1732 posts tagged with "Self-Hosting"
Running your own PaaS and infrastructure on machines you own
Block the Training Bots, Welcome the Answer Bots: A robots.txt Default for the AI-Crawler Era
Publishers now block AI training bots while welcoming the same vendors' answering crawlers. A copy-paste three-tier robots.txt default for docs sites and tenant apps, with the traffic data and gotchas behind it.
Heroku Is in Sustaining Mode: What 'No New Features' Means for Your Migration Decision
Heroku's February 2026 sustaining-mode announcement froze its roadmap: no new features, no new Enterprise contracts. What the freeze covers, the five clocks that will force your hand, what a typical $130-165/month footprint costs on Render, Railway, Fly.io, or owned hardware, and a stay-plan-move decision framework.
Hetzner vs DigitalOcean vs Vultr After Two 2026 Price Hikes: Which Cheap VPS Wins Each Tier of Your Fleet?
Hetzner raised cloud prices twice in 2026 and still undercuts DigitalOcean and Vultr three-to-fourfold per core. A tier-by-tier read of which provider wins control planes, workers, build runners, and US nodes once IPv4 fees and traffic allowances are priced in.
Ingress-NGINX Is Retired: Your Gateway API Migration Playbook for the Rest of 2026
Ingress-nginx stopped receiving security patches in March 2026. A migration playbook for self-hosted teams: the five translation traps, which annotations survive the move to Gateway API, and a TLS cutover checklist.
Show HN Promised Instant Kubernetes With KVM and gRPC — the Hard Part Was Never Provisioning
A Show HN promises production Kubernetes in 5–10 minutes via KVM and gRPC agents. Machine lifecycle is already standardized by Cluster API — the unsolved half is the tested service bundle, and no protocol fixes that.
Kapibara Builds Git Pushes With In-Cluster BuildKit and a Railpack Frontend — No Docker-in-Docker Required
Kapibara's Docker-less build path replaces per-build Docker-in-Docker pods with one in-cluster BuildKit daemon and a Railpack frontend — the step-by-step design, what it removes, and what it still costs.
Karmada Just Graduated: What Multi-Cluster Kubernetes Maturity Means for Your Single-Region Fleet
Karmada graduated from the CNCF on September 8, 2026, with v1.19's AI-training scheduling in tow. For a Hetzner-only Cluster API fleet, the move is to borrow its propagation and failover patterns now and adopt the control plane when a second region arrives.
kube-hetzner vs CAPH: What Your First Hetzner Provisioning Choice Costs by the Second Cluster
Terraform or Cluster API for Hetzner Kubernetes? A day-2 comparison of kube-hetzner and CAPH across upgrades, node replacement, and the June 2026 server-type churn — and exactly where the answer flips.
MCPwn: How nginx-ui's Unauthenticated MCP Endpoint Handed Attackers Full nginx Takeover — and the Checklist That Would Have Stopped It
nginx-ui shipped MCP support with one endpoint missing authentication, exposing 12 tools — including config writes with automatic reload — to anyone on the network. CVE-2026-33032 scored 9.8 and was exploited in the wild; here is how the takeover worked and a seven-item checklist for any panel adding agent access.