Tinyjobs brings zero-dependency background tasks to Python on SQLite
A new library enables background jobs and cron scheduling for Python apps using only SQLite, with no external dependencies required.
News for teams that run their own software
A daily digest on self-hosting, DevOps, security, document AI and HR tech. Each story is summarized, explains why it matters and links to the original publisher.
Migrating from Easypanel to Tugport: five breakages and lessons learned
A developer migrated 57 services from Easypanel to Tugport using a single command. The process revealed five specific bugs involving environment variables, health checks, and network conflicts.
Diagnosing and fixing ERR_SSL_PROTOCOL_ERROR for self-hosted services
A technical guide explains the causes of Chrome's SSL protocol error, offering troubleshooting steps for visitors and server administrators dealing with TLS handshake failures.
Microsoft Teams scams use IT impersonation to deploy ransomware
Attackers exploit external chat features in Microsoft Teams with fake IT support identities, leading to remote access and Chaos ransomware deployment.
Fixing Node.js 502 errors during cloud rolling deploys
Node.js applications migrating to the cloud often suffer brief outages during deploys due to improper signal handling and health check configuration.
Critical RCEs in PHP and GitLab plus eMudhra CA compromise
PHP and GitLab patched critical remote code execution flaws while eMudhra exited the certificate market after weak keys were exposed.
Odudu release candidate brings self-hosted identity and agent support
Wisdom Praise released a release candidate of Odudu, a self-hosted multi-tenant OIDC provider with AI agent support. It runs in one container with PostgreSQL but lacks an independent security review.
Self-hosting Paperless-ngx on k3s requires careful GitOps storage handling
A developer details the pitfalls of running Paperless-ngx on k3s with Flux, highlighting critical annotation needs for persistent storage and common bootstrap errors.
Gheist campaign steals secrets from private GitHub repos via Actions logs
Attackers use stolen tokens to plant workflows that dump secrets into logs, bypassing GitHub's public repo safeguards in private and enterprise environments.
Apple blocks compromised eMudhra certificates and guides admins on CLI remediation
Apple has blocked twelve compromised TLS certificates from eMudhra intermediate CAs. Mac administrators using command-line tools must manually update trust stores to ensure full protection.
OneMemory offers a shared SQLite store for AI agents via MCP and REST
A new self-hosted tool called OneMemory lets developers share memory across AI agents using a single SQLite file, accessible via Model Context Protocol or REST API.
VPS Pilot v0.3.0 adds safe remote command execution for small server fleets
The lightweight self-hosted monitoring tool VPS Pilot released version 0.3.0, introducing a secure method to run predefined commands on connected servers without exposing shell access.
VoidAccess brings self-hosted threat intelligence and local AI to security researchers
VoidAccess is a new MIT-licensed tool that aggregates threat data from Tor and public feeds into relationship graphs, keeping sensitive investigations on your own infrastructure.
The rising operational cost of self-hosting in an AI-driven vulnerability landscape
A recent surge in CVEs and supply chain attacks is driving some operators to reconsider self-hosting in favor of managed SaaS solutions.
Unpatched Tailscale SSH flaw allows root escalation across networks
A new report details a critical vulnerability in Tailscale and headscale that lets attackers gain root access on target servers via SSH port forwarding, with no patch currently available.
