Coolify vs Dokploy vs Kubero vs bex: The Single-Box-vs-Fleet Decision
Coolify, Dokploy, Kubero, and bex all promise git-push deploys you own — but only two of them are actually built to run on a single box, and the other two structurally can't be. Here's the architecture, cost, and failure-mode breakdown that decides which one fits.
CloudNativePG vs Zalando vs StackGres: Why bex Chose CNPG for Managed Postgres
A concrete, real-decision comparison of the three Kubernetes Postgres operators — CloudNativePG, Zalando, and StackGres — and what self-hosted Supabase's Docker Compose stack still can't match a year after Supabase hired a maintainer to fix it.
The 47-Day Certificate Era: TLS Automation Becomes Mandatory for Self-Hosted Infrastructure
CA/Browser Forum rules cut TLS certificate lifetimes from 398 to 47 days by 2029, with domain-validation reuse shrinking to 7 hours. Here's the full timeline and what it breaks in self-hosted TLS automation.
CAPD vs CAPH: One Cluster API, From Your Laptop to Real Hetzner Bare Metal
CAPD and CAPH speak the exact same Cluster API contract at opposite extremes — one fakes the hardware for local dev, the other provisions real Hetzner dedicated servers. Here's what changes, what doesn't, and the gotchas in between.
Kubernetes Quietly Fixed a Years-Old cgroup v1-to-v2 CPU Priority Bug: What the January 2026 Formula Rewrite Means
A linear formula meant to convert cgroup v1 CPU shares into v2 CPU weight silently gave 1-CPU containers about 39% of the priority they should've had, invisible to kubectl and metrics-server the whole time. Here's the fixed formula, the exact command to audit your own nodes, and what rolling it out across a self-hosted fleet's node images actually requires.
Coolify's 58K Stars vs Dokploy's 35K: What Two Self-Hosted PaaS Growth Curves Actually Say
A same-day GitHub API check of Coolify's and Dokploy's star counts, MCP capabilities, and architecture puts the 'fastest growing PaaS' claim to the test — and finds the two projects' AI-agent tooling tells a very different story than their star counts do.
Envoy AI Gateway Hits v1.0: A CNCF Blueprint for Securing Your Own MCP Server
Envoy AI Gateway's v1.0 release stabilizes MCPRoute and MCPRouteSecurityPolicy, giving self-hosted platforms CEL-based per-tool authorization and audit trails for AI agents — without building an MCP authorization layer from scratch.
GitHub Tried to Meter Self-Hosted CI Runners, Then Backed Off
GitHub announced a $0.002/minute charge on self-hosted Actions runners, then postponed it within 48 hours. Here's the cost math it would have meant, and the control-plane dependency it exposed even for teams that already self-host their compute.
Hetzner Already Killed the datacenter Field — What a CAPH Fleet Must Check Before August 1
Hetzner already removed the datacenter field from its API on July 1, and EC2-compatible metadata routes disappear August 1 — here's exactly what breaks in a CAPH-managed fleet, what's already patched, and how to check.