Huly's Hosted Shutdown: The Complete Self-Host Migration for Your Project Data
Huly's hosted service wound down in July 2026 while its Docker images and self-host repo stayed maintained. A concrete walkthrough for moving your workspace to Dokploy, Coolify, or plain Compose — volumes, image pins, and the exit-strategy checklist every SaaS-dependent team should keep.
Ingress-NGINX Is Retired. Your Annotations Aren't Portable: A Gateway API Migration Audit
Ingress-NGINX lost upstream maintenance in March 2026 and Gateway API v1.5 did not add the WebSocket and retry features the headlines suggest. A row-by-row audit of which NGINX annotations have a first-class Gateway API equivalent, which need a vendor policy CRD, and which have no equivalent — plus the cutover sequence that avoids a routing gap.
Your npm Token Is the Next Supply-Chain Incident: A Tokenless Publishing Playbook for Git-Push Pipelines
npm's OIDC trusted publishing replaces the long-lived NPM_TOKEN with per-run workload identity and automatic provenance. A six-step migration checklist with version floors and failure modes, the 2026 enforcement timeline through January 2027, and what the pattern means for a self-hosted build pipeline.
Your MCP Server Didn't Break — Its SDK Moved: Surviving MCP Python SDK 2.0's FastMCP-to-MCPServer Rename
MCP Python SDK 2.0 renamed FastMCP to MCPServer with no shim, so every fresh install against an unbounded mcp>=1.x pin fails at import. We cover the five-minute pin, the full port including four gotchas past the rename, and the fresh-resolve CI job that catches the next breaking major.
No SSH? No Problem: Talos Linux's talosctl debug Is a Privileged Escape Hatch That Cleans Up After Itself
Talos v1.13's talosctl debug runs a privileged container in the host's own namespaces — with registry-pull and offline tarball-push image paths — and deletes it on exit. We walk through a real pwru diagnosis and the audit rules for using it safely.
Headscale at 40,000+ Stars: Mesh Your Multi-Region Fleet Without Anyone Else's Control Plane
Headscale passed 43,000 GitHub stars as the open-source, self-hosted Tailscale control server. A concrete build for meshing a multi-region fleet — embedded DERP, pre-auth keys, per-site subnet routers, ACLs in git — plus the single-instance HA catch and the cost math against Tailscale's 2026 per-user pricing.
Metering Your Tenants: Build a Kubernetes Metrics Exporter for Railway-Style Usage Showback
Build a small Go exporter that turns cAdvisor's CPU, working-set memory, and network counters into per-app usage statements priced at Railway's public meters — plus the five cAdvisor pitfalls that silently corrupt naive per-container accounting.
Gateway API on kind: The Local Reproduction Recipe for Ingress Bugs You Can't Debug on Bare Metal
The stock kubernetes.io recipe for running Gateway API on kind gets you one working HTTPRoute. Here's how to extend it to reproduce the three tenant ingress bugs that actually page a self-hosted PaaS's on-call, before they hit bare metal.
Hello World
Welcome to My Site, a modern CMS built on TanStack Start.