Tag: devops

OPA & Rego: Policy as Code Beyond Kubernetes

OPA and Rego aren't just Kubernetes gatekeepers. Block :latest tags in CI, enforce Terraform resource tags, and filter HTTP APIs.

Convoy: Self-Hosted Webhook Delivery That Doesn't Drop Events

Convoy is a self-hosted webhook gateway with retries, dead-letter queues, HMAC signing, and fan-out. Deploy it with Docker Compose in minutes.

Forgejo Actions: Self-Hosted GitHub-Style CI Without GitHub

Run GitHub Actions-compatible CI on your own Forgejo server with act_runner. Same YAML, your hardware, zero GitHub dependency.

Skopeo: Container Image Surgery Without a Daemon

Skopeo lets you copy, inspect, and sync container images between any registry without Docker. No daemon, no bloat, just clean image ops.

Beszel: Server Monitoring Without the Prometheus Tax

Beszel gives you Prometheus-style multi-host monitoring via a single hub container and tiny Go agents, no Grafana, no exporters, no yak shaving.

Crossplane vs Terraform for Home Lab

Crossplane vs Terraform and OpenTofu for home lab infra: GitOps-native Kubernetes CRDs versus battle-tested HCL, which one actually fits your k3s cluster?

OpenTofu in 2026: Where the Terraform Fork Stands

Two years after HashiCorp's BUSL switch and IBM's acquisition, OpenTofu is the mature open-source Terraform fork. Here's the honest state of play.

Sigstore + Gitsign: Signed Commits Without GPG Pain

Keyless signed git commits with Sigstore and Gitsign, no GPG key rot, no passphrase prompts. OIDC-backed ephemeral certs that just work.

Dragonfly: P2P Container Image Distribution at Scale

Dragonfly turns your container registry into a P2P swarm. Stop hammering one registry with 200 nodes pulling 4GB GPU images at once.

Renovate vs Dependabot: Self-Hosted Dependency Bots

Renovate vs Dependabot for self-hosted teams: config depth, ecosystem coverage, self-host paths, and which bot wins for Forgejo/GitLab shops.

Gitea Actions vs Woodpecker CI

Gitea Actions vs Woodpecker CI: two solid self-hosted CI options, one clear winner for your setup. Compare syntax, runners, footprint, and secrets handling.

ClickHouse for Self-Hosted Logs

ClickHouse can store TB of logs on one node, query in seconds, and outscale Loki and Elasticsearch in raw cost. Here's how to wire it up with Vector and Grafana.