[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f2r3gwfwp9m6sz":3,"$fanuq43nlrv5g":56},{"slug":4,"title":5,"body":6,"summary":7,"tags":8,"author":14,"cover_url":15,"published_at":16,"seo_title":17,"seo_description":18,"reading_minutes":19,"related":20},"hetzner-2026-price-round-decision-sheet","Hetzner tripled some new-instance prices: keep, rescale or move — a decision sheet for a small self-hosted stack","\u003Cp>On 15 June 2026 at 8 AM CEST, Hetzner put new prices on cloud and dedicated servers. They apply to \u003Cstrong>new orders and cloud rescales\u003C\u002Fstrong>. Servers already running keep the price they had. Hetzner's own changelog puts it plainly: existing servers are not affected \"as long as no rescaling is performed\". That one condition decides most of what follows.\u003C\u002Fp>\n\u003Cfigure data-post-media=\"6ada910ae6d7e5a76992c370\">\u003Cvideo src=\"https:\u002F\u002Fmedia.stufio.com\u002Fmedia\u002Fifcodes\u002Fmediagen\u002F6a\u002F6ada910be6d7e5a76992c376-0-58df7415.mp4\" autoplay muted loop playsinline preload=\"metadata\">\u003C\u002Fvideo>\u003C\u002Ffigure>\n\n\u003Cp>This is a sheet for engineers running a small stack of a few cloud servers. It covers what changed, why you should not casually rescale a box that is on the old price, where the Arm CAX line still fits, and how to price a move with \u003Ccode>hcloud\u003C\u002Fcode> before the bill makes the choice for you.\u003C\u002Fp>\n\n\u003Ch2>What changed, in numbers\u003C\u002Fh2>\n\n\u003Cp>heise online worked out the average increase on new orders by region from Hetzner's price table. The US was hit hardest at about 158 percent. Germany was about 99 percent and Singapore just under 78 percent. heise did not give an average for Finland.\u003C\u002Fp>\n\u003Cfigure data-post-media=\"6ada8ebde6d7e5a76992c1e3\">\u003Cimg src=\"https:\u002F\u002Fmedia.stufio.com\u002Fmedia\u002Fifcodes\u002Fmediagen\u002F6a\u002F6ada8ebde6d7e5a76992c1e8-0-e3bf07fb.png\" alt=\"Comparing old rates against new pricing structures.\" loading=\"lazy\">\u003Cfigcaption>Comparing old rates against new pricing structures.\u003C\u002Ffigcaption>\u003C\u002Ffigure>\n\n\u003Cfigure data-chart='{\"type\":\"hbar\",\"title\":\"Average new-order price increase by Hetzner region, June 2026\",\"unit\":\"%\",\"labels\":[\"USA\",\"Germany\",\"Singapore\"],\"series\":[{\"name\":\"Average increase\",\"values\":[158,99,78]}],\"note\":\"Singapore: just under 78 percent. No average reported for Finland.\",\"source\":{\"label\":\"heise online, Jun 2026\",\"url\":\"https:\u002F\u002Fheise.de\u002F-11333037\"}}'>\u003Cfigcaption>Average new-order price increase by region (source: heise online)\u003C\u002Ffigcaption>\u003C\u002Ffigure>\n\n\u003Cp>Averages hide a split, and the split is the useful part. In Hetzner's table (EUR per month, excluding VAT and IPv4), the shared cost-optimized lines went up by roughly a third. The dedicated-vCPU and CPX lines nearly tripled:\u003C\u002Fp>\n\n\u003Cul>\n\u003Cli>\u003Cstrong>CAX11\u003C\u002Fstrong> (Arm), DE\u002FFI: 4.49 to 5.99 (+33%)\u003C\u002Fli>\n\u003Cli>\u003Cstrong>CAX41\u003C\u002Fstrong> (Arm), DE\u002FFI: 31.49 to 40.99 (+30%)\u003C\u002Fli>\n\u003Cli>\u003Cstrong>CX23\u003C\u002Fstrong>, DE\u002FFI: 3.99 to 5.49 (+38%)\u003C\u002Fli>\n\u003Cli>\u003Cstrong>CX43\u003C\u002Fstrong>, DE\u002FFI: 11.99 to 15.99 (+33%)\u003C\u002Fli>\n\u003Cli>\u003Cstrong>CPX42\u003C\u002Fstrong>, DE\u002FFI: 25.49 to 69.49 (+173%)\u003C\u002Fli>\n\u003Cli>\u003Cstrong>CCX13\u003C\u002Fstrong>, DE\u002FFI: 15.99 to 42.99 (+169%)\u003C\u002Fli>\n\u003Cli>\u003Cstrong>CPX41\u003C\u002Fstrong>, USA: 38.99 to 120.49 (+209%, a bit over three times the old price)\u003C\u002Fli>\n\u003C\u002Ful>\n\n\u003Cfigure data-chart='{\"type\":\"bar\",\"title\":\"Monthly price before and after 15 June 2026, Germany and Finland\",\"unit\":\"EUR\",\"labels\":[\"CX23\",\"CAX11\",\"CX43\",\"CAX41\",\"CCX13\",\"CPX42\"],\"series\":[{\"name\":\"Old\",\"values\":[3.99,4.49,11.99,31.49,15.99,25.49]},{\"name\":\"New\",\"values\":[5.49,5.99,15.99,40.99,42.99,69.49]}],\"note\":\"Net, excluding VAT and IPv4.\",\"source\":{\"label\":\"Hetzner Docs, Jun 2026\",\"url\":\"https:\u002F\u002Fdocs.hetzner.com\u002Fgeneral\u002Finfrastructure-and-availability\u002Fprice-adjustment\u002F\"}}'>\u003Cfigcaption>Old vs new monthly price, DE\u002FFI (source: Hetzner Docs)\u003C\u002Ffigcaption>\u003C\u002Ffigure>\n\n\u003Cp>Hetzner says the cause is \"still extremely high procurement costs for new hardware\" (quoted by heise). The same cause drove the April round. According to heise, web hosting, managed and Exchange servers, IPs, storage and load balancers are not covered by the June change. Orders placed before 15 June but delivered after it keep the old prices. On dedicated servers Hetzner is also dropping individual hardware configurations, and heise reports lower setup fees at the higher prices.\u003C\u002Fp>\n\n\u003Ch2>Rule 1: a rescale reprices the box, in either direction\u003C\u002Fh2>\n\n\u003Cp>The old price stays on your server only while you leave its type alone. A rescale moves it to current pricing. That includes a downgrade, and this is the case that catches people. Take a CCX23 in Germany on the old price of 31.49. Downgrade it to a CCX13 and you pay the new CCX13 price of 42.99. Your bill goes up by 11.50 a month for a smaller server.\u003C\u002Fp>\n\u003Cfigure data-post-media=\"6ada8ebde6d7e5a76992c1ed\">\u003Cimg src=\"https:\u002F\u002Fmedia.stufio.com\u002Fmedia\u002Fifcodes\u002Fmediagen\u002F6a\u002F6ada8ebde6d7e5a76992c1f2-0-bd49f33b.png\" alt=\"Rescaling a server instance can trigger a change in billing rates.\" loading=\"lazy\">\u003Cfigcaption>Rescaling a server instance can trigger a change in billing rates.\u003C\u002Ffigcaption>\u003C\u002Ffigure>\n\n\u003Cp>Hetzner's price page also says that \"certain changes\" to servers on legacy pricing can switch them to current pricing, and it points to an FAQ for the full list. Rescaling is the only trigger documented on the pages we could read. Read that FAQ before you touch a grandfathered server in the Console.\u003C\u002Fp>\n\n\u003Cp>In the CLI, the command to be careful with is this one:\u003C\u002Fp>\n\n\u003Cpre class=\"code-block\" data-lang=\"bash\">\u003Ccode class=\"hljs language-bash\">\u003Cspan class=\"hljs-comment\"># This is a rescale. It moves the server to current pricing.\u003C\u002Fspan>\nhcloud server change-type --keep-disk my-server cx43\u003C\u002Fcode>\u003C\u002Fpre>\n\n\u003Cp>When an old-price box runs out of headroom, compare these options before you rescale:\u003C\u002Fp>\n\n\u003Cul>\n\u003Cli>\u003Cstrong>Add, don't grow.\u003C\u002Fstrong> Keep the old-price CCX13 at 15.99 and add a new CAX31 at 20.99. That comes to 36.98 a month. Rescaling the CCX13 to a CCX23 costs 85.99.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Offload state.\u003C\u002Fstrong> Volumes, Object Storage and load balancers are outside this round. Moving data off the root disk can buy time without a type change.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Don't rebuild just to tidy up.