Your Cloud Account, Their Control Plane: Why Edka's BYO-Hetzner Model Is Winning
Edka hit 437 points on HN spinning up production-ready Kubernetes on Hetzner in ~2 minutes inside your own account — you own the servers, the bill, and the exit. How the BYO-account pattern beats both closed PaaS and DIY, how it compares to Cluster API Provider Hetzner, and what trust actually requires before you hand over an API token.
The 5x Spread on an Identical Workload: What Railway, Render, Fly.io, and Vercel Actually Bill
A June 2026 audit priced the same API, worker, Postgres, and 200 GB egress workload across Railway, Render, Fly.io, and Vercel and found a 5x bill spread. The invoice, why it hides, and a model to price your own migration.
Fly.io After the Free Tier Died: What Per-Second Usage Billing With New 2026 Line Items Costs Against a Fixed Hetzner Invoice
Fly.io killed Hobby/Launch/Scale plans in October 2024 for pure per-second billing, then added new metered line items through 2026 — what that does to bill predictability for a small team versus a flat Hetzner invoice, priced workload by workload.
Mooring Skipped the Orchestrator: Why a Typed YAML PaaS Still Hits a One-Machine Ceiling
Mooring ships a security-first, typed mooring.yaml control plane that owns your Compose file and handles HTTPS, monitoring, and self-healing — without Swarm or Kubernetes. What that model gets right on one machine, and the five things that concretely break the moment you need a second.
Railway Finally Shipped DNS Logs: What You Can Debug From a Dashboard vs What You Get From CoreDNS on Day One
Railway's July 24, 2026 changelog added DNS logs after years of opaque name-resolution failures. A side-by-side tour of debugging ndots, search-domain expansion, and stale service records on rented DNS visibility versus CoreDNS logs, metrics, and tcpdump on a cluster you own.
Railway's Access Groups Are Group RBAC Behind a SaaS UI: Here's the Same Boundary as Kubernetes YAML
Railway shipped Access Groups on August 14, 2026 — group-based RBAC for its hosted PaaS. A concrete mapping of the same boundary as Kubernetes RBAC, RoleBindings, and Gateway API policy on a control plane you own.
Healthchecks.io Left the Cloud Bucket: What a Real SaaS Paid to Bring Object Storage Home
Healthchecks.io moved production object storage off managed cloud in April 2026. A case-study read of the egress and replication trade and a decision framework for when owning the disks beats renting the bucket.
Hetzner Stops Selling Hardware Types and Starts Selling Generations: What CPX Gen2 and CX Gen3 Do to Your Machine Templates
Hetzner restructured its cloud catalog from hardware types to hardware generations in June 2026. A concrete look at what generation-named SKUs break in Cluster API machine templates and how to write templates that survive the next reshuffle.
Omni's One-Postgres Workplace Search: Running BM25 and Vectors in a Single Database as a Tenant Workload
Omni indexes wikis, docs, and drives with ParadeDB BM25 and pgvector in one Postgres, deployable with docker compose up. A walkthrough of the one-database pattern and why it runs as just another tenant on a self-hosted PaaS.