Aashish Chaudhari

[Aashish Chaudhari @aashishhq]

#LSPPDay52 — Real-time Discord alerts are live! Failed logins, new registrations, rate limit hits and account deletions all fire instant webhook notifications to my Discord channel
@lftechnology #60DaysOfLearning2026 #LearningWithLeapfrog

[Aashish Chaudhari @aashishhq]

#LSPPDay51 — Added API key authentication today! Generate a key from your dashboard, use it with Authorization: Bearer header to call the API without a session. Keys are hashed before storage — never stored in plaintext
@lftechnology #60DaysOfLearning2026 #LearningWithLeapfrog

[Aashish Chaudhari @aashishhq]

#LSPPDay50 — Added environment-based config today! Dev, prod and test each have different security settings. One env variable controls the whole app @lftechnology #60DaysOfLearning2026 #LearningWithLeapfrog

[Aashish Chaudhari @aashishhq]

#LSPPDay49 — Docker Compose is live on AWS EC2! Fought through Docker socket issues, snap conflicts and permission errors to get here. docker compose up -d now manages the entire stack
@lftechnology #60DaysOfLearning2026 #LearningWithLeapfrog

[Aashish Chaudhari @aashishhq]

#LSPPDay48 — Replaced Flask's dev server with Gunicorn in production! Multiple worker processes, request limits, graceful restarts, and proper production hardening. No more "WARNING: This is a development server"
@lftechnology #60DaysOfLearning2026 #LearningWithLeapfrog

[Aashish Chaudhari @aashishhq]

#LSPPDay47 — Log-based security alerting is live! My monitor detected failed login attempts and rate limit hits in real time, firing alerts automatically. Running as a systemd service on EC2
@lftechnology #60DaysOfLearning2026 #LearningWithLeapfrog

[Aashish Chaudhari @aashishhq]

#LSPPDay46 — Structured JSON logging is live on AWS EC2! Watching real-time logs of registrations, logins and requests — each one a searchable JSON object with IP, username, event type and timestamp.
@lftechnology #60DaysOfLearning2026 #LearningWithLeapfrog

[Aashish Chaudhari @aashishhq]

#LSPPDay45 — HTTPS is live! My DevSecOps app is now serving encrypted traffic at https://t.co/DWhGagX0nr with a real Let's Encrypt SSL certificate. Fought DNS validation issues for two days but got there
@lftechnology #60DaysOfLearning2026 #LearningWithLeapfrog

[Aashish Chaudhari @aashishhq]

#LSPPDay44 — Set up Nginx as a reverse proxy in front of my Flask app today! App is now live at https://t.co/KCdeXVI5Ui on port 80.
Fought with Let's Encrypt rate limits trying to get HTTPS — finishing that tomorrow
@lftechnology #60DaysOfLearning2026 #LearningWithLeapfrog

[Aashish Chaudhari @aashishhq]

#LSPPDay43 — Hardened my EC2 server today! UFW firewall blocking everything except necessary ports, Fail2ban banning brute-force SSH attempts after 3 tries, password auth disabled, and automatic security updates enabled
@lftechnology #60DaysOfLearning2026 #LearningWithLeapfrog

[Aashish Chaudhari @aashishhq]

#LSPPDay42 — Full CI/CD pipeline complete! Every merge to main now automatically deploys to AWS EC2. My app is live at a real public IP
@lftechnology #60DaysOfLearning2026 #LearningWithLeapfrog

[Aashish Chaudhari @aashishhq]

#LSPPDay41 — My DevSecOps app is live on AWS EC2! Launched a Free Tier instance, set up Docker, cloned the repo, and hit my own app from a real public IP for the first time
@lftechnology #60DaysOfLearning2026 #LearningWithLeapfrog

[Aashish Chaudhari @aashishhq]

#LSPPDay40 — Two thirds done! Published my Days 21–40 recap: exploiting XSS and SQLi myself, hardening Docker containers, and building a real auth system from scratch.
Full writeup: https://t.co/cvWOP9bMnT

@lftechnology #60DaysOfLearning2026 #LearningWithLeapfrog

[Aashish Chaudhari @aashishhq]

#LSPPDay39 — Full security audit day! Added username format validation (regex), account deletion with password confirmation, a stats API, fixed 34 Gitleaks false positives with an allowlist, and brought test count to 30+
@lftechnology #60DaysOfLearning2026 #LearningWithLeapfrog

[Aashish Chaudhari @aashishhq]

#LSPPDay38 — Found and fixed a silent bug today: my Docker image built fine but crashed because https://t.co/nlO9fvUsii wasn't being copied in. Added a container smoke test to the pipeline so this can never slip happen
@lftechnology #60DaysOfLearning2026 #LearningWithLeapfrog

[Aashish Chaudhari @aashishhq]

#LSPPDay37 — Built my first real JSON API today! GET and PUT /api/profile endpoints, authentication required, email validation, bio length limits, and 5 new pytest tests. The app is actually doing something now @lftechnology #60DaysOfLearning2026 #LearningWithLeapfrog

[Aashish Chaudhari @aashishhq]

#LSPPDay36 — Built secure password change today! Requires current password verification, forces re-login after change, and rate limited to 5 attempts per hour. Session hijacking can't lead to silent password takeover @lftechnology #60DaysOfLearning2026 #LearningWithLeapfrog

[Aashish Chaudhari @aashishhq]

#LSPPDay35 — Added rate limiting to my production app's login and register routes today! 5 attempts per minute on login, 10 per hour on registration. Brute-force and spam protection live
@lftechnology #60DaysOfLearning2026 #LearningWithLeapfrog

[Aashish Chaudhari @aashishhq]

#LSPPDay34 — Added CSRF protection to every form today using Flask-WTF! Tested that a raw POST without the token gets rejected with 400. One more layer of the OWASP Top 10 addressed
@lftechnology #60DaysOfLearning2026 #LearningWithLeapfrog

[Aashish Chaudhari @aashishhq]

#LSPPDay33 — Added session expiry and Remember Me today! Sessions now expire server-side, cookies are HttpOnly and SameSite=Lax, and users can choose between a session cookie or 30-day persistent login @lftechnology #60DaysOfLearning2026 #LearningWithLeapfrog