Writing
Notes on running your own infrastructure.
What we learned building Anyport, and the parts of Kubernetes we think you should not have to learn. RSS
What an internal developer platform is, and when not to build one
Every company past a certain size ends up building one by accident. What the term actually covers, and the honest test for whether yours should exist.
Why every deploy should produce an immutable image tag
Deploying :latest works until the day two machines disagree about what latest is. What a content-addressed tag buys you, and what it costs.
Encryption at rest is a storage guarantee, not a privacy one
What “we encrypt your secrets” actually protects you from, what it does not, and why the distinction is worth insisting on when you evaluate anyone.
Coolify, Pangolin, and the parts you end up assembling
Two excellent tools solve two halves of this problem. Putting them together leaves you owning the seam, and the seam is where the work is.
Coming back from the cloud: what teams get wrong on the way
The hardware maths usually works. The part that surprises people is that the developer experience was the product they were buying, and it does not come back with the servers.
Multi-cluster deployment, without inheriting multi-cluster complexity
Teams end up with several clusters for good reasons and then discover the tooling assumed one. What actually gets harder, and what does not have to.
What “roll back” should mean
Re-running a pipeline against an older commit is not a rollback. The difference is a rebuild you cannot afford and a configuration change no revert covers.
A cluster with no public IP, and what still works
We took a two-node cluster with nothing but RFC1918 addresses and published a site on it over HTTPS. Here is each step, what it required, and the parts that are genuinely a trade.
Bring your own cloud, and the assumption underneath it
BYOC promises a managed experience on infrastructure you own. Most implementations quietly require your infrastructure to be reachable from theirs, which rules out a lot of real infrastructure.
Why your database sits in Pending, and what a StorageClass is
A stateful workload that never starts is usually waiting for a disk nothing has offered. What is actually happening, and the one command to run before you add a database.
Introducing Anyport: push to deploy on clusters you already own
A deploy platform for the Kubernetes clusters you already run: builds, rollbacks, domains and HTTPS from one console, with compute that is never metered.
How pausing idle projects reduces cloud spend
Shared environments create queues; per-developer environments run all night. Isolated projects you can pause when you're done are the middle path.
Serve public traffic from a private server, without opening a port
Keep every inbound port closed and still run a real site on a real domain. How an outbound-only agent and a managed gateway make that work.
From a GitHub repo to a running app
What the path from code to a live URL looks like when there's no pipeline to wire up and no YAML to write.