Muhammet Şafak — Just Ask — Questions & Answers

Should I run several dependent operations with errgroup so the first error cancels the rest?

Fri, 04 Sep 2026 00:00:00 GMT

Move to `errgroup.WithContext` with a request-level timeout on top and thread ctx into every HTTP and DB call; an ignored ctx means no cancellation at all.

Should I use chunkById instead of chunk when the same job also updates the rows it iterates?

Tue, 01 Sep 2026 00:00:00 GMT

Use `chunkById()` when there is real per-row work and never touch the cursor column; if you only update a column, switch to one set-based `UPDATE`.

How do I cleanly implement "withX" copy methods on readonly value objects?

Fri, 28 Aug 2026 00:00:00 GMT

A readonly withX returns a new instance: `new self` with named arguments is portable, and `clone($this, [...])` fits PHP 8.5 when validation is simple.

How does the nature of the work change on the jump from senior to staff?

Tue, 25 Aug 2026 00:00:00 GMT

Take an ownerless org-level problem, lay the solution out in a written tech strategy, and show impact through the teams you accelerate, not your commits.

How should I carry a correlation ID from the HTTP request all the way into queued jobs?

Fri, 21 Aug 2026 00:00:00 GMT

Generate the ID as a W3C `traceparent`, carry it in an SQS message attribute rather than the body, and inject it with the OTel propagator on both sides.

My non-root container can't write to the mounted storage directory—how do I fix the permissions?

Tue, 18 Aug 2026 00:00:00 GMT

Pin the user with a build-time `ARG UID`, use `COPY --chown`, and for named volumes chown only `storage` and `bootstrap/cache` in the entrypoint.

Should I author the OpenAPI spec first or generate it from my code?

Fri, 14 Aug 2026 00:00:00 GMT

Go contract-first with `openapi.yaml` as the single source of truth; what ends drift isn't the direction you pick but a green contract test running in CI.

Should I use a partial index on a queue table where I only ever scan 'pending' rows?

Tue, 11 Aug 2026 00:00:00 GMT

Build the partial index on `WHERE status='pending'`, include the `ORDER BY` column, pair it with `FOR UPDATE SKIP LOCKED`, and pass 'pending' literally.

How do I propagate context cancellation correctly through nested service calls?

Fri, 07 Aug 2026 00:00:00 GMT

Cancellation propagates only if you pass `r.Context()` into every downstream call, leave no `context.Background()` in the chain, and use `WithoutCancel`.

Should I bind a Money value object to Eloquent with a custom cast or with accessors/mutators?

Tue, 04 Aug 2026 00:00:00 GMT

Integer cents in the DB, an immutable `Money` on the model: put the mapping in one `CastsAttributes` class and keep currency as a second column there.

Should I use PHPStan generics for type-safe collections or hand-write a class per type?

Fri, 31 Jul 2026 00:00:00 GMT

Default to `list` docblocks with strict PHPStan in CI; add one generic `Collection` for behavior, a concrete class only at a trust boundary.

How do I demonstrate the broader impact expected when moving from mid-level to senior?

Tue, 28 Jul 2026 00:00:00 GMT

Turn the promotion into a concrete move: pick one fuzzy problem nobody owns and carry it end to end for a quarter, from its definition to its rollout.

How do I set a clear rule for when to log at WARN versus ERROR?

Fri, 24 Jul 2026 00:00:00 GMT

Log at ERROR when the line would wake someone at 3am and at WARN when it would not, log a failure once at its boundary, and alert on the ERROR rate.

Should I define the healthcheck in the Dockerfile or leave it to Kubernetes probes?

Tue, 21 Jul 2026 00:00:00 GMT

Define readiness, liveness and startup as Kubernetes probes; keep HEALTHCHECK only if the image also runs under Compose, pointing both at one endpoint.

How should I run the sunset process when deprecating an endpoint in my public API?

Fri, 17 Jul 2026 00:00:00 GMT

Instrument usage per partner, publish a dated sunset with Sunset and Deprecation headers on every response, run brownouts, and cut when usage nears zero.

Why does a query use an Index Scan in staging but a Seq Scan in production, and how do I diagnose it with EXPLAIN?

Tue, 14 Jul 2026 00:00:00 GMT

Run EXPLAIN (ANALYZE, BUFFERS) in production, then ANALYZE the table and check n_dead_tup; tune autovacuum per-table for sessions and add a partial index.

How do I detect and prevent goroutine leaks in a long-running Go service?

Fri, 10 Jul 2026 00:00:00 GMT

Export NumGoroutine() as a metric, take a pprof goroutine dump at peak, make the spawn site behind the parked stacks honor ctx.Done(), then add goleak.

Should I enable Model::preventLazyLoading only locally or in production too?

