this guide covers","related_eyebrow":"Keep exploring","related_heading":"Related applications"},"slug":"/application/unreal"},{"title":"v01d","description":"Virtualized Object Intelligence Daemon, or VOID, is an operator application that manages servers, nested machines and clustered instances within an eco-system.\n","template":"splash","tableOfContents":false,"editUrl":false,"lastUpdated":false,"prev":false,"next":false,"sidebar":{"label":"V01D","order":10000},"unsplash":"1537158345907-c4fb34477bd6","img":"https://images.unsplash.com/photo-1537158345907-c4fb34477bd6?fit=crop&w=1400&h=700&q=75","tags":["software","virtualization","automation"],"sem":1,"ogTitle":"v01d (VOID) — Virtualization & Automation Operator Daemon","ogDescription":"v01d is the Virtualized Object Intelligence Daemon (VOID), an operator that manages servers, nested machines, and clustered instances with soft-scripting automation and RBAC across the KBVE ecosystem.","jsonld":{"type":"Article","keywords":["v01d","void","virtualization","automation","orchestration","operator daemon"],"faq":[{"question":"What is v01d?","answer":"v01d (VOID — Virtualized Object Intelligence Daemon) is an operator application that manages servers, nested machines, and clustered instances across the KBVE ecosystem. It focuses on soft-scripting automation with fine-grained RBAC over virtual environments and containers, from small-scale testing to production."},{"question":"What is an environ in v01d?","answer":"An environ is an entity that helps balance and regulate the digital environment managed by VOID. Examples include tr33 (a collection of timers for micro tasks), s33d (data seeding), bl0ck (micro storage), and r00t (an OS-level embed, currently disabled)."},{"question":"What is tr33 in v01d?","answer":"tr33 is an environ — a collection of timers that handle micro tasks on the host machine. The stable branch, tr33._04, targets Ubuntu 22 LTS, Debian 9, and Windows 10/11, while the YAML- and JSON-based v5 and v6 lines are unstable and slated for deprecation."},{"question":"Which platforms does v01d install on?","answer":"VOID ships install scripts for Linux (Ubuntu 24+ and Debian 11+, which self-delete after running) and a Windows 11 installer that needs admin privileges. On Apple Silicon Macs (M1/M2), the ARM architecture may require isolation from Intel Macs, with Homebrew as a likely path."}]},"bento":{"badge":"application · virtualization · automation","title":"The operator in the dark,","accent":"v01d.","lede":"VOID — the Virtualized Object Intelligence Daemon — is an internal operator that manages servers, nested machines, and clustered instances across the KBVE ecosystem. It leans on soft-scripting automation with fine-grained RBAC, orchestrating virtual environments and containers through regulating entities called environs.","ctas":[{"label":"How VOID works","href":"#void","primary":true},{"label":"tr33 timers","href":"#tr33"},{"label":"s33d seeding","href":"#s33d"}],"aside":{"icon":"gears","title":"Environs regulate the void","body":"VOID organizes its behavior into environs — entities that balance and regulate the digital environment, from host-machine timers to micro storage blocks and torrent-style data seeding.","points":["<strong>tr33</strong> — timers handling micro tasks on the host.","<strong>s33d</strong> — torrent-style data seeding and DNA commands.","<strong>bl0ck</strong> — micro storage with AES-compressed blocks."]},"stats":[{"label":"Stable branch","value":"tr33._04","icon":"branch"},{"label":"Access control","value":"RBAC","icon":"lock"},{"label":"Linux targets","value":"Ubuntu 24+ / Debian 11+","icon":"server"},{"label":"NFC seed size","value":"64 bytes","icon":"database"}],"features":[{"title":"VOID installers","icon":"package","href":"#void","body":"Self-deleting install scripts for Ubuntu and Debian, a Windows 11 installer, and notes on Apple Silicon isolation."},{"title":"tr33 timers","icon":"clock","href":"#tr33","body":"The timer environ — stable v4 for Ubuntu 22 LTS, Debian 9, and Windows 10/11, plus the deprecated lineage."},{"title":"s33d seeding","icon":"route","href":"#s33d","body":"Torrent-style data seeding, DNA commands that enable future applications, and 64-byte NFC-compressed seeds."},{"title":"bl0ck & r00t","icon":"shield","href":"#bl0ck","body":"Micro storage with Base64-AES blocks and a micro blockchain — plus the disabled OS-level r00t embed."