Notes from building xofactory products.https://xofactory.com/https://xofactory.com/blog/merging-spf-instead-of-overwriting-it/https://xofactory.com/blog/merging-spf-instead-of-overwriting-it/Mail setup tools love to replace your SPF record. mailbuda merges into it, finds the right Cloudflare zone across accounts, and waits until the world agrees.Mon, 14 Sep 2026 00:00:00 GMThttps://xofactory.com/blog/a-short-links-hot-path/https://xofactory.com/blog/a-short-links-hot-path/How urlxo redirects without waiting for analytics, which characters it refuses to put in a code, and what it does not store about you.Mon, 06 Jul 2026 00:00:00 GMThttps://xofactory.com/blog/clickhouse-for-events-mariadb-for-issues/https://xofactory.com/blog/clickhouse-for-events-mariadb-for-issues/loggerxo stores every event in ClickHouse and every issue in MariaDB. How the ingest path works and why one database was not enough.Mon, 13 Apr 2026 00:00:00 GMThttps://xofactory.com/blog/a-legacy-codeigniter-app-four-years-on/https://xofactory.com/blog/a-legacy-codeigniter-app-four-years-on/clinicxo started in 2022 on CodeIgniter 3 and is still on it. What changed underneath it so that it could stay there.Mon, 09 Feb 2026 00:00:00 GMThttps://xofactory.com/blog/fingerprints-that-agree-with-each-other/https://xofactory.com/blog/fingerprints-that-agree-with-each-other/Spoofing a user agent is easy and useless. facetbrowser generates a whole profile from one seed so that every signal tells the same story.Mon, 19 Jan 2026 00:00:00 GMThttps://xofactory.com/blog/the-provider-only-sees-your-domain/https://xofactory.com/blog/the-provider-only-sees-your-domain/orcapayz runs checkout on pay.yourshop.com, verifies the domain end to end and strips referrers. What that takes and why merchants ask for it.Mon, 24 Nov 2025 00:00:00 GMThttps://xofactory.com/blog/making-a-support-bot-stay-in-its-lane/https://xofactory.com/blog/making-a-support-bot-stay-in-its-lane/zingxo's assistant answers questions about your shop and refuses to write poems. The prompt layering and the tool design that make that hold up.Mon, 08 Sep 2025 00:00:00 GMThttps://xofactory.com/blog/docker-publishes-ports-past-ufw/https://xofactory.com/blog/docker-publishes-ports-past-ufw/The most common finding in adminxo security scans is a database that was supposed to be firewalled. It is not Docker's fault, exactly.Mon, 23 Jun 2025 00:00:00 GMThttps://xofactory.com/blog/guessing-how-long-a-cron-job-has-left/https://xofactory.com/blog/guessing-how-long-a-cron-job-has-left/cronxo shows a progress bar for a shell command that has no idea it is being watched. The heuristic behind it, and where it is wrong.Mon, 17 Mar 2025 00:00:00 GMThttps://xofactory.com/blog/one-traefik-per-server/https://xofactory.com/blog/one-traefik-per-server/dockxo does not use Traefik's Docker provider. It generates a routes file from Docker events instead. Here is why.Mon, 09 Dec 2024 00:00:00 GMThttps://xofactory.com/blog/your-servers-dial-out/https://xofactory.com/blog/your-servers-dial-out/Every xofactory agent connects outbound and nothing else. Why that constraint is worth the trouble it causes.Mon, 02 Sep 2024 00:00:00 GMThttps://xofactory.com/blog/deleting-the-incomplete-backup/https://xofactory.com/blog/deleting-the-incomplete-backup/What backupxo does when the dump dies mid-stream, and why partial objects are the dangerous case.Mon, 26 Aug 2024 00:00:00 GMThttps://xofactory.com/blog/streaming-a-50gb-dump-to-r2/https://xofactory.com/blog/streaming-a-50gb-dump-to-r2/backupxo never writes a dump to disk. Here is the pipeline from mariadb-dump to zstd to a multipart upload, and the two things that went wrong on the way.Mon, 20 May 2024 00:00:00 GMThttps://xofactory.com/blog/why-the-xo-tools-are-free/https://xofactory.com/blog/why-the-xo-tools-are-free/A short note on the business model behind dockxo, backupxo, cronxo and adminxo, written before anyone asks.Mon, 11 Mar 2024 00:00:00 GMT