1732 posts tagged with "Self-Hosting"
Running your own PaaS and infrastructure on machines you own

Your Node Buildpack's --ignore-scripts Flag Didn't Stop Phantom Gyp
A June 2026 npm worm called Phantom Gyp bypassed --ignore-scripts entirely by hiding in binding.gyp instead of a lifecycle script — here's the exact mechanism, why it worked, and what a git-push buildpack needs to do instead of trusting one flag.

Pulumi Neo Is GA and Reads Your Terraform State Directly — Here's Why bex's Deploy API Won't
Pulumi Neo reads live Terraform and CloudFormation state directly and executes changes inside it. bex's MCP server calls a fixed, enumerable set of verbs instead. Here's the concrete case for why an agent that can create and destroy production infrastructure needs to know which shape it's actually operating under.

Railway's Free Tier Never Came Back: What a One-Time $5 Trial Credit Actually Buys a New Team in 2026
Railway's one-time $5 trial credit sounds generous until you run the actual per-minute billing math — here's exactly how many days it lasts for a real web app plus database, and what the same workload costs on an owned Hetzner box instead.

Railway's Reliability Problem: Five Incidents Since November 2025, and What an Outage Actually Costs a Migrating Team
Railway has logged five platform incidents since November 2025, including an 8-hour GCP account suspension. A worked cost model — SLA credits, hot-standby insurance, and the actual incident bill — for a team deciding whether to migrate.

The Heroku Buildpack Compatibility Myth: What Render's 'Zero-Config Migration' Actually Runs On
Render's 'Heroku buildpack support' is Cloud Native Buildpacks auto-detection, not the literal bin/detect/compile/release scripts your Heroku app runs today — here's the real API gap and what closing it actually takes.

The Section 232 Chip Tariff's 100-Megawatt Loophole: Why a 25% Levy on H200 and MI325X GPUs Exempts Hyperscalers by Design
The Section 232 chip tariff's real exemption isn't a political favor to Amazon, Google, and Microsoft — it's a 100-megawatt threshold baked into the tariff schedule that only hyperscale data centers can reach, and it reshapes the buy-vs-rent math for anyone importing GPU hardware into the US.

Your AI App Builder Ships Where It Wants: The Open Deploy-Target Gap Behind v0, Bolt, Lovable, and Replit
v0, Bolt, Lovable, and Replit Agent all generate a working app and default to deploying it on their own cloud. Here's exactly what 'export the code' does and doesn't get you, and what it actually takes to run the result somewhere you own.

VolumeAttributesClass Went GA Promising Online Volume Resize. Here's What Actually Happens on a Self-Hosted Hetzner Fleet
Kubernetes 1.34 made VolumeAttributesClass GA, promising online volume tier changes with no detach-recreate cycle. Here's what actually happens when you check the CSI drivers a self-hosted Hetzner fleet runs — and the live gap even the one that supports it hasn't closed yet.

10,000 MCP Servers Later, the Hard Part Isn't Building One — It's Being Found and Trusted
MCP passed 10,000 public servers and 97 million monthly downloads in 2026 — but 52% of those servers are abandoned. Here's what building bex's own MCP server into that ecosystem actually requires: the protocol's stateless rewrite, the tool-poisoning threat class, and why shipping one isn't a differentiator anymore.