AWS Still Charges $0.09/GB — But Your Egress Bill Tripled Anyway
AWS egress is still $0.09/GB in 2026. A worked recompute shows why a mid-traffic SaaS app pays 3-7x more for the same product shape, and what that traffic is worth on Hetzner's 20TB-included hardware.
Kubero's PaaS on Kubernetes: What a Dashboard Over kubectl Actually Solves — and What You Still Operate Yourself
Kubero gives you a polished PaaS surface on Kubernetes — git-push deploys, pipelines, and add-ons without Helm — but it assumes you already own a healthy cluster. Here is exactly what the dashboard automates, what it leaves you holding, and where a Cluster API fleet closes the gap.
Coolify v4.0.0 Goes Stable: What a Two-Year Beta Promoted to Stable Actually Guarantees — and What It Doesn't
Coolify shipped v4.0.0 stable on April 27, 2026 after 468 beta tags, 57,000 stars, and production use by thousands — plus 11 disclosed CVEs. What the stable tag actually guarantees for upgrade and security, what single-host Docker architecture it leaves unchanged, and how to decide whether to pin it today.
Dokploy Switched to Plain Apache 2.0 on January 21, 2026 — Why a Late Cleanup Is Harder to Trust Than Starting Clean
Dokploy replaced its custom Apache 2.0 plus commercial appendix with clean Apache 2.0 core on January 21, 2026. A before-and-after of what changed, what still sits under DSAL, and why a retroactive fix is weaker trust than starting clean.
Railway Finally Shipped DNS Logs: What You Can Debug From a Dashboard vs What You Get From CoreDNS on Day One
Railway's July 24, 2026 changelog added DNS logs after years of opaque name-resolution failures. A side-by-side tour of debugging ndots, search-domain expansion, and stale service records on rented DNS visibility versus CoreDNS logs, metrics, and tcpdump on a cluster you own.
What a Git-Push PaaS Should Actually Clone: Shallow vs Partial Clones and What Checkout Time Adds to Every Build
Shallow clones are 4-6x faster and the industry default, but they break versioning tools and make every later fetch 25x more expensive. Benchmarks, real PaaS defaults from Render to Heroku, and the break-even point where blobless partial clones win.
How the controller-runtime Cache Actually Works: What PaaS Builders Should Know Before Their First OOMKill
Your operator's Get() never hits the API server — it silently caches every object of that Kind in the cluster. How controller-runtime's shared-informer cache works, why it OOMKills control planes at fleet scale, and the exact selectors, transforms, and DisableFor config that shrink a PaaS control plane from gigabytes to a few hundred MB.
Litestream's Writable VFS: SQLite Mounted From an S3 Bucket as the No-Managed-Database Persistence Path for a Self-Hosted PaaS
Litestream's writable VFS lets an app open a SQLite database whose pages live in an S3 bucket — reads via Range requests, writes synced every second. How the mechanism works, the honest constraints, and a workload-by-workload table of what fits versus what still needs a tenant-run Postgres.
One Repo, Five Services: Path-Filtered Deploys on Render, Railway, and Vercel — and When to Do It Yourself With the Dependency Graph
A docs typo shouldn't rebuild five services. How Render build filters, Railway watch paths, and Vercel's two skip mechanisms decide what a push rebuilds, where every static path filter breaks (shared libraries, lockfiles), and what a self-hosted Render-compatible PaaS should implement instead.