Blog
Insights, analysis, and updates from the AI agent economy. Browse by tag · Browse the archive.
CrowdSec vs fail2ban on the Nodes You Own: Who Guards a Self-Hosted PaaS's SSH and HTTP Edge
fail2ban guards one box well but never shares what it learns. This comparison shows where fail2ban still wins, where CrowdSec's crowd-sourced blocklists and fleet-wide bouncers take over, and how to place each one on a self-hosted fleet.
Should Your AI Agent Write YAML or Call Tools? Crossplane's API-First Case vs MCP Agent Ops
Crossplane says agents should declare desired state and let controllers reconcile; the MCP ecosystem says agents should call tools step by step. A head-to-head on the same task, a mid-provision crash traced through both, and three reconciliation ideas every platform MCP server should borrow.
Crossplane's Case for API-First Infrastructure: What an AI Agent That Deploys Actually Needs From an API
Crossplane's CNCF graduation made composable infrastructure APIs mainstream, but an agent that deploys needs a contract shape — schema, desired state, status, watch, safe retry — not a specific framework. A head-to-head of composite resources against a purpose-built deploy API, with a decision rule for which to build.
Coolify vs CapRover for Solo Devs: What the Polish Verdict Gets Right — and the Second-Machine Ceiling Neither Lifts
SoloDevStack scored Coolify 9/10 and CapRover 7/10 on polish. A claim-by-claim audit confirms the verdict for week one — then runs the second-machine checklist both panels fail, and names what replaces 'which panel' once one box is not enough.
Coolify v4 Gets a Terraform Provider: The Dashboard Is Now an API You Can Commit
A community provider brings 30 Terraform/OpenTofu resources to Coolify v4, from applications and databases to backups and cloud servers. Here is what it covers, what a working setup looks like, and where panel-as-code stops short of fleet-as-code.
52,000 Stars for Coolify, 32,000 for Dokploy, 15,000 for CapRover: What Star Velocity Says About the Self-Hosted PaaS Market in 2026
Coolify adds roughly a thousand GitHub stars a week, Dokploy has nearly doubled to 36,000, and CapRover sits flat near 15,000. What star velocity plus release pace reveal about consolidation in the single-box PaaS market — and the second-machine ceiling the winner shares with everyone else.
Coolify and Dokploy Are 'Not Designed for AI Agent Auto Deploy': What the HN Verdict Gets Right 6 Months Later
Six months after Hacker News declared Coolify and Dokploy 'not designed for AI agent auto deploy,' we score both tools against MCP-first rivals on six agent-operability dimensions — and show what it actually takes to hand the 2am rollback to an agent.
The Deploy Exists Before the Account Does: What Cloudflare Drop's 60-Minute Anonymous Preview Means for Git-Push PaaS Onboarding
Cloudflare Drop inverts PaaS onboarding: drag a folder into the browser, get a live URL for 60 minutes, and only sign up if you claim it. Here is the four-part blueprint for bringing signup-last deploys to a git-push platform — and the state boundary where the pattern breaks.
16 Claude Code CVEs and Counting: Why Container Sandbox Escape Is a Vulnerability Class, Not a Bug
Sixteen CVEs against one coding agent prove container sandbox escape is a permanent vulnerability class, not a patchable bug. Here is the CVE record, the isolation ladder with real latency numbers, and why agent-generated code belongs behind its own kernel.
Subscribe
New posts land in your reader as soon as they publish. Pick a format — all three carry the same posts.
Current feeds keep roughly two days of posts so daily polling does not miss a burst. Older entries stay reachable from the feed's next-page link in readers that follow it, or from the blog archive.
Following one topic instead? Browse tags