}],"related":[{"title":"Docker","href":"/application/docker/","copy":"Containers and images that VOID orchestrates across instances.","icon":"package"},{"title":"Proxmox","href":"/application/proxmox/","copy":"The virtualization platform hosting nested machines.","icon":"server"},{"title":"Kubernetes","href":"/application/kubernetes/","copy":"Clustered instance orchestration at ecosystem scale.","icon":"deploy"}],"theme":{"hero_bg":"https://images.unsplash.com/photo-1537158345907-c4fb34477bd6?q=80&w=2400&auto=format&fit=crop","accent":"#34d399","accent2":"#22d3ee","btn_fg":"#06251b"},"features_eyebrow":"On this page","features_heading":"What this guide covers","related_eyebrow":"Keep exploring","related_heading":"Related applications"},"slug":"/application/v01d"},{"title":"Windmill","description":"Windmill is an open-source developer platform that turns scripts in TypeScript, Python, Go, and Bash into\nAPIs, cron jobs, and UIs. This guide covers core concepts, self-hosting with Docker, writing your first\nscript, and how KBVE runs one-off Windmill jobs from Discord.\n","template":"splash","tableOfContents":false,"editUrl":false,"lastUpdated":false,"prev":false,"next":false,"sidebar":{"label":"Windmill","order":1041},"unsplash":"1549605659-32d82da3a059","img":"https://images.unsplash.com/photo-1549605659-32d82da3a059?fit=crop&w=1400&h=700&q=75","tags":["automation","workflow","self-hosted"],"sem":1,"ogTitle":"Windmill Guide — Scripts as APIs, Self-Hosting & Workflow Automation","ogDescription":"Learn Windmill, the open-source developer platform that turns TypeScript, Python, Go, and Bash scripts into APIs, cron jobs, flows, and UIs — core concepts, self-hosting with Docker, your first script, and how KBVE triggers one-off jobs from Discord.","jsonld":{"type":"Article","keywords":["windmill","workflow automation","scripts as apis","self-hosted automation","windmill docker","developer platform"],"faq":[{"question":"What is Windmill?","answer":"Windmill is an open-source developer platform that turns scripts written in TypeScript, Python, Go, Bash, and SQL into shareable APIs, scheduled cron jobs, multi-step flows, and internal UIs. You write plain code; Windmill auto-generates an input form from the function signature and handles execution, secrets, permissions, and logging."},{"question":"Is Windmill open source?","answer":"Windmill's core is open source under the AGPLv3 license and can be self-hosted for free. There is also a paid enterprise edition and a managed cloud offering with additional features like distributed workers, audit logs, and SSO."},{"question":"How is Windmill different from n8n?","answer":"n8n is node-based — you wire visual nodes on a canvas. Windmill is code-first — you write scripts in TypeScript, Python, Go, or Bash and Windmill wraps each one as an API, cron, or UI. Windmill also supports visual flows that chain scripts together, so you get both code-native ergonomics and a low-code composition layer."},{"question":"How do I self-host Windmill?","answer":"The simplest route is Docker Compose. Run the ghcr.io/windmill-labs/windmill image backed by a Postgres database, add one or more worker containers, and expose the server behind a reverse proxy with TLS. Workers pull jobs from a Postgres-backed queue, so you scale throughput by adding worker replicas."},{"question":"Do Windmill scripts keep running and use resources when idle?","answer":"No. A Windmill script is on-demand — a trigger starts it, it runs, it exits. Unless you attach a cron schedule or a long-polling flow, an idle script consumes no CPU. You only pay for execution time per invocation, which makes one-off command-triggered scripts extremely cheap to keep around."}]},"bento":{"badge":"application · automation · workflow","title":"Turn scripts into,","accent":"infrastructure.","lede":"An open-source developer platform that wraps your TypeScript, Python, Go, and Bash scripts as APIs, cron jobs, flows, and internal UIs — code first, with auto-generated forms, managed secrets, and permissions. This guide covers the core concepts, self-hosting with Docker, your first script, and how KBVE triggers one-off jobs straight from Discord.","ctas":[{"label":"Core concepts","href":"#concepts","primary":true},{"label":"Self-host","href":"#self-host"},{"label":"First script","href":"#first-script"},{"label":"KBVE workflows","href":"#kbve"},{"label":"Deployment","href":"#deploy"},{"label":"State & runs","href":"#state"}],"aside":{"icon":"route","title":"Code first, low-code second","body":"You write plain scripts; Windmill generates the input form from the function signature and wraps each one as an API, cron, or UI. Flows then chain scripts together visually when you need orchestration.","points":["<strong>Scripts</strong> — a single function, wrapped as an API.","<strong>Flows</strong> — scripts chained into a multi-step DAG.","<strong>Apps</strong> — internal UIs built on top of scripts."]