1732 posts tagged with "Self-Hosting"
Running your own PaaS and infrastructure on machines you own
8% CPU, 69% Overprovisioning: A 30-Minute Kubernetes Fleet Audit
Measure allocatable, requested, and used resources in 30 minutes, then test whether a self-hosted Kubernetes fleet can safely remove a node without sacrificing N-1 resilience.
DigitalOcean App Platform Legacy Plans in 2026: Stay, Migrate, or Self-Host?
DigitalOcean still supports App Platform apps created before May 7, 2024, but says legacy plans will be deprecated soon. Here is the bill math for staying, moving to current pricing, or running the same small fleet on owned Hetzner capacity.
Before AI Agents Operate Your Platform: The Catalog Hygiene Contract Your IDP Needs
Use a field-level catalog contract, a worked deploy example, and staged authority controls to let AI agents safely operate a self-hosted developer platform.
Anthropic Paused Its Claude Agent SDK Meter. Your Agent-Ops Cost Model Still Needs It.
Anthropic paused its proposed Agent SDK credit split, but deploy-from-chat platforms still need a concrete model for attributing and budgeting unattended agent work.
CNCF's 276–327-Patch Maintenance Bill for an Internal Platform
A 14-project Kubernetes platform can face 276–327 patches, 43–52 minor upgrades, and 2–5 major upgrades a year. This worked model turns that queue into 187–1,063 engineer-hours and shows how part-time operators can contain it.
Coolify Critical CVEs: The PaaS Isolation Lesson
Critical Coolify advisories show how authorization failures and deployment input can reach privileged infrastructure—and which layered controls can narrow the blast radius.
CI Runner Pricing in 2026: Depot, Blacksmith, and the Cost of Reserving Your Own Build Capacity
A reproducible CI-runner cost model across 2, 8, and 20 concurrent jobs: current Depot and Blacksmith pricing beside the fixed cost of reserving self-hosted build nodes.
Gateway API 1.6 Gives Agent Sandboxes a Named Egress Target—Not an Egress Policy
Gateway API 1.6's experimental XBackend can make an AI API destination reviewable. Here is the complete control stack required to turn that declaration into safe sandbox egress.
Hetzner DNS Makes `ttl` Mandatory: Audit the One ACME Call That Can Break Renewal
Hetzner Cloud DNS will require an explicit TTL on one RRSet action after September 30, 2026. Identify whether your ACME path uses it, patch the request correctly, and rehearse a safe renewal.