1732 posts tagged with "Self-Hosting"
Running your own PaaS and infrastructure on machines you own

CrowdSec 1.8 Adds Bot Detection to Its Open-Source WAF: What Fingerprinting Plus Proof-of-Work Changes at a Self-Hosted Edge
CrowdSec 1.8 adds fingerprint-plus-proof-of-work bot detection to its open-source WAF and a Kubernetes datasource that lets one instance read pod logs from the API server. How the challenge scores bots, what it changes versus fail2ban and Anubis, and a six-item adoption checklist for your ingress.

Only 21% of Teams Can Stand Up a Pipeline in Under Two Hours — The Setup Tax Git-Push PaaS Erases
Harness's 2026 survey found only 21% of teams can add a build-and-deploy pipeline in under two hours — while elite teams deploy 973x more often than laggards. A timed, row-by-row breakdown of where the setup hours go on the Dockerfile path, and what the git-push path deletes.

DMCA Takedowns Land on the Platform, Not the Tenant: The Notice-and-Takedown Runbook a Self-Hosted PaaS Needs Before the First Complaint
The moment tenants serve content from your domains, abuse notices land on your desk — and safe-harbor protection depends on machinery built before the first one. A concrete DMCA and DSA runbook for self-hosted PaaS operators: designated agent, repeat-infringer policy, per-tenant suspension, and shared-domain defense.

Dokploy Shipped 508 MCP Tools. The Community Deleted 95% of Them.
Dokploy's official MCP server mirrors every API endpoint as a tool — 508 of them, burning roughly 74k tokens before the first question. Community rivals cover the same API with 13 to 28 curated tools. The measured numbers behind the backlash, and five design rules for the next infrastructure MCP.

Every Pull Request Gets a Live Environment: The Namespace-Per-PR Blueprint for Self-Hosted Kubernetes
Preview environments are now the default developers expect: 40% of teams run them and top performers nearly all do. What the Vercel/Railway bar requires, the namespace-per-PR blueprint for your own cluster, database strategies that stop short of a DBaaS, and the cost math versus always-on staging.

Fly.io Postgres vs Self-Hosted CloudNativePG: Pricing the Multi-Region Story
Fly.io's Postgres story is really two products — deprecated multi-region fly pg and single-region-first Managed Postgres. This inventory prices MPG, legacy fly pg, and a self-hosted CNPG fleet for a typical HA workload, with a decision rule for when Postgres-near-every-region earns its invoice.

Gateway API v1.5 Went All-In on Stable: Your Ingress-to-Gateway Migration Checklist for a Self-Hosted Fleet
With ingress-nginx past end of life and Gateway API v1.5 promoting six features to Standard, migrating off Ingress is now a scheduled project. A worked conversion, a manual-pass checklist, and a cutover runbook for small self-hosted fleets.

GitHub's July 29 Runner-Registration Outage: Your Build Pipeline Runs on Capacity Someone Else Plans
On July 29, 2026, GitHub's runner-administration service ran out of memory and builds quietly stopped starting. It was one of seven capacity-rooted incidents across July and August, and a concrete case for running the build step on capacity you plan yourself.

GitHub's Egress Firewall Won't Cover Your Self-Hosted Runners — Here's the Blueprint That Will
GitHub's 2026 roadmap adds a root-proof egress firewall for hosted runners only. Replicate that guarantee on self-hosted ARC runners with ephemeral pods, default-deny egress, Cilium DNS allowlists, and SHA-pinned actions.