New dataset reveals real idle resource usage for self-hosted apps
SelfHost Atlas released an open dataset measuring actual RAM and disk usage of self-hostable apps on fresh servers, contrasting them with documented minimums.
News for teams that run their own software
A daily digest on self-hosting, DevOps, security, document AI and HR tech. Each story is summarized, explains why it matters and links to the original publisher.
Inside n8n's execution engine: how the workflow scheduler actually works
A technical breakdown of n8n’s internal execution model, covering its serializable run objects, scheduling logic, and queue architecture for self-hosted automation.
Grist's hidden footprint reveals secure self-hosting patterns
ZoomEye scans from October 2026 show Grist has a minimal public presence, with only one instance on its default port, indicating strong internal deployment habits.
Debugging silent MQTT automations in Home Assistant safely
A guide to isolating topic mismatches and payload errors in Home Assistant using safe, temporary test topics instead of live device controls.
Measure AI outcomes before expanding your GPU pool
Teams running Kubernetes AI workloads should define success metrics and test sustainable capacity before buying more GPUs. Staggering jobs and linking costs to verified results often reveals unused po
CISA warns of active exploits in Collabora Online and Arista VeloCloud
CISA added two critical vulnerabilities to its KEV catalog due to active exploitation. Nextcloud users and Arista VCO admins must patch immediately.
Death Plan Switch offers self-hosted contingency for solo admins
A new MIT-licensed tool helps solo administrators leave instructions for trusted contacts if they stop checking in, relying on scheduled jobs and email confirmations.
Four silent traps when scaling self-hosted n8n with queue mode
Moving n8n to queue mode improves throughput but introduces four specific failure points involving webhook routing, registration drift, worker health, and orphaned executions.
PHP2Shell vulnerabilities force global scramble to patch critical web infrastructure
Two critical PHP bugs, CVE-2026-109618 and CVE-2026-109619, allowed unauthenticated remote code execution, prompting widespread emergency patching across the internet.
Mailrelay turns incoming email into webhooks for self-hosted automation
A new open-source tool called mailrelay accepts SMTP traffic, parses emails, and triggers webhooks based on configurable rules for local automation.
How a Python version mismatch hid a stale data alarm in cron
A parsing error in Python 3.9 masked a legitimate data staleness alert, revealing pitfalls in environment consistency and monitoring logic for self-hosted pipelines.
Indian government sites serve revoked eMudhra certificates after mass revocation
Thousands of Indian government domains continue to serve revoked TLS certificates following a security incident at eMudhra, causing inconsistent browser access and compliance failures.
PHP advises disabling session upload progress to mitigate new RCE risk
PHP has issued a warning for CVE-2026-115560, a remote code execution vulnerability affecting specific configurations. Administrators are advised to disable session upload progress until a routine fix
Quad9 exits France November 24: update your DNS configs now
Quad9 will stop serving French users on November 24, 2026, following a court ruling. Sysadmins must audit and update DNS settings across routers, servers, and browsers to avoid outages.
PHP2Shell vulnerabilities force global shutdowns as AI accelerates patch cycles
Critical remote code execution flaws in PHP runtime triggered widespread service outages across Europe, highlighting the risks of unsupported versions and AI-driven vulnerability discovery.
