Building a private AI search stack with SearXNG and local LLMs
A new open-source project combines SearXNG metasearch with Ollama to deliver cited AI answers without sending queries to external servers.
News for teams that run their own software
A daily digest on self-hosting, DevOps, security, document AI and HR tech. Each story is summarized, explains why it matters and links to the original publisher.
Silent server failures: why outbound heartbeats beat traditional monitoring for homelabs
A developer lost two servers to a power outage without knowing. The fix involves a dead man's switch pattern that requires no open ports.
Stabilizing self-hosted GitHub Actions runners on Windows and WSL2
A new open-source project details measured fixes for common failure modes in self-hosted CI/CD runners, including clock drift, memory pressure, and DNS timeouts on Windows machines.
Why unit tests fail to protect AI agents in production incidents
A new testing rubric reveals that Model Context Protocol servers often pass standard checks but fail when driven by non-deterministic AI agents during real incidents.
Hidden text in PDFs can trick AI document processors
A QA engineer demonstrates how hidden text and layout tricks in PDFs can inject false data into AI systems, proposing a multi-layered defense strategy.
Scamwich campaign uses reverse proxies to steal restaurant delivery payments
A new payment-skimming campaign called Scamwich uses reverse proxies and live Google ads to intercept credit card data from restaurant customers without disrupting the browsing experience.
Migrating from AWS Route 53 to Bunny DNS for cost and control
A developer details moving their blog infrastructure from Amazon Web Services to Bunny.net, cutting monthly costs significantly while maintaining performance through scriptable GeoDNS.
Self-hosting Ntfy: cost analysis and iOS limitations for home servers
A detailed comparison of self-hosting Ntfy versus Pushover reveals hidden costs for iPhone users and specific setup requirements for reliable alerts.
Measuring the real impact of AI code reviewers in CI pipelines
DevOps teams are shifting from tracking AI reviewer activity to measuring actual code quality improvements through dismissal rates and escaped defects.
Running a full homelab stack on a $10 OpenStick device
A developer demonstrates how to host ten self-hosted services on a 512 MB ARM device, proving that ultra-low-resource hardware can handle real-world workloads.
Postgres invalid indexes silently degrade write performance after failed builds
Failed concurrent index builds in Postgres leave behind invalid entries that consume resources. Learn how to detect, understand, and clean up these hidden database issues.
Google donates gVisor, Agent Substrate and OpenRL to CNCF
Google has donated three AI infrastructure projects to the Cloud Native Computing Foundation to encourage industry-wide adoption and neutral governance.
Browser extensions can hijack Claude Desktop via Dispatch feature
Researchers demonstrate how malicious browser scripts on claude.ai can trick Claude Desktop into executing code on a user's machine through the Dispatch integration.
Barracuda Email Security Gateway flaws allow unauthenticated root access
Two vulnerabilities in Barracuda's Email Security Gateway can be chained to execute commands as root without login. Patches are available in firmware version 9.4.0.030 and later.
Four critical Metabase configuration decisions for self-hosted deployments
Self-hosting Metabase requires early decisions on database storage, encryption keys, JVM memory, and version pinning to avoid data loss and downtime.