\u003C\u002Fstrong> A delete and recreate is a new order, so it gets the new price.\u003C\u002Fli>\n\u003C\u002Ful>\n\n\u003Cp>One limit: the old price is not a promise. The previous round, announced on 23 February and effective 1 April 2026, applied to existing services as well, according to heise. Budget for the next round reaching your old-price boxes too.\u003C\u002Fp>\n\n\u003Ch2>Rule 2: CAX still makes sense, with conditions\u003C\u002Fh2>\n\n\u003Cp>At about +30 to +33 percent, the Arm CAX line rose by the same share as the x86 CX line, and far less than CPX or CCX. In Germany and Finland a CAX41 (16 vCPU, 32 GB RAM, 320 GB NVMe on Hetzner's product page) now costs 40.99. A CPX42 (8 vCPU, 16 GB) costs 69.49. If your stack runs on arm64, CAX is still the cheapest way to get cores and memory at Hetzner.\u003C\u002Fp>\n\u003Cfigure data-post-media=\"6ada8ebde6d7e5a76992c1f7\">\u003Cimg src=\"https:\u002F\u002Fmedia.stufio.com\u002Fmedia\u002Fifcodes\u002Fmediagen\u002F6a\u002F6ada8ebde6d7e5a76992c1fc-0-c80b65cb.png\" alt=\"Arm-based architecture remains a cost-effective alternative for many workloads.\" loading=\"lazy\">\u003Cfigcaption>Arm-based architecture remains a cost-effective alternative for many workloads.\u003C\u002Ffigcaption>\u003C\u002Ffigure>\n\n\u003Cp>The conditions:\u003C\u002Fp>\n\n\u003Cul>\n\u003Cli>\u003Cstrong>Your images must have an arm64 build.\u003C\u002Fstrong> Build multi-arch images before you move anything:\u003C\u002Fli>\n\u003C\u002Ful>\n\n\u003Cpre class=\"code-block\" data-lang=\"bash\">\u003Ccode class=\"hljs language-bash\">docker buildx build --platform linux\u002Famd64,linux\u002Farm64 -t registry.example.com\u002Fapp:1.4.2 --push .\u003C\u002Fcode>\u003C\u002Fpre>\n\n\u003Cul>\n\u003Cli>\u003Cstrong>CAX is EU-only.\u003C\u002Fstrong> Hetzner lists it only for Germany and Finland. It is no answer for the US or Singapore price jump.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Check stock before you plan around it.\u003C\u002Fstrong> When we checked on 22 October 2026, the cost-optimized product page showed every CX and CAX plan as \"currently unavailable\". Check stock and location before a migration depends on it.\u003C\u002Fli>\n\u003C\u002Ful>\n\n\u003Cp>Hetzner's prices are listed without IPv4. The product page adds 0.50 for the IPv4 address, so a CAX41 shows as 41.49 there.\u003C\u002Fp>\n\n\u003Ch2>Rule 3: price the move before the bill does it for you\u003C\u002Fh2>\n\n\u003Cp>The API lists prices per server type and location. Note that these are \u003Cstrong>today's list prices\u003C\u002Fstrong>, not the legacy rate on your invoice. So the numbers below are what each server would cost if you ordered or rescaled it now. Compare them with your latest invoice to see how much the old price is saving you.\u003C\u002Fp>\n\n\u003Cp>First, check the field shape on your CLI version:\u003C\u002Fp>\n\n\u003Cpre class=\"code-block\" data-lang=\"bash\">\u003Ccode class=\"hljs language-bash\">hcloud server-type describe cax21 -o json | jq \u003Cspan class=\"hljs-string\">'.prices[0]'\u003C\u002Fspan>\u003C\u002Fcode>\u003C\u002Fpre>\n\n\u003Cp>Each entry has \u003Ccode>location\u003C\u002Fcode>, \u003Ccode>price_hourly\u003C\u002Fcode>, \u003Ccode>price_monthly\u003C\u002Fcode> (each with \u003Ccode>net\u003C\u002Fcode> and \u003Ccode>gross\u003C\u002Fcode>), \u003Ccode>included_traffic\u003C\u002Fcode> and \u003Ccode>price_per_tb_traffic\u003C\u002Fcode>.