September 2026
955 posts · 2026 archive
- MCP Won the Protocol War: Build-vs-Buy Math for Your Own Deploy MCP Server
- Render vs Railway vs Fly.io in September 2026: A Decision Framework, Not Another Price Table
- Pangolin Put SSH, RDP, and VNC in the Browser. Should Your PaaS Ingress Copy It?
- Stop Handing Agents Immortal Keys: Short-Lived Sandbox Credentials with Kubernetes 1.37 Pod Certificates
- Pod Certificates Are GA in Kubernetes 1.37: Per-Tenant TLS Without the cert-manager Glue
- Running a Production MCP Server on Kubernetes: OAuth 2.0, Audit Logging, and the Enterprise Deployment Checklist
- The Protocol Is Free, the Control Plane Isn't: What Qovery's MCP-for-Infra Play Shares — and Keeps
- Railpack vs render.yaml vs fly.toml: What Three Deploy-Config Philosophies Teach a Self-Hosted PaaS
- Railway Agent Runs on Your ChatGPT Subscription: What BYO-Model Billing Concedes About PaaS Agent Margins
- Railway Put Deploys Inside ChatGPT and Grok: The 7 API Primitives Chat-as-Console Actually Needs From a Render-Compatible API
- Railway Built a 30M RPS CDN in 30 Days: What Self-Hosters Can Steal From Hikari
- The Forced-Migration Playbook: What Railway's Great Metal Migration Teaches About PaaS Lock-In
- Railway Patches Your Postgres When a CVE Lands — What Vendor-Side Patching Costs vs. Patching It Yourself
- Render Renamed Every Compute Plan to 2c-4g Style IDs: An IaC Compatibility Checklist Before You Touch Anything
- Render's Free PostgreSQL Expires After 30 Days: The Gotcha That Turns a Free-Tier Deploy Into a Migration Deadline
- Render Lets You Repoint Production With One Click. Who Vouched for the Bytes?
- Render Made Python Installs 10x Faster and Moved Support to Discord While the Builder Contract Stayed Put
- Rotate the Database Password Without Shipping a Rebuild: A No-Redeploy Secrets Playbook for Git-Push Platforms
- The 2026 Self-Hosted PaaS Category Problem: Coolify, Dokku, CapRover, and Dokploy Are Docker Panels, Not Kubernetes Fleets
- Fixed vs. Metered: What a 4-Service Stack Really Costs on Sevalla vs Railway
- Sidero Labs Joins Yardi and Launches Talos Enterprise Linux: What It Means for Self-Hosted Fleets
- Tabby Is the Self-Hosted Copilot Nobody Priced Yet: Owned GPUs vs Per-Seat Copilot
- Tenant Offboarding Is a Data-Deletion Problem: The GDPR Erasure Checklist Across Volumes, Snapshots, Logs, Registries, and Backups
- Vercel Now Deploys Your Dockerfile — and Admits Functions Weren't Enough
- Wildcard TLS on Autopilot: How Every Tenant Subdomain Gets a Trusted Cert in Under 90 Seconds
- A2A, WebMCP, and MCP: Three Agent Protocols, Three Layers, One Deploy Pipeline
- AgentENV: What Kimi K3's Self-Hosted E2B-Compatible Sandbox Really Costs on Owned Hardware
- Beyond the Big Four: What the Heroku-Alternative Long Tail Gets Right That Render and Railway Don't
- CloudNativePG Restored 4.5TB of Postgres in Two Minutes: What Snapshot Recovery Really Buys Your Self-Hosted DR Promise
- Coolify's 11 Critical CVEs and the Single-Maintainer Security Bill
- Coolify's v5 Blueprint Is Public: Does Its Agent-and-Broker Rewrite Narrow the Fleet Gap With Cluster API?
- Coolify vs Dokploy on a $5 Hetzner Box: 7-Day Benchmark Numbers — and What Breaks When You Outgrow the Box
- When Will EKS, AKS, and GKE Actually Support Kubernetes 1.37?
- Flatcar vs Talos vs bootc: Picking the Immutable Node OS for a CAPH-Provisioned Hetzner Fleet
- Fly.io Sprites Speak MCP: What $0.07/CPU-Hour With Zero Idle Charge Really Costs Against Owned Hetzner Hardware
- Fly Postgres Is a Thin Provisioning Layer: The Exit Math When 'Managed' Stops at Replication and Backups
- Fly.io vs Railway vs a $5 Droplet: What the No-Container Counter-Narrative Gets Right — and Where It Breaks at the Second Service
- 100 MCP Servers in Production: What a Fortune 500 Deployment Teaches Self-Hosted Agent Ops
- Gateway API v1.6 Makes TCPRoute and UDPRoute Standard: Own Your PaaS's L4 Traffic Without Ingress Annotations
- gVisor vs Kata vs Firecracker: Picking Sandbox Isolation for an Agent Layer on Shared Nodes
- Heroku's Quiet End of Life: A 90-Day Exit Playbook for Teams Still Paying by the Dyno
- Ingress-NGINX Is Retired. Your PaaS Inherited Its Quirks — Audit Them Before They Become Outages
- Kubernetes v1.37 Finally Lets You noexec a Volume Mount: Closing the 9-Year-Old Hole in readOnlyRootFilesystem
- Kubernetes 1.37 Scales HPA Workloads to Zero (Beta): What It Replaces in Your Idle-Reaping Playbook — and What It Doesn't
- An AI Agent Found a WireGuard Bug in GKE: A Blueprint for Agent-Led Triage on Your Own Fleet
- What the MCP 2026-07-28 Spec Broke: Your Server's Auth Fix Checklist
- MCP Went Stateless: What the 2026-07-28 Rewrite Changes for Self-Hosting Agent Tool Servers
- 12,520 Exposed MCP Servers: A 7-Point Auth Checklist for Shipping a Deploy-Capable MCP Server
- Microsoft's Document Database Rides CloudNativePG: What That Verdict Means for Your Fleet's Postgres Layer
- Mooring: a Security-First PaaS in One Binary — and What Breaks When You Need a Second Server
Showing 201–250 of 955 posts