1732 posts tagged with "Self-Hosting"
Running your own PaaS and infrastructure on machines you own
The MCP Stateless Transition Has Barely Started: An Ops Guide to the Mixed-Version Window
Only 4% of live MCP endpoints speak the stateless 2026-07-28 wire. This ops guide gives you a routing table for the mixed-version window, a handle-passing migration pattern for deploy and rollback tools, and the case for shipping stateless-first.
Mimir vs Cortex vs Thanos: Picking the Multi-Tenant Metrics Backend for a PaaS That Bills by Usage
Mimir, Cortex, and Thanos compared as the multi-tenant metrics backend for a self-hosted PaaS that bills by usage — per-tenant cardinality isolation, cost attribution for chargeback, and owned-capacity footprint, with a decision table.
Unlimited Apps, One Flat Bill: What PocketBaseCloud's $25 Show HN Pitch Reveals About Per-Project Pricing
PocketBaseCloud's Show HN offers unlimited small apps on a $25 flat slice — we work the N-app math against Supabase per-project metering, Vercel usage billing, and a $6 self-hosted box.
Stop Copying Registry Passwords Into Every Namespace: Kubernetes 1.34 ServiceAccount Image Pulls in Practice
Kubernetes 1.34's beta ServiceAccount token flow replaces per-namespace imagePullSecrets with short-lived, workload-bound pull credentials — how to wire the registry side, bind ServiceAccounts, handle rotation, and test the failure modes before deleting static secrets.
Sonobuoy Conformance as a Fleet Gate: Don't Schedule Tenants on an Unproven Node
A two-tier Sonobuoy gate for CAPH-managed Hetzner fleets: taint every new machine at join, prove it with a focused non-disruptive conformance slice, and reserve full certified-conformance for template promotion on a canary cluster.
0.27s at 37%: What the August Sandbox Burst Benchmark Really Says About Cold-Start Claims
Daytona's 0.27-second median at 37% success, Modal at 0.88s, E2B at 1.61s: a guided reading of the August burst benchmark, a four-question decoder for any cold-start slide, and the concurrent bar a self-hosted Firecracker pool must clear to claim parity.
Tailscale's Aperture Puts LLM API Keys Behind Network Identity Instead of Env Vars
Tailscale's Aperture replaces per-agent LLM API keys with tailnet identity, per-user audit logs, and token-spend attribution. Here's the five-step mechanism, why a mesh vendor built a credential broker, and the parts list for a self-hosted equivalent.
Coolify v4 Is a Rolling Beta: What Pinning the Platform Underneath Your Apps Actually Requires
Coolify v4.3.1 was 'latest patched' on August 12 and four releases behind by August 16 — inside a CVE cluster with RCE to host root. How to run a rolling-beta PaaS panel safely: version-pinned installs, a staging canary box, and advisory-feed monitoring.
ARC 0.14.0: Ephemeral Tenant CI on Your Own Fleet, Without the Scale-Set Sprawl
ARC 0.14.0 adds multilabel runner scale sets, stale-config protection, and a standalone Go client — a walkthrough of running ephemeral per-job tenant CI on a Cluster-API fleet, from Helm install to listener scheduling.