Older posts.
How to Set Up SLO Burn Rate Alerts in Prometheus: Sloth, Pyrra (2026)
Step-by-step: define an SLI, write Prometheus recording rules, build multiwindow multi-burn-rate alerts (14.4x and 6x pages, 3x and 1x tickets), unit test them with promtool, generate them with Sloth or Pyrra, and fix noisy SLO alerts.
15 minOct 20, 2026Serverless in 2026: Lambda vs Cloud Run vs Workers, and When It Costs More
Serverless in 2026 explained: AWS Lambda Managed Instances, durable functions, SnapStart and the new Web Functions, Cloud Run GPUs and worker pools, Azure Container Apps, Cloudflare Containers and Vercel Fluid compute, with a list-price comparison and the workloads where serverless costs more.
14 minOct 20, 2026Self-Hosting vs SaaS in 2026: 37signals Saved $2M a Year. Should You?
A balanced look at self-hosting vs SaaS and cloud repatriation in 2026: 37signals' published cloud exit numbers, Ahrefs and Dropbox, what the surveys measure, Coolify, Dokploy and Kamal, the ops cost nobody invoices, and a break-even rule.
13 minOct 20, 2026Self-Hosting LLMs vs API Costs in 2026: The 62% Utilisation Break-Even
Self-hosting an open LLM vs paying per token in October 2026: H100 prices from $1.17 to $4.29 an hour, 8,973 tokens/s per GPU for gpt-oss-120b on vLLM, a $0.20 per million API price, the utilisation each price needs to break even, and the ops costs the spreadsheet leaves out.
13 minOct 20, 2026How to Self-Host n8n with Docker Compose in Queue Mode (2026)
Step-by-step n8n queue mode setup on Docker Compose: Postgres, Redis, a webhook processor, workers with task runner sidecars, the encryption key, N8N_WEBHOOK_URL, TLS with Caddy, backups, upgrades and patching. Tested on n8n 2.43.8.
16 minOct 20, 2026How to Deploy a Secure Remote MCP Server with OAuth (2026)
Step-by-step: run a remote MCP server over Streamable HTTP as an OAuth 2.1 resource server with Keycloak 26.8.1 and MCP Python SDK 2.3.0, validate audience and scopes per tool, add rate limits and audit logs, deploy to Cloud Run, and fix 401 and discovery errors.
16 minOct 20, 2026Secrets Sprawl 2026: 28.65M Leaked Keys and 64% Still Valid Years Later
What the 2026 secrets sprawl data says: 28.65M new secrets on public GitHub in 2025, AI service keys up 81%, AI-assisted commits leaking at twice the baseline, 24,008 secrets in MCP configs, 10,456 leaky Docker Hub images, and why 64% of old leaks still work.
13 minOct 20, 2026How to Stop Secrets Leaking Into Git: Gitleaks, Pre-commit, CI (2026)
Step-by-step guide to secret scanning in 2026: gitleaks 8.30.1 and TruffleHog 3.99.3 as pre-commit hooks, GitHub push protection, CI scanning with pinned actions, rotating a leaked key, and removing it from history with git filter-repo.
14 minOct 20, 2026Container Runtime Security in 2026: Falco vs Tetragon vs KubeArmor
Kubernetes runtime security in 2026: what Falco 0.45, Tetragon 1.7 and KubeArmor 1.7 actually do, detection versus in-kernel prevention, the runc, NVIDIA toolkit and containerd escape CVEs of 2025 and 2026, and where CNAPP vendors fit.
13 minOct 20, 2026How to Run a Local LLM With Ollama: Setup, GPU and API Guide (2026)
Step-by-step Ollama guide for 2026 (v0.40): install on macOS, Linux, Windows or Docker, confirm NVIDIA, AMD or Apple GPU use, pick a model that fits, set context length, write a Modelfile, call the OpenAI-compatible API, connect coding tools, and fix slow or out-of-memory runs.
14 minOct 20, 2026How to Run an AI Coding Agent in GitHub Actions Safely (2026)
Step-by-step hardening for claude-code-action v1.0.254 and codex-action v1.13: SHA pinning, least-privilege permissions, safe triggers, keeping prompt injection from issues away from secrets, tool allowlists, turn caps, rulesets and troubleshooting.
15 minOct 20, 2026How to Reduce Docker Image Size: Multi-Stage Builds Guide (2026)
Shrink Docker images with multi-stage builds, distroless or slim bases, .dockerignore, layer ordering and BuildKit cache mounts. Measured Go, Node, Python and Java examples: 343 MB to 3.4 MB, 423 MB to 56 MB, plus a troubleshooting table.
12 minOct 20, 2026How to Reduce Alert Fatigue with Alertmanager: Step-by-Step (2026)
A practical guide to cutting alert noise with Prometheus and Alertmanager v0.34: measure noise, alert on symptoms, set severity labels, then configure routing, grouping, inhibition, silences and time intervals, and fix Alertmanager not sending notifications.
15 minOct 20, 2026RAG vs Long Context vs Fine-Tuning in 2026: 1M Tokens Isn't Free
RAG vs long context vs fine-tuning in 2026: current 1M-token context windows and prices, what context rot, NoLiMa and RULER show about long-context accuracy, where RAG fails, the per-query cost math, and a decision framework you can apply this quarter.
13 minOct 20, 2026How to Build a RAG Pipeline With Postgres and pgvector (2026)
Step-by-step RAG pipeline on Postgres 18 and pgvector 0.8.7: install, schema, chunking, OpenAI embeddings, an HNSW index, hybrid search with full-text and reciprocal rank fusion, a Python example, retrieval evals, and fixes for slow queries and poor recall.
17 min