},"stats":[{"label":"License","value":"AGPLv3","icon":"license"},{"label":"Default port","value":"8000","icon":"network"},{"label":"Languages","value":"TS · Py · Go · Bash","icon":"code"},{"label":"Idle cost","value":"Zero","icon":"zap"}],"features":[{"title":"Concepts","icon":"book","href":"#concepts","body":"Scripts, flows, apps, workspaces, triggers, and workers — the vocabulary of the platform."},{"title":"Self-Host","icon":"server","href":"#self-host","body":"A Docker Compose deployment with Postgres and a scalable worker pool."},{"title":"First Script","icon":"route","href":"#first-script","body":"Write a function, let Windmill generate the form, run it as an API or on a schedule."},{"title":"KBVE Workflows","icon":"zap","href":"#kbve","body":"How we trigger one-off Windmill scripts from Discord with the /wm command."},{"title":"Deployment","icon":"deploy","href":"#deploy","body":"The monorepo-to-cluster sync pipeline, and what it took to ship /wm npm."},{"title":"State & Runs","icon":"database","href":"#state","body":"Where Windmill keeps every job — the schema, the run tables, and the lifecycle of one execution."}],"related":[{"title":"n8n","href":"/application/n8n/","copy":"The node-based automation tool Windmill replaced in our stack.","icon":"route"},{"title":"Docker","href":"/application/docker/","copy":"The container runtime behind the simplest Windmill deployment.","icon":"package"},{"title":"Supabase","href":"/application/supabase/","copy":"The Postgres platform Windmill stores its state in for us.","icon":"database"}],"theme":{"hero_bg":"https://images.unsplash.com/photo-1549605659-32d82da3a059?q=80&w=2400&auto=format&fit=crop","accent":"#f472b6","accent2":"#38bdf8","btn_fg":"#2a0a1c"},"features_eyebrow":"On this page","features_heading":"What this guide covers","related_eyebrow":"Keep exploring","related_heading":"Related applications"},"slug":"/application/windmill"},{"title":"WireGuard","description":"WireGuard is a fast, modern, open-source VPN protocol that builds encrypted point-to-point tunnels with\nstate-of-the-art cryptography and a tiny codebase. This guide covers the core concepts, a basic peer-to-peer\nsetup, a full Kubernetes DaemonSet deployment, Docker, and Netmaker automation.\n","template":"splash","tableOfContents":false,"editUrl":false,"lastUpdated":false,"prev":false,"next":false,"sidebar":{"label":"WireGuard","order":100},"unsplash":"1649429398909-db7ae841c386","img":"https://images.unsplash.com/photo-1649429398909-db7ae841c386?fit=crop&w=1400&h=700&q=75","tags":["network","vpn","security"],"sem":1,"ogTitle":"WireGuard VPN Guide — Peer-to-Peer, Kubernetes & Netmaker","ogDescription":"Set up WireGuard, the fast modern VPN — understand keys and peers, build a basic point-to-point tunnel, deploy it on Kubernetes as a DaemonSet, and automate meshes with Netmaker.","jsonld":{"type":"Article","keywords":["wireguard","vpn","encrypted tunnel","kubernetes networking","netmaker"],"faq":[{"question":"What is WireGuard?","answer":"WireGuard is an open-source VPN protocol that creates fast, encrypted point-to-point tunnels. It uses modern cryptography, runs in the Linux kernel for high performance, and has a very small codebase — a few thousand lines — which reduces its attack surface."},{"question":"How does WireGuard differ from OpenVPN?","answer":"WireGuard is far smaller and faster. It runs in the kernel with modern fixed cryptography and connects almost instantly, whereas OpenVPN runs in userspace with configurable ciphers and higher overhead. WireGuard configs are also much simpler."},{"question":"What are AllowedIPs in a WireGuard config?","answer":"AllowedIPs serves two roles — it defines which source IPs are accepted from a peer (a cryptographic access control list) and which destination IPs are routed through that peer. Setting 0.0.0.0/0 routes all traffic through the tunnel."},{"question":"What is PersistentKeepalive in WireGuard?","answer":"PersistentKeepalive sends a small packet every N seconds to keep a NAT or firewall mapping open. It is needed when a peer sits behind NAT and must remain reachable; a value of 25 seconds is the common default."