Tue, 07 Jul 2026 00:00:00 GMT

Run it fully strict and throwing in local and CI; in production keep it on but wire handleLazyLoadingViolationUsing to log without failing the request.

What do I gain and lose by moving my status class constants to backed enums?

Fri, 03 Jul 2026 00:00:00 GMT

Add a backed enum on the same integer values, use tryFrom() at the boundaries, and keep the old constants as deprecated aliases while you move call sites.

How do I design a self-healing deploy that auto-rolls back when the error rate spikes?

Sat, 13 Jun 2026 00:00:00 GMT

Hold the new version at a canary weight and check 5xx and latency against a threshold; on breach, roll back to the last stable release and alert the team.

Should I put my API server behind a Cloudflare Tunnel and close port 443 to the internet?

Sat, 13 Jun 2026 00:00:00 GMT

The tunnel is sound but makes Cloudflare your only way in; stay on the current Caddy setup, lock the origin to Cloudflare's IP ranges and add origin pulls.

Canary or Blue-Green deployment for a fintech API?

Fri, 12 Jun 2026 00:00:00 GMT

Make Canary the default for routine releases and save Blue-Green for big cutovers needing an instant flip, since both demand expand/contract migrations.

Why is keeping the key in .env risky when encrypting sensitive financial data — what do KMS/Vault give you?

Fri, 12 Jun 2026 00:00:00 GMT

Take the key out of .env, keep it in KMS or Vault and use envelope encryption; for national IDs and card data, prefer tokenization wherever you can.

How do I position feature flags when moving from Gitflow to Trunk-Based?

Fri, 12 Jun 2026 00:00:00 GMT

Drop the long-lived branches, merge small changes to main continuously, keep unfinished work behind a flag that's off in prod, and delete flags once done.

How do I isolate self-hosted CI/CD runners and build an ephemeral, clean-after-each-run environment?

Fri, 12 Jun 2026 00:00:00 GMT

Move the runner to a register-run-once-destroy model and run jobs unprivileged; never hand over the Docker socket, and never run fork PRs on it.

How do I distribute a Go CLI to multiple platforms with GoReleaser and Homebrew?

Fri, 12 Jun 2026 00:00:00 GMT

Let one tag-triggered workflow cross-compile and publish the GitHub Release while the brews: block updates the tap formula; the tap needs its own PAT.

How do I rewind to seconds before a disaster with WAL archiving and PITR?

Fri, 12 Jun 2026 00:00:00 GMT

Take a periodic base backup, archive WAL to S3 continuously, replay to a recovery_target_time seconds before the bad statement, and rehearse the restore.

How do I run database migrations safely in CI/CD?

Fri, 12 Jun 2026 00:00:00 GMT

Add the column nullable, move the backfill to a separate throttled step, run migrations in their own stage, and drop the old column in a later release.

How do I set up secretless AWS access in CI/CD with OIDC and IAM roles?

Fri, 12 Jun 2026 00:00:00 GMT

Delete the long-lived AWS keys from GitHub Secrets and assume a repo/branch-scoped IAM role over OIDC; pull non-cloud secrets from a manager at runtime.

How do I shrink Docker images with multi-stage builds and distroless?

Fri, 12 Jun 2026 00:00:00 GMT

Leave the build tools in the builder stage: make the final stage distroless/static or scratch for Go and fpm-alpine for PHP, and run as non-root.

How do I safely manage Terraform state with S3 + DynamoDB locking?

Fri, 12 Jun 2026 00:00:00 GMT

Move state to a versioned, encrypted S3 backend and add a DynamoDB lock table (deprecated but working), keep state per environment, and apply only from CI.

How do I stop OPcache from causing 500s during a zero-downtime DeployerPHP deploy?

Fri, 12 Jun 2026 00:00:00 GMT

After flipping the symlink, gracefully reload PHP-FPM rather than restarting it; on Octane, octane:reload is mandatory and opcache_reset is optional.

Time-series data: TimescaleDB or InfluxDB?

Thu, 11 Jun 2026 00:00:00 GMT

100M rows a day breaks a plain table, so chunk it by time with hypertables, materialize the averages as continuous aggregates, and compress the old chunks.

How do I coordinate a zero-loss schema migration with dual-writing on a live table?

Thu, 11 Jun 2026 00:00:00 GMT

Instead of a blocking `ALTER TABLE` on 20M rows run expand/contract: add nullable columns, dual-write, backfill in throttled batches, then drop the old.

Why should I use a Sorted Set for a live leaderboard in Redis?

Wed, 10 Jun 2026 00:00:00 GMT

Use a Sorted Set instead of plain string keys sorted in the app, since `ZADD` updates in O(log N) and `ZREVRANGE 0 99` returns the top 100 already ordered.

