1732 posts tagged with "Self-Hosting"
Running your own PaaS and infrastructure on machines you own

Europe's Sovereign GPU Price Table: The Two Break-Evens That Decide Rent-vs-Own Inference
Hetzner rents H100s at ~$2.80/hr and OVHcloud at ~$3.20/hr, neither sells H200 time, and a $989/month dedicated box beats both past ~45% utilization. The full table, the math, and why sovereignty is a discount here.

Your Ingress-Nginx Has an Expiry Date: What Moving to Gateway API Actually Takes
ingress-nginx maintenance ended in March 2026 and the last vendor patch bridge runs out in November 2026. A before/after resource map, a four-phase migration with no flag day, and the full TLS story for self-hosted fleets.

Hetzner's Datacenters API Goes 410 on October 1: The 4-Row Checklist for Your CAPH Fleet
On October 1, 2026, Hetzner's datacenters API endpoints start returning HTTP 410 Gone — while retired server-type names and a removed datacenter field can already break provisioning today. A four-row migration checklist for Cluster API fleets on Hetzner, with the greps and the runbook.

Ingress-NGINX Is Retired. Your Annotations Aren't Portable: A Gateway API Migration Audit
Ingress-NGINX lost upstream maintenance in March 2026 and Gateway API v1.5 did not add the WebSocket and retry features the headlines suggest. A row-by-row audit of which NGINX annotations have a first-class Gateway API equivalent, which need a vendor policy CRD, and which have no equivalent — plus the cutover sequence that avoids a routing gap.

Ingress-NGINX Is Retired: A Zero-Downtime Migration Plan for Every Tenant Domain on Your Git-Push PaaS
Ingress-NGINX stopped receiving security patches in March 2026. A staged runbook for moving wildcard and tenant custom domains to Gateway API with Ingress2Gateway 1.0 — shadow validation, weighted-DNS cutover, and rollback triggers included.

kuberc Is On by Default: Your kubectl Habits Finally Move Out of the Kubeconfig
Kubernetes 1.36 keeps kuberc beta and on by default, adds a real management CLI, and turns the credential-plugin allowlist rename into a hard error. What the preferences/kubeconfig split means for a shared ops box.

Kueue 1.3 Plus JobSet: Skip the Second Scheduler for Agent Batch Jobs — Until You Can't
Kueue 1.3 added first-class JobSet support, completing a native quota-plus-gang batch stack that runs on the default scheduler. Tabled here: what it covers, the worked manifests, and the three triggers that still justify Volcano.

Six Days to Renew: What Let's Encrypt's Short-Lived Certificates Do to Your Renewal Margin
Let's Encrypt's 160-hour shortlived certificates cut renewal slack from 30 days to about 53 hours. The before/after margin math, plus the automation, monitoring, and default-or-opt-in checklist a self-hosted platform needs first.

MCP Goes Stateless: What Losing Long-Lived Connections Costs — and Buys — the Servers You Self-Host
MCP's 2026-07-28 revision deletes sessions, the initialize handshake, and every server-to-client primitive. A gains-versus-costs accounting for operators of self-hosted MCP tool servers, plus the task-based redesign for deploys that outlive one request.