\u003C\u002Fp>\n\n\u003Cp>Your servers, with type and location:\u003C\u002Fp>\n\n\u003Cpre class=\"code-block\" data-lang=\"bash\">\u003Ccode class=\"hljs language-bash\">hcloud server list -o columns=name,\u003Cspan class=\"hljs-built_in\">type\u003C\u002Fspan>,location,status\u003C\u002Fcode>\u003C\u002Fpre>\n\n\u003Cp>What your fleet would cost at current list prices, per server and in total:\u003C\u002Fp>\n\n\u003Cpre class=\"code-block\" data-lang=\"bash\">\u003Ccode class=\"hljs language-bash\">hcloud server list -o json | jq -r \u003Cspan class=\"hljs-string\">'\n  .[]\n  | .datacenter.location.name as $loc\n  | [.name, .server_type.name, $loc,\n     (.server_type.prices[] | select(.location == $loc) | .price_monthly.net)]\n  | @tsv'\u003C\u002Fspan> \\\n  | awk -F\u003Cspan class=\"hljs-string\">'\\t'\u003C\u002Fspan> \u003Cspan class=\"hljs-string\">'{ printf "%-20s %-8s %-6s %8.2f\\n", $1, $2, $3, $4; s += $4 }\n               END { printf "%-36s %8.2f EUR\u002Fmonth net at list price\\n", "TOTAL", s }'\u003C\u002Fspan>\u003C\u002Fcode>\u003C\u002Fpre>\n\n\u003Cp>A price sheet of every type at every location, cheapest first:\u003C\u002Fp>\n\n\u003Cpre class=\"code-block\" data-lang=\"bash\">\u003Ccode class=\"hljs language-bash\">hcloud server-type list -o json | jq -r \u003Cspan class=\"hljs-string\">'\n  .[] | .name as $t | .architecture as $a\n  | .prices[] | [$t, $a, .location, .price_monthly.net] | @tsv'\u003C\u002Fspan> \\\n  | \u003Cspan class=\"hljs-built_in\">sort\u003C\u002Fspan> -t$\u003Cspan class=\"hljs-string\">'\\t'\u003C\u002Fspan> -k4,4n | column -t\u003C\u002Fcode>\u003C\u002Fpre>\n\n\u003Cp>Specs and availability for the shortlist:\u003C\u002Fp>\n\n\u003Cpre class=\"code-block\" data-lang=\"bash\">\u003Ccode class=\"hljs language-bash\">hcloud server-type list -o columns=name,architecture,cores,memory,disk,location_available\u003C\u002Fcode>\u003C\u002Fpre>\n\n\u003Cp>With those three outputs side by side, the decision for each server is arithmetic:\u003C\u002Fp>\n\n\u003Col>\n\u003Cli>\u003Cstrong>Keep\u003C\u002Fstrong> it if it still fits. Its old price is likely below anything you can order today.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Add a new small box\u003C\u002Fstrong> next to it rather than rescale, if the sum is below the new price of the larger type.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Move\u003C\u002Fstrong> it, either to CAX in the EU or to another provider, only when the list-price total from the script is above what you would pay elsewhere. Count the migration hours, the egress and the time with both setups running at once.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Plan the move now\u003C\u002Fstrong> if the box runs in the US or on CPX\u002FCCX and is likely to need a rescale soon. Those lines have the biggest gap between old and new prices.\u003C\u002Fli>\n\u003C\u002Fol>\n\n\u003Cp>Run the fleet script once a month. If Hetzner changes prices again, you will see it in a diff on the output instead of on an invoice.\u003C\u002Fp>\n\n\u003Ch2>Sources\u003C\u002Fh2>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fheise.de\u002F-11333037\">heise online: Hetzner adjusts prices again, up to 200 percent (15 June 2026)\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fheise.de\u002F-11185981\">heise online: Hetzner raises prices from 1 April (23 February 2026)\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fdocs.hetzner.com\u002Fgeneral\u002Finfrastructure-and-availability\u002Fprice-adjustment\u002F\">Hetzner Docs: Price adjustment, 15 June 2026 (price tables)\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fdocs.hetzner.cloud\u002Fwhats-new\">Hetzner Cloud: