CodeXpedite Logo
HomeTopicsSoftware Architecture

Software Architecture

Software architecture guides on system design, APIs, distributed systems, and data modeling. Learn how experienced engineers structure applications for clarity, testability, and long-term maintainability. Covers the tradeoffs, patterns, and real-world decisions behind scalable software.

Abstract diagram of a single trigger flowing through a chain of colored nodes toward an output, representing a NocoBase workflow.
System Design

NocoBase Workflows Explained: Triggers, Nodes, and the Four Key Concepts

A practical walkthrough of NocoBase's Workflow plugin: the four key concepts (workflow, trigger, node, execution), the three trigger types, and how nodes form event-driven automation.

Sep 7, 2026Read article
NocoBase Workflows Explained: Triggers, Nodes, and the Four Key Concepts
Split diagram contrasting in-band prompt rewriting on the left with an out-of-band compression middleware layer on the right.
Data & Databases

Caveman vs Headroom: In-Band Prompt Discipline vs Out-of-Band Compression

A focused comparison of Caveman's in-band prompt discipline and Headroom's out-of-band local compression proxy, framed around where each tool intervenes in the agent-to-provider pipeline.

Sep 5, 2026Read article
Caveman vs Headroom: In-Band Prompt Discipline vs Out-of-Band Compression
A sealed server cube inside a translucent glowing dome connected by mesh lines to a laptop, visualizing a VPS with zero open ports reachable only through a Tailscale tailnet.
Security & Reliability

Zero Open Ports: How to Make Your VPS Invisible to the Public Internet with Tailscale

Your VPS doesn't have to show a single open port to the public internet. Here's how to move SSH, admin panels, and databases onto Tailscale tailnet IPs only, close every inbound firewall rule, and write ACLs that assume your devices are already compromised — with a minimal two-server setup as the…

Sep 3, 2026Read article
Zero Open Ports: How to Make Your VPS Invisible to the Public Internet with Tailscale
A 3D visualization of a stone gateway dissolving into a glowing mesh network, illustrating how Tailscale SSH replaces bastion-host access with node-key authentication.
Security & Reliability

Do You Still Need a Bastion Host? How Tailscale SSH Handles Keys and Authentication

Tailscale SSH claims port 22 on your tailnet IP, swaps authorized_keys for control-plane-managed node keys, and distributes host keys automatically — which makes your bastion host look suddenly redundant. Here is exactly what changes under the hood, plus the honest cases where you should still keep…

Sep 3, 2026Read article
Do You Still Need a Bastion Host? How Tailscale SSH Handles Keys and Authentication
Showing 1 - 4 of 4 Posts