September 2026
955 posts · 2026 archive
- Vercel Made Blocked Traffic Free — Here's What That Costs to Build Yourself
- Stripe's Agentic Provisioning Protocol Puts Railway One CLI Command Away — and Draws the Line Where MCP Stops
- k3s vs Kubernetes vs MicroK8s: the 4x RAM Gap Is Real — and Where a Lightweight Distro Stops Being a Fleet
- Who Resolves Your Subdomain When One DNS Node Dies? Technitium Clustering vs Pi-hole HA, Compared Honestly
- CIS Shipped the First MCP Server Benchmark: A 10-Domain Hardening Checklist Before Agents Get Production Credentials
- Sealed Secrets vs External Secrets Operator in 2026: What Git-Stored Ciphertext Really Costs a Three-Person Platform Team Against Vault Sync
- Four 2026 Heroku-Alternative Rankings, Four Different Winners: The Disagreement Is the Data
- One Heroku Calculator, Three Different Winners — and What Happens When Self-Hosted Is the Fourth Option
- Three Vendors Pitched You a Heroku Exit in 2026. Here's What All Three Guides Left Out.
- Rootless Kubelet Goes Beta in Kubernetes 1.37: A Hardening Checklist for Self-Hosted Fleets
- Kubernetes 1.36's Sharded List and Watch: the N× Watch Tax It Kills, and the Ceiling It Doesn't Touch
- MCP Won: Why Every Major AI Vendor Shipping One Protocol Makes 'Deploy From Chat' a Safe Roadmap Bet
- MLflow's MCP Registry: Versioned, Governed Tool Dependencies for Production Agents
- Surviving a Full Hetzner Datacenter Outage: What 3-DC k0s HA Really Costs Versus Single-DC
- Your Dockerfile Cache Is Blind to Your Monorepo: What Build-Graph Caching Adds to a Git-Push PaaS Pipeline
- Node 26 Hits Active LTS on October 28: A Builder Checklist for Git-Push PaaS Teams
- The npm Worm With Valid Provenance: What ChainDrop's 400 Poisoned Packages Mean for Anyone Building Tenant Images
- Open-Weight AI Is Having Its Kubernetes Moment — Here's What Your Fleet Needs to Serve It
- OpenAI Built Codex a Windows Sandbox Out of SIDs and Firewall Rules: What It Teaches a Linux-First PaaS About Isolating Agent Code
- Oracle Halved Its Free ARM Cloud. Here's the $0-vs-$5 Kubernetes Math Now.
- A Full PaaS on One $11 ARM Server: What Real CAX21 Usage Data Says About Tenant Capacity
- Pangolin Puts SSO and WireGuard in Front of LLM Access Instead of API Keys: What Tunnel-Based Identity Means for Agent Credential Hygiene
- The Reliability Tier Is the Real Price Tag: Railway HA vs Render's New Plans vs Your Own Fleet
- Your Scanner Said Clean. The Kubernetes CVE Record Was Wrong.
- Ship the Agent, Not Just the App: Curie vs Deployah and the Future of the Git-Push Deploy Contract
- SNCF Ships Its Cluster API Providers as OCI Artifacts: What an ORAS-Based Provider Supply Chain Buys a Self-Hosted Fleet
- One ClusterProfile vs One Flux per Cluster: What Sveltos v1.13 Changes About Fleet Add-On Delivery
- That $3,000-to-$200 Kubernetes-to-Fly.io Migration Story, Audited Line by Line
- The Self-Hosted PaaS Cambrian Explosion: What 55 awesome-paas Entries Say About the Second-Server Problem
- 76% Cheaper, 3.6x the vCPUs: A Line-Item Read of an AWS+DigitalOcean-to-Hetzner Migration Bill
- BYOC After Heroku Sustain Mode: What AZIN, Porter, Flightcontrol, and Northflank Really Cost Versus Owning the Whole PaaS
- Stop Guessing When to Renew: cert-manager 1.21 Lets Let's Encrypt Tell Your Fleet When
- CIS Published the First MCP Server Hardening Baseline — Here's What It Demands of Deploy-From-Chat Tools
- 16 Claude Code CVEs and Counting: Why Container Sandbox Escape Is a Vulnerability Class, Not a Bug
- The Deploy Exists Before the Account Does: What Cloudflare Drop's 60-Minute Anonymous Preview Means for Git-Push PaaS Onboarding
- Coolify and Dokploy Are 'Not Designed for AI Agent Auto Deploy': What the HN Verdict Gets Right 6 Months Later
- 52,000 Stars for Coolify, 32,000 for Dokploy, 15,000 for CapRover: What Star Velocity Says About the Self-Hosted PaaS Market in 2026
- Coolify v4 Gets a Terraform Provider: The Dashboard Is Now an API You Can Commit
- Coolify vs CapRover for Solo Devs: What the Polish Verdict Gets Right — and the Second-Machine Ceiling Neither Lifts
- Crossplane's Case for API-First Infrastructure: What an AI Agent That Deploys Actually Needs From an API
- Should Your AI Agent Write YAML or Call Tools? Crossplane's API-First Case vs MCP Agent Ops
- CrowdSec vs fail2ban on the Nodes You Own: Who Guards a Self-Hosted PaaS's SSH and HTTP Edge
- Dokploy Restarts the Container, Coolify Rebuilds It: What 30-120 Second Rebuilds Cost a Production Deploy Loop
- The Dutch Government Is Building a Microsoft Alternative on NixOS: What National-Scale Self-Hosting Signals for Teams Who Own Their Stack
- What an E2B-Style Sandbox Actually Needs Before an Agent Touches Production
- etcd 3.7 RangeStream: What Streaming List Reads Mean for a Cluster API Fleet
- Your Deploy Agent Can Be Talked Into Anything: Deterministic Policy for MCP Tools That Ship Production
- External Secrets Operator Won the Kubernetes Secrets War: A Self-Hosted PaaS Playbook
- Fly.io 18 Regions vs Render 5 vs Railway 4: A Multi-Region Exit Checklist for Leaving Edge Deployment for Owned Hardware
- E2B vs Modal vs Daytona vs Fly Machines: The Agent Sandbox Market in 2026
Showing 1–50 of 955 posts