What's New, \"Update on our pricing\" (28 May 2026)\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwww.hetzner.com\u002Fcloud\u002Fcost-optimized\u002F\">Hetzner: Cost-Optimized cloud servers (CX and CAX specs)\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fhetznercloud\u002Fcli\u002Fblob\u002Fmain\u002Fdocs\u002Freference\u002Fmanual\u002Fhcloud_server_change-type.md\">hcloud CLI reference: server change-type\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fhetznercloud\u002Fcli\u002Fblob\u002Fmain\u002Fdocs\u002Freference\u002Fmanual\u002Fhcloud_server_list.md\">hcloud CLI reference: server list\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fhetznercloud\u002Fcli\u002Fblob\u002Fmain\u002Fdocs\u002Freference\u002Fmanual\u002Fhcloud_server-type_list.md\">hcloud CLI reference: server-type list\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fhetznercloud\u002Fhcloud-go\u002Fblob\u002Fmain\u002Fhcloud\u002Fschema\u002Fpricing.go\">hcloud-go: pricing schema (price fields)\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n","Hetzner's June 2026 prices hit new orders and rescales; old servers keep their rate. Why not to rescale a grandfathered box, where Arm CAX still fits, and hcloud commands to price a move.",[9,10,11,12,13],"hetzner","self-hosting","cloud-costs","hcloud","ai-assisted","if.codes","https:\u002F\u002Fmedia.stufio.com\u002Fmedia\u002Fifcodes\u002Fmediagen\u002F6a\u002F6ada8ebbe6d7e5a76992c1dd-0-f450e23a.png","2026-10-23T00:43:13.645Z","Hetzner 2026 price round: keep, rescale or move","Hetzner raised new-order and rescale prices in June 2026. A decision sheet with real prices, the rescale trap, Arm CAX and hcloud commands to price a move.",6,[21,33,45],{"slug":22,"title":23,"type":24,"summary":25,"tags":26,"author":14,"cover_url":31,"published_at":32,"updated_at":32},"gpt-4o-gpt-4-1-shutdown-migrate-to-gpt-6-luna","GPT-4o and GPT-4.1 leave the API on January 14: moving to gpt-6-luna without breaking your function calls","blog","OpenAI shuts down four GPT-4o and GPT-4.1 snapshots, and their fine-tunes, on January 14, 2027. Its named replacement, gpt-6-luna, is a reasoning model with one function-calling catch in Chat Completions. Here are two migration paths, a replay test and a token-bill check.",[27,28,29,30,13],"openai","migration","llm-api","function-calling","https:\u002F\u002Fmedia.stufio.com\u002Fmedia\u002Fifcodes\u002Fmediagen\u002F6a\u002F6ad6f0886ce38bf97b746887-0-cad17c1e.png","2026-10-20T05:42:12.599Z",{"slug":34,"title":35,"type":24,"summary":36,"tags":37,"author":14,"cover_url":42,"published_at":43,"updated_at":44},"swapping-docker-desktop-for-apple-container","Swapping Docker Desktop for Apple's container: one VM per container on your Mac, what runs unchanged from Docker Hub, and where you still need Docker","Apple's container CLI has been stable since 1.0 in June and is at 1.5.0. A hands-on swap: install, build, run Postgres from Docker Hub, reach it by name, and the gaps (no Compose, slower cold starts, memory that is not handed back) that decide whether Docker stays.",[38,39,40,41,13],"docker","macos","containers","devtools","https:\u002F\u002Fmedia.stufio.com\u002Fmedia\u002Fifcodes\u002Fmediagen\u002F6a\u002F6ad59fc06ce38bf97b743ea2-0-d7ac665e.png","2026-10-19T06:50:15.817Z","2026-10-19T06:50:15.818Z",{"slug":46,"title":47,"type":24,"summary":48,"tags":49,"author":14,"cover_url":54,"published_at":55,"updated_at":55},"github-agentic-autofix-codeql-backlog","GitHub's agentic autofix is GA: batching 25 CodeQL alerts into one draft PR, what it bills, and