October 26, 2026 · FlameRangers
One project per environment, rules and indexes in the repo, the emulator suite running your tests on every pull request, and a deploy order that does not break on index builds. The environment setup we put in place on hardening engagements, and the failure mode each piece prevents.
Read moreOctober 5, 2026 · FlameRangers
Phone auth is a payment API with a login screen attached. Here is how SMS pumping drains a Firebase bill, what reCAPTCHA Enterprise and region allowlists actually stop, and where blocking functions belong in the sign-up path.
Read moreSeptember 21, 2026 · FlameRangers
Background triggers are at-least-once. A duplicate delivery double-charges a card, a thrown error with retries enabled loops for seven days, and both show up on the invoice before they show up in your dashboards.
Read moreSeptember 16, 2026 · FlameRangers
Blaze has no spend limit. Budget alerts are email, not brakes. Here are the controls that actually bound a runaway Firebase bill — per-service quotas, function instance ceilings, a Remote Config kill switch, and the Pub/Sub function that disables billing.
Read moreSeptember 15, 2026 · FlameRangers
RTDB to Firestore is not a data export. It is a query-model rewrite with a live backfill, a dual-write window, and a shadow-read comparison that has to be clean before you flip any client.
Read moreSeptember 14, 2026 · FlameRangers
Web frameworks on Firebase Hosting packaged your Next.js or Angular server into a Cloud Function. App Hosting builds it on Cloud Build and runs it on Cloud Run instead. What changes: the bill shape, cold starts, secrets, rollbacks, and the CDN caching you were relying on.
Read moreSeptember 10, 2026
App Check stops scripted clients from hammering your Firestore and Functions, and it will happily lock out your own paying users if you enforce it on day one. Here is the metrics-first rollout we run.
Read moreAugust 11, 2026
"Should we migrate off Firebase?" is usually the wrong question. The signals that one workload has outgrown the platform — and the Auth and data seams that keep the hybrid clean.
Read moreJuly 15, 2026
Gen 2 changes concurrency, timeouts, config, and event delivery — not just the SDK import. What actually changes, the traps, and a cutover order that avoids double-execution.
Read more