An Agent Can Run Your Home Lab. That Doesn't Make It a Fleet Control Plane.
A concrete boundary between an MCP agent operating a Coolify home lab and a declarative Cluster API fleet, with practical signals for when the architecture needs to change.
The .self TLD Bid: What a Human-First Domain Would—and Wouldn't—Change for Self-Hosted Apps
What the proposed .self TLD could change for self-hosted apps, what still requires portable DNS and TLS automation, and the policy questions a public-good registry must answer.
SELinux Volume Labels in Kubernetes 1.36: Audit Your Multi-Tenant Storage Before 1.37
Kubernetes 1.37 makes SELinux context mounts the default for eligible volumes. Audit CSI drivers, shared PVCs, and label conflicts before the upgrade leaves a Pod stuck in ContainerCreating.
CAPH v1.1.7 and the 429 That Ate a Healthy Machine: Why a Rate-Limited FindServer Marked 31 HCloudMachines as Gone
CAPH v1.1.7 (June 17, 2026) fixed a rate-limit false negative that marked ready HCloudMachines as not existing — 31 machines across 8 clusters in one reported incident. What the three shipped fixes change, how a 429 can trigger an unnecessary replacement, and the operator checklist a CAPH fleet needs before the next Hetzner throttle.
The Informer Tax: What Every controller-runtime Watch Costs on a 4GB Hetzner Box
Every watched GVK is a full in-memory copy of every object. How much that costs on a cheap Hetzner control-plane node, why naive controllers OOM at 10k Secrets, and the five cache levers that cut it by 25-90%.
Docker's Rate-Limit Reversal: Why Six Months' Notice Is Your Registry Strategy
Docker cancelled per-pull charges and shelved storage billing in early 2025, keeping only the 100/200 per 6-hour pull limits and promising six months' notice before any future enforcement. What that guarantee covers, when a pull-through cache still pays, and three hardening steps that let a self-hosted fleet wait safely.
etcd's fsync Tax: Why Your Kubernetes Control Plane Needs Local NVMe, Not a Cloud Volume
Every etcd write pays an fsync — and the 10 ms p99 budget decides whether your control plane feels fast or flaky. A fio benchmark comparison of Hetzner local NVMe vs Ceph-backed Cloud Volumes, with PromQL alerts that catch a slow disk before the API server does.
Kubernetes 1.37 Will Brick Your Fleet on Upgrade Day: ipvs, Static Pods, and cgroup v1
Kubernetes 1.37 lands August 26 with three fleet-breaking changes hiding behind deprecation warnings — ipvs enters a removal clock, static Pods can no longer reference Secrets, and cgroup v1 nodes refuse to start without an override.
Temps Wants to Fix Coolify and Dokploy: Why a 99.9% Reliable One-Box PaaS Still Isn't a Fleet
Temps arrived January 2026 promising 99.9% deployment reliability by fixing the bugs that plague Coolify and Dokploy. It's the latest polished one-box self-hoster in a crowded field — and the clearest proof that a more reliable single server is still a single server.