how to review the fixes","Agentic autofix for code-scanning alerts went GA on October 15: Copilot explores the repo, fixes, re-runs CodeQL and opens a draft PR for up to 25 alerts at once. Who can use it, how to turn it on, where the cost lands, how to pick a first batch with gh, and a review checklist.",[50,51,52,53,13],"github","codeql","security","code-review","https:\u002F\u002Fmedia.stufio.com\u002Fmedia\u002Fifcodes\u002Fmediagen\u002F6a\u002F6ad48184af8e63ad10e8aaa1-0-4c6cfc5e.png","2026-10-19T00:20:22.102Z",[57,60,62,65,67,78,89,100,110,122,132,142,154,165,177,188,199,208,218,231,245,255,266,277,288,296,307,318,327,337,347,356,365],{"slug":4,"title":5,"type":24,"summary":7,"tags":58,"author":14,"cover_url":15,"published_at":16,"reading_minutes":19,"updated_at":59},[9,10,11,12,13],"2026-10-23T00:43:13.646Z",{"slug":22,"title":23,"type":24,"summary":25,"tags":61,"author":14,"cover_url":31,"published_at":32,"reading_minutes":19,"updated_at":32},[27,28,29,30,13],{"slug":34,"title":35,"type":24,"summary":36,"tags":63,"author":14,"cover_url":42,"published_at":43,"reading_minutes":64,"updated_at":44},[38,39,40,41,13],5,{"slug":46,"title":47,"type":24,"summary":48,"tags":66,"author":14,"cover_url":54,"published_at":55,"reading_minutes":64,"updated_at":55},[50,51,52,53,13],{"slug":68,"title":69,"type":24,"summary":70,"tags":71,"author":14,"cover_url":75,"published_at":76,"reading_minutes":77,"updated_at":76},"claude-code-permission-rules-yes-to-all","'Yes to all' is a permission policy: writing Claude Code allow, ask and deny rules that hold up against compound commands and wildcards","Every 'Yes, and don't ask again' writes a rule. Turn that habit into a reviewed .claude\u002Fsettings.json: deny beats ask beats allow, why Bash(git * main) also allows git push, how compound commands are split, and when dontAsk or the sandbox beats bypassPermissions.",[72,73,52,74,13],"claude-code","permissions","developer-tools","https:\u002F\u002Fmedia.stufio.com\u002Fmedia\u002Fifcodes\u002Fmediagen\u002F6a\u002F6ad2fd1602d67a73cf1eaa23-0-68817e09.png","2026-10-17T23:06:09.746Z",7,{"slug":79,"title":80,"type":24,"summary":81,"tags":82,"author":14,"cover_url":87,"published_at":88,"reading_minutes":19,"updated_at":88},"go-1-27-http1-connection-reuse-body-draining","710 ms to 150 ms for 100 requests: what Go 1.27's HTTP\u002F1 connection reuse fixes, and the body-draining habit to keep for older clients","Go 1.27 drains unread HTTP\u002F1 response bodies for you, so a closed-but-unread body no longer kills connection reuse. A runnable test that counts reused connections, the two patterns that broke reuse, and a capped drain helper for Go 1.26 and older.",[83,84,85,86,13],"go","http","performance","networking","https:\u002F\u002Fmedia.stufio.com\u002Fmedia\u002Fifcodes\u002Fmediagen\u002F6a\u002F6ad1d8da69fb9bde4cc895fb-0-e539bbf2.png","2026-10-16T23:32:12.783Z",{"slug":90,"title":91,"type":24,"summary":92,"tags":93,"author":14,"cover_url":97,"published_at":98,"reading_minutes":19,"updated_at":99},"claude-code-subagent-prompt-cache-ttl","Claude Code subagents get a 5-minute cache even on a subscription: when to set it to 1h, and how to check","On a subscription your main Claude Code conversation gets a one-hour prompt cache, but subagents, workflows and compaction stay at five minutes. The settings that change it, the precedence order, when the pricier 1h write pays off, and how to verify the TTL you