When should I apply CQRS, and how do I sync the read and write models?

Tue, 09 Jun 2026 00:00:00 GMT

Move reporting to a read replica and adopt CQRS only when query shapes outgrow one schema, feeding the read model from outbox events, not dual-writes.

Should I choose NoSQL or PostgreSQL for flexible product attributes?

Mon, 08 Jun 2026 00:00:00 GMT

Keep products, prices and orders in PostgreSQL and put the variable attributes in one GIN-indexed `JSONB` column; reporting alone rules out splitting.

Race condition on balance updates: Pessimistic Lock or Redlock?

Mon, 08 Jun 2026 00:00:00 GMT

Keep the invariant in the DB with an atomic `UPDATE ... WHERE balance >= 40` or a `SELECT ... FOR UPDATE`, and save Redlock for non-DB resources.

How do I handle poison-pill messages and a Dead Letter Queue in the queue?

Sun, 07 Jun 2026 00:00:00 GMT

Put `tries` and a `backoff` on the job so it lands in `failed_jobs` at the cap, alert from a `JobFailed` listener and replay it with `queue:retry`.

Health check design: how do I separate Liveness and Readiness?

Sat, 06 Jun 2026 00:00:00 GMT

Keep liveness dependency-free and check dependencies in readiness with a cached probe, since liveness restarts the pod while readiness only sheds traffic.

How do I migrate a table to PostgreSQL partitioning with zero downtime?

Sat, 06 Jun 2026 00:00:00 GMT

Stand up monthly RANGE declarative partitioning on `created_at`, backfill history in batches while the app writes, then swap names in a single transaction.

What rules should I follow to prevent database deadlocks?

Fri, 05 Jun 2026 00:00:00 GMT

Acquire locks in one global order such as ascending PK, keep transactions short, target `FOR UPDATE` at the fewest rows, and retry the rest with backoff.

How do I handle panics in a Go HTTP server with recovery middleware?

Thu, 04 Jun 2026 00:00:00 GMT

Wrap requests in a `defer recover()` middleware at the outermost layer, log the stack with the request id, return a generic 500 and emit a metric.

Disaster recovery: how do I design an active-passive scenario around RTO and RPO?

Wed, 03 Jun 2026 00:00:00 GMT

RPO 5min buys continuous cross-region replication and PITR, RTO 30min an IaC-provisioned warm standby behind Route 53 failover, rehearsed on a game-day.

How do I prevent log storms and disk-full outages?

Tue, 02 Jun 2026 00:00:00 GMT

Collapse repeated errors into one counted line, back off retries, cap logrotate by size and count, and give `/var/log` a volume off the root disk.

How do I build smart rate limiting against distributed brute force and DDoS?

Mon, 01 Jun 2026 00:00:00 GMT

Per-IP limits lose to rotating proxies, so key the Redis sliding-window on account + IP + ASN, add account lockout and leave volumetric floods to the edge.

Graceful degradation: how do I isolate non-critical services under load?

Sun, 31 May 2026 00:00:00 GMT

Split the critical path (browse, cart, checkout) from the nice-to-haves, put those behind feature flags with short timeouts, and rehearse the kill-switch.

How do I design eventual consistency with the Saga Pattern in a distributed system?

Sat, 30 May 2026 00:00:00 GMT

Split the transaction into local steps with compensating actions, driven by one orchestrator over a queue, each idempotent and published through an outbox.

How do I prevent PostgreSQL split-brain with quorum and consensus?

Fri, 29 May 2026 00:00:00 GMT

Don't hand-roll failover: put promotion behind a Patroni + etcd quorum, and let a primary cut off from the majority demote itself by fencing.

How do I set up a Circuit Breaker for a flaky third-party API dependency?

Thu, 28 May 2026 00:00:00 GMT

A breaker alone won't hold: pull `connect_timeout` and `timeout` down to 800ms-2s, isolate the dependency behind a bulkhead, and define a cached fallback.

How do I set up CDN asset versioning: hashing and a cache strategy on deploy?

Wed, 27 May 2026 00:00:00 GMT

Drop query-string busting: cache content-hashed filenames as `immutable`, keep the HTML short-lived, and upload the assets before you cut over.

How do I make search-as-you-type fast with edge n-grams in Elasticsearch?

Tue, 26 May 2026 00:00:00 GMT

Drop wildcard for autocomplete; build the prefixes at index time with edge_ngram and keep a standard search analyzer so a keystroke is a plain term lookup.

How do I stream 2-5 GB file downloads without blowing up PHP's memory?

Mon, 25 May 2026 00:00:00 GMT

Serve 2-5 GB files outside PHP via a presigned URL or X-Accel-Redirect; if it must go through PHP, chunk it with readStream and turn off buffering.

