1732 posts tagged with "Self-Hosting"
Running your own PaaS and infrastructure on machines you own
30MB vs 800MB: What Rivetr's Single-Binary PaaS Teaches About the Self-Hosted Control-Plane Floor
Rivetr runs a complete self-hosted PaaS control plane in ~30MB of RAM against Coolify's ~800MB stack: an apples-to-apples teardown of what the gap measures, where the 30MB floor comes from, and why footprint is the tiebreaker and fleet lifecycle the decision.
Your Build Server Was Owned for 24 Days. Patching It Doesn't Tell You What Shipped Clean.
Attackers held admin access to self-hosted JFrog Artifactory servers for 24 days in August-September 2026, planting Rust backdoors with remote C2. A triage table for which window artifacts are suspect, the rebuild-and-compare procedure that re-verifies them, and the SLSA signing checklist that makes the next incident answerable.
Kubernetes 1.36 Schedules Whole Workloads, Not Pods: Bin-Packing Tenant Apps on Fixed Hardware
Kubernetes 1.36's PodGroup scheduling cycle binds whole workload gangs atomically, but tenant Deployments see almost no change yet. A worked 3-node scenario shows what moves, what doesn't, and where Kueue still wins.
One Webhook, Every Repo Traced: Zero-Instrumentation CI Tracing With OTel's githubreceiver
A single org-level GitHub webhook plus the OTel Collector's githubreceiver turns workflow_run and workflow_job events into drillable traces — slow, flaky, and queued-job visibility across every repo with zero workflow-file edits, and a sizing method worth copying.
The Single-Box Ceiling, Priced: What a Second Server Costs on Coolify, Dokploy, CapRover, and EasyPanel
Coolify, Dokploy, and CapRover charge $0 for a second server — EasyPanel's per-server Business tier adds about $910/year on identical hardware. A priced 12-month comparison of the multi-server ceiling, plus what the same box costs on a Cluster API fleet.
Vercel Made Blocked Traffic Free — Here's What That Costs to Build Yourself
Vercel's May 2026 Firewall change made WAF-blocked traffic free on every plan — this post prices each layer of that bundle for a self-hosted fleet and gives the five-item checklist a PaaS control plane must ship to match it.
Stripe's Agentic Provisioning Protocol Puts Railway One CLI Command Away — and Draws the Line Where MCP Stops
Stripe's Agentic Provisioning Protocol takes agents from nothing to a running Railway resource — account, $5 trial, credentials, Postgres — in one CLI flow MCP cannot express. How discovery, authorization, and tokenized payment work under the hood, and a seven-item checklist for the self-hosted equivalent.
k3s vs Kubernetes vs MicroK8s: the 4x RAM Gap Is Real — and Where a Lightweight Distro Stops Being a Fleet
k3s agents run in 512 MB against a kubeadm worker's 2 GB — a real 4x gap on full upstream Kubernetes. What that buys on a €4 Hetzner box, the one-way doors waiting at machine two, and the on-call moment when Cluster API takes over.
Who Resolves Your Subdomain When One DNS Node Dies? Technitium Clustering vs Pi-hole HA, Compared Honestly
Technitium's built-in DNS clustering and the community pihole-ha add-on solve the same outage — one dead DNS node — from opposite directions. A concrete side-by-side on sync models, failover times, DHCP, and DNSSEC, plus which one fits a self-hosted PaaS's public wildcard path.