got.",[72,94,95,96,13],"prompt-caching","subagents","llm-costs","https:\u002F\u002Fmedia.stufio.com\u002Fmedia\u002Fifcodes\u002Fmediagen\u002F6a\u002F6ad0968473d443ad8fa7adbe-0-f2f3fe8c.png","2026-10-15T22:21:15.624Z","2026-10-15T22:21:15.625Z",{"slug":101,"title":102,"type":24,"summary":103,"tags":104,"author":14,"cover_url":107,"published_at":108,"reading_minutes":64,"updated_at":109},"postgres-slow-vps-benchmark-the-disk-first","Postgres feels slow on your VPS? Benchmark the disk before you touch postgresql.conf","ClickHouse measured the same Postgres box at 16,030 TPS on local NVMe and 1,734 TPS on a baseline gp3 volume, with most of the gap spent waiting on storage. A 15-minute fio and pg_test_fsync check tells you which side of that table your VPS is on.",[105,10,85,106,13],"postgres","databases","https:\u002F\u002Fmedia.stufio.com\u002Fmedia\u002Fifcodes\u002Fmediagen\u002F6a\u002F6acdb5d473d443ad8fa7555c-0-dd05a138.png","2026-10-13T05:44:15.759Z","2026-10-13T05:44:15.76Z",{"slug":111,"title":112,"type":24,"summary":113,"tags":114,"author":14,"cover_url":118,"published_at":119,"reading_minutes":120,"updated_at":121},"quoted-tilde-in-path-check","A quoted ~ in your PATH runs whatever sits in .\u002F~\u002F: a one-line check for dotfiles, servers and CI images","export PATH=\"$PATH:~\u002F.local\u002Fbin\" never expands the tilde. Interactive bash hides it, but sh, zsh, env and Python search a folder literally named ~ under the current directory. The check, the fix, and where to grep.",[115,116,52,117,13],"linux","shell","devops","https:\u002F\u002Fmedia.stufio.com\u002Fmedia\u002Fifcodes\u002Fmediagen\u002F6a\u002F6acd3f0073d443ad8fa743bf-0-c8db0f5d.png","2026-10-12T23:53:16.705Z",4,"2026-10-12T23:53:16.706Z",{"slug":123,"title":124,"type":24,"summary":125,"tags":126,"author":14,"cover_url":129,"published_at":130,"reading_minutes":19,"updated_at":131},"docker-published-ports-bypass-ufw-vps-hardening","Docker publishes ports straight past UFW: hardening a fresh VPS without the firewall rule that does nothing","ufw deny 8080 does not stop a Docker container published on 8080. Docker's own docs explain why. A 15-minute fresh-VPS walkthrough: key-only SSH, ufw, then the two fixes that actually close a container port, and a scan from outside to prove it.",[38,52,127,128,13],"vps","firewall","https:\u002F\u002Fmedia.stufio.com\u002Fmedia\u002Fifcodes\u002Fmediagen\u002F6a\u002F6acb12dddbaf8c2bc523d0bb-0-21ee3023.png","2026-10-11T05:42:15.363Z","2026-10-11T05:42:15.364Z",{"slug":133,"title":134,"type":24,"summary":135,"tags":136,"author":14,"cover_url":139,"published_at":140,"reading_minutes":19,"updated_at":141},"deno-deploy-shutdown-exit-guide","Deno Deploy shuts down in six months: moving a small app to Cloudflare Workers, self-hosted Deno in Docker, or Node","Deno is joining Cloudflare: Deploy has six months left and the runtime gets a year of fixes. Write your app as one fetch handler and you can run it on Workers, in a Deno container or on Node. Code for all three, plus what does not carry over.",[137,138,28,38,13],"deno","cloudflare-workers","https:\u002F\u002Fmedia.stufio.com\u002Fmedia\u002Fifcodes\u002Fmediagen\u002F6a\u002F6ac9c181dbaf8c2bc523a0fd-0-caa268de.png","2026-10-10T05:47:19.665Z","2026-10-10T05:47:19.666Z",{"slug":143,"title":144,"type":24,"summary":145,"tags":146,"author":14,"cover_url":151,"published_at":152,"reading_minutes":77,"updated_at":153},"durable-object-alarm-loop-guards","The Durable Object alarm that cost $10,000: guarding setAlarm() loops with backoff, idempotency and a kill switch","Durable Object alarms are at-least-once, retried, and usually rescheduled from inside the handler, which makes a billing loop easy to write