},{"question":"What port does WireGuard use?","answer":"WireGuard uses a single UDP port, 51820 by default, set with ListenPort. Because it is UDP-only, you must allow that port through firewalls like ufw, iptables, or nftables on the server side."}]},"bento":{"badge":"application · network · vpn","title":"Tunnels without the bloat,","accent":"WireGuard.","lede":"A fast, modern, open-source VPN protocol that builds encrypted point-to-point tunnels with state-of-the-art cryptography and a tiny codebase. This guide walks through the core peer-and-key model, the smallest useful two-machine tunnel, a full Kubernetes DaemonSet deployment, Docker, and mesh automation with Netmaker.","ctas":[{"label":"How it works","href":"#how-wireguard-works","primary":true},{"label":"Peer-to-peer tunnel","href":"#basic-peer-to-peer-tunnel"},{"label":"Docker","href":"#docker"},{"label":"Netmaker","href":"#netmaker"}],"aside":{"icon":"lock","title":"Peers, not clients","body":"WireGuard's model is symmetric — every device is a peer with a key pair, and the public keys themselves form the access control list. One UDP port, a handful of config lines, and the tunnel is up.","points":["<strong>Keys</strong> — public keys are the ACL; generate with wg genkey.","<strong>Routing</strong> — AllowedIPs decides what flows through each peer.","<strong>NAT</strong> — PersistentKeepalive holds firewall mappings open."]},"stats":[{"label":"Transport","value":"UDP 51820","icon":"network"},{"label":"Codebase","value":"~4k LOC","icon":"code"},{"label":"Crypto","value":"ChaCha20","icon":"lock"},{"label":"Keepalive","value":"25s","icon":"clock"}],"features":[{"title":"How WireGuard works","icon":"key","href":"#how-wireguard-works","body":"The peer model, key pairs, and the five config fields — PrivateKey, PublicKey, AllowedIPs, Endpoint, PersistentKeepalive — that do most of the work."},{"title":"Peer-to-peer + Kubernetes","icon":"deploy","href":"#basic-peer-to-peer-tunnel","body":"The smallest useful two-machine tunnel, then a full step-by-step DaemonSet and ConfigMap deployment across cluster nodes."},{"title":"Docker","icon":"package","href":"#docker","body":"Running WireGuard in a container — Compose notes, firewall prep, and opening UDP 51820 through ufw."},{"title":"Netmaker automation","icon":"gears","href":"#netmaker","body":"Automate WireGuard meshes from homelab to enterprise with Netmaker's highly available Helm install."}],"related":[{"title":"Kubernetes","href":"/application/kubernetes/","copy":"The cluster platform the DaemonSet deployment runs on.","icon":"deploy"},{"title":"Docker","href":"/application/docker/","copy":"Container fundamentals behind the WireGuard Compose setup.","icon":"package"},{"title":"Linux","href":"/application/linux/","copy":"The kernel WireGuard lives in — sysadmin essentials.","icon":"server"}],"theme":{"hero_bg":"https://images.unsplash.com/photo-1649429398909-db7ae841c386?q=80&w=2400&auto=format&fit=crop","accent":"#34d399","accent2":"#22d3ee","btn_fg":"#06251b"},"features_eyebrow":"On this page","features_heading":"What this guide covers","related_eyebrow":"Keep exploring","related_heading":"Related applications"},"slug":"/application/wireguard"}],"key":{"android":0,"Android":0,"ansible":1,"Ansible":1,"appwrite":2,"Appwrite":2,"argocd":3,"ArgoCD":3,"authelia":4,"Authelia":4,"blender":5,"Blender":5,"css":6,"CSS":6,"cubejs":7,"CubeJS":7,"docker":8,"Docker":8,"flipperzero":9,"FlipperZero":9,"flutter":10,"Flutter":10,"gcloud":11,"GCloud":11,"git":12,"Git":12,"godot":13,"Godot":13,"index":14,"Application Navigator":14,"intel-nuc-talos":15,"Intel NUC Talos Worker Nodes":15,"Intel NUC Setup":15,"ios":16,"iOS":16,"javascript":17,"Javascript":17,"kubernetes":18,"Kubernetes":18,"linux":19,"Linux":19,"longhorn":20,"Longhorn":20,"ml":21,"Machine Learning & Artificial Intelligence":21,"Machine Learning & AI":21,"n8n":22,"N8N":22,"nginx":23,"Nginx":23,"nmap":24,"Nmap Cheatsheet: Commands, Examples & Tutorials":24,"Nmap":24,"nomad":25,"Nomad":25,"obs":26,"OBS Studio":26,"OBS":26,"php":27,"PHP":27,"pocketbase":28,"Pocketbase":28,"portainer":29,"Portainer":29,"proxmox":30,"Proxmox":30,"python":31,"Python":31,"redis":32,"Redis":32,"rn":33,"React Native":33,"rust":34,"Rust":34,"sql":35,"SQL":35,"supabase":36,"Supabase":36,"terraform":37,"Terraform":37,"traefik":38,"Traefik":38,"unity":39,"Unity":39,"unreal":40,"Unreal Engine":40,"v01d":41,"V01D":41,"windmill":42,"Windmill":42,"wireguard":43,"WireGuard":43}}