.tip

Apr 15, 2026 · one of the small things

Build for the platform you deploy to, not the one you are on

An image built on an Apple Silicon laptop is arm64. The server is probably amd64. It runs under emulation, slowly, or not at all.

docker build --platform linux/amd64 -t app .

In CI the runner is usually amd64 already. Locally, set DOCKER_DEFAULT_PLATFORM=linux/amd64 in your shell for the projects that deploy there.

docker

~/tips/today — 2026-09-04

~cat tips/today

Session cookies: HttpOnly, Secure, SameSite=Lax

securityhttp

Three attributes, each closing a class of attack. HttpOnly keeps scripts from reading it. Secure keeps it off plain HTTP. SameSite=Lax stops it being sent on cross-site POSTs, which is most CSRF.

Set-Cookie: session=...; HttpOnly; Secure; SameSite=Lax; Path=/; Max-Age=1209600

Strict breaks arriving from an external link while logged in. Lax is the default worth keeping.

↵ open y yesterday l ls /tips

esc close