How do HTTP/2 and HTTP/3 (QUIC) improve API performance?

Sun, 24 May 2026 00:00:00 GMT

Turn on HTTP/2 today, since multiplexing collapses 4-5 requests per screen onto one connection; add HTTP/3 for a mobile audience and drop domain sharding.

Which PgBouncer pooling mode should I pick — Session, Transaction, or Statement?

Sat, 23 May 2026 00:00:00 GMT

Pick Transaction mode for a web fleet; the price is protocol-level prepared statements, so disable them in the app or turn on PgBouncer 1.21+ support.

Should I start a new project with microservices?

Fri, 22 May 2026 00:00:00 GMT

For most greenfield products, start with a modular monolith and enforce boundaries in code, promoting a module to a service only when it must scale alone.

How do I do graceful shutdown on SIGTERM during autoscaling scale-in?

Thu, 21 May 2026 00:00:00 GMT

On SIGTERM drain the load balancer first, finish in-flight work inside the server.Shutdown(ctx) deadline, then align the grace period with that drain.

How do I choose the right composite index column order in PostgreSQL?

Wed, 20 May 2026 00:00:00 GMT

Build one (user_id, status, created_at DESC) index with equality columns first and the sort column last, then drop the single-column indexes it now covers.

How do I prevent a Redis cache stampede (thundering herd) — mutex lock or XFetch?

Tue, 19 May 2026 00:00:00 GMT

A single-flight lock plus TTL jitter covers most cases; reach for XFetch only when recompute is truly expensive, and add stale-while-revalidate either way.

How do I cut GC pressure in Go with sync.Pool and escape analysis under load?

Sun, 17 May 2026 00:00:00 GMT

The enemy behind the pauses is allocation rate: kill the top allocator with pprof, pool the hot path with sync.Pool, and tune GOGC last, not first.

How do I debug memory leaks under Laravel Octane (FrankenPHP)?

Sat, 16 May 2026 00:00:00 GMT

Plot the memory_get_usage curve first, bisect service providers to narrow the culprit, then reset stateful singletons in Octane's hooks and clear statics.

Multi-tenant SaaS database isolation: separate DB, schema, or tenant_id?

Fri, 15 May 2026 00:00:00 GMT

Database-per-tenant does not scale operationally at 10k; keep tenant_id on every table and bury isolation in Postgres Row-Level Security instead.

The payment webhook keeps re-sending the same notification; how do I set up idempotency?

Thu, 14 May 2026 00:00:00 GMT

Verify the HMAC constant-time over the raw body, return 200 fast and enqueue the work, and let a UNIQUE constraint on event_id enforce once-only.

How do I peel the payment module off a PHP monolith with Strangler Fig?

Tue, 12 May 2026 00:00:00 GMT

Shift payments at the gateway by 5/20/100 and validate in shadow first; the real work is splitting the tables, behind an anti-corruption layer and outbox.

If I build edge caching with Cloudflare Workers + KV, how do I do invalidation?

Mon, 11 May 2026 00:00:00 GMT

The moment a price changes, write through to KV or purge the key in the same transaction or outbox; a short TTL and versioned keys are only the safety net.

How do I set up distributed tracing (OpenTelemetry) across microservices?

Sat, 09 May 2026 00:00:00 GMT

Standardize on W3C Trace Context, leave propagation to the OTel SDK, and put traceparent in the queue message header, since that is where the chain snaps.

WireGuard collides with Docker networks — how do I stabilize routing?

Fri, 08 May 2026 00:00:00 GMT

This is an addressing-plan problem, not a routing bug: pin Docker's pool in daemon.json, cut AllowedIPs down to the DB subnet, make routes persistent.

How should I abstract the LLM provider (Ollama → Bedrock/OpenAI)?

Wed, 06 May 2026 00:00:00 GMT

Build one narrow complete(prompt, opts) interface with three implementations picked by config, and treat context window, latency and cost as config.

When moving local files to S3, is EFS a good interim step?

Tue, 05 May 2026 00:00:00 GMT

Don't make EFS the interim step; switch to a Flysystem s3 disk, route reads and writes via Storage::disk(), and migrate with dual-read for zero downtime.

For the message schema between Laravel and Go services, Protobuf or JSON Schema?

Sun, 03 May 2026 00:00:00 GMT

For heavy Laravel-Go traffic pick Protobuf plus a schema registry, keep JSON Schema for light traffic, and deserialize into a typed DTO at the boundary.

Should I put a Kafka/Redis buffer between Fluent Bit and OpenSearch when shipping logs?

Sat, 02 May 2026 00:00:00 GMT

Turn on Fluent Bit's filesystem buffer first; move to Kafka once 40k/s is permanent, and keep a Redis list only for logs you can afford to lose.