php2shell (CVE-2026-109618): How to Check and Patch the PHP Your Server Runs
If you run Apache with mod_php, an unauthenticated HTTP request could get code execution on your server before a single line of your application ran…
Tech news from the best sources
If you run Apache with mod_php, an unauthenticated HTTP request could get code execution on your server before a single line of your application ran…
Disclosure: I sell Low-Latency Kit, a commercial WebRTC source kit. This post compares it honestly with Jitsi Meet, an Apache-2.0 project. I do not…
Connected a GitHub repo, built it, tested it, and pushed a tagged image to DockerHub, in about ten minutes, without writing a line of YAML. Creating…
TL;DR : On Docker 29.9.1 with Swarm and ufw (default deny incoming), a container on an overlay network that connects to an ingress-published port on…
TL;DR : Per-step resource limits in BuildKit ( docker buildx build --resource memory=... , Bake resources ) are silently ignored when the builder is…
Originally published on my blog — read it there with the full context, code and updates . An AI agent that forgets everything between conversations…
Run on every core, recover from crashes, configure without leaking secrets, ship a Docker image, and the checklist to go through before real users a…
DocuFlow: Turning Invoice PDFs into Structured Financial Data Invoices are easy to overlook when they’re just files sitting in a folder. But once yo…
I keep getting confused by all the acronyms in self-hosting. After 18 months running a Synology NAS + 10 docker services, here's my cheat sheet of t…
Our entry for Graph Hacks by WeMakeDevs × FalkorDB The problem: an alert with no context A security analyst might see hundreds of alerts a day. One…
GitLab CE and Forgejo both give you a private Git server with issues, code review, CI and a container registry. They sit at opposite ends of the wei…
Plausible Community Edition is a self-hosted, cookie-free analytics stack. The same product family powers Plausible Cloud , and CE is the free, AGPL…
I am a software engineer who has mostly worked on the web. With all of the AI boom and all of the different models, our everyday work has changed a…
If you start Vaultwarden with a plain docker run -p 8000:80 and open it from another machine, you don't get a login page. You get this: You are not…
I deploy a handful of projects to a handful of my own servers. Not enough to justify Kubernetes, too many to keep doing ssh , git pull , docker comp…
Once you run more than one self-hosted app, you hit the same problem every time. Each app wants its own port, and none of them has HTTPS. Nginx Prox…
Originally published on the Hubfly blog . TL;DR What you get: a 3-service Compose file (Postgres, a one-shot migration job, an API) where the API ca…
Picture this. You spend an afternoon setting up a container, save a few files inside it, then clean up with docker rm . Next morning you start a fre…
I keep a notes file of commands I had to look up twice. At some point the file got long enough that I turned it into proper one-page cheatsheets — o…
docker push returns denied , or docker pull fails with x509 —usually the image is fine and the registry is not wired: service down, wrong repo type,…
Email verification tests become unreliable when every CI job reads from the same inbox. A message from a previous run can look valid, a retry can co…
Overview Item Detail CVE ID CVE-2026-40281 Affected product Gotenberg (Docker-powered PDF conversion API, thecodingmachine/gotenberg) Affected versi…
Adding Per‑Container CPU & Memory Limits to Docker‑Compose for pgvector TL;DR: I added mem_limit and cpus to the PostgreSQL service in docker‑co…
If Open WebUI shows "Ollama: Network Problem", its logs say Connect call failed ('127.0.0.1', 11434) , or n8n's Ollama credential fails with ECONNRE…
docker compose up -d , and one container stays down: Bind for 0.0.0.0:5432 failed: port is already allocated Then npm run dev adds its own version:…
A team often runs Java, frontend, Python, .NET, and containers at the same time. Instead of keeping a separate private registry for each stack, mana…
After a power outage took out half my containers and I didn't notice for hours, I decided I needed proper uptime monitoring. Here's how I got it for…
Running Unity 6000.x Headless Builds in a Linux Container: A Field Report (Including Licensing Workarounds) Status: REVISED 2026-10-10 — every techn…
In production Kubernetes clusters running microservices under high concurrency, few operational failures are more frustrating than sudden Exit Code…
A Friday job was green. The same commit failed on Monday. Did the base image move while the repository stayed still? You can lose an hour blaming th…