697 posts tagged with "Self-Hosting"
Running your own PaaS and infrastructure on machines you own
E2B Joined the OpenAI Agents SDK. The Real Story Is How Many Times It's Had To.
E2B's OpenAI Agents SDK integration is its tenth publicly documented per-product integration guide, not its first — here's what the real count reveals about building versus betting on MCP for a self-hosted sandbox platform.
Envoy AI Gateway Hits v1.0: A CNCF Blueprint for Securing Your Own MCP Server
Envoy AI Gateway's v1.0 release stabilizes MCPRoute and MCPRouteSecurityPolicy, giving self-hosted platforms CEL-based per-tool authorization and audit trails for AI agents — without building an MCP authorization layer from scratch.
Gateway API v1.5's ListenerSet Just Solved Multi-Tenant Custom Domains — Here's the RBAC Layout That Replaces Your Ingress Hacks
Gateway API v1.5's ListenerSet lets tenants self-serve custom domains on a shared Gateway without cluster-wide write access — here's the actual YAML, precedence rules, and RBAC layout that makes it safe, not just self-service.
GitHub Tried to Meter Self-Hosted CI Runners, Then Backed Off
GitHub announced a $0.002/minute charge on self-hosted Actions runners, then postponed it within 48 hours. Here's the cost math it would have meant, and the control-plane dependency it exposed even for teams that already self-host their compute.
Hetzner Already Killed the datacenter Field — What a CAPH Fleet Must Check Before August 1
Hetzner already removed the datacenter field from its API on July 1, and EC2-compatible metadata routes disappear August 1 — here's exactly what breaks in a CAPH-managed fleet, what's already patched, and how to check.
The Hidden PaaS Tax Nobody Puts in the Pricing Table
Render and Vercel both charge $100/month for a static outbound IP, on completely unrelated billing models — a line-by-line invoice reconstruction of what a real indie-SaaS topology costs on Render, Railway, Fly.io, and Vercel versus a single owned Hetzner box.
Ingress NGINX Is Officially Dead: The Gateway API Migration a Self-Hosted PaaS Can't Skip
Ingress-nginx went EOL on March 24, 2026 with no more CVE fixes ever. Here's the head-to-head on the two sanctioned exits — Traefik as a drop-in stopgap vs. migrating straight to Gateway API's Gateway/HTTPRoute model — plus the before/after YAML a self-hosted PaaS's routing layer should generate.
Kamal 2 Bet Against Kubernetes and Rails 8 Made It the Default: What SSH-Based Docker Deploy Gets Right (and Where It Runs Out of Room)
Kamal 2 ships zero-downtime Docker deploys over plain SSH with no cluster and no control plane — here's the exact technical wall it hits, and what a Cluster-API-managed fleet does differently on the other side of it.
Kubernetes 1.36's Pod-Level Resource Managers: The Sidecar Bin-Packing Math, After Hetzner's Price Hikes
Kubernetes 1.36 lets a Pod share one CPU/memory budget across its containers instead of summing per-container reservations. Here's the worked bin-packing math — in real CCX43 nodes and euros, after Hetzner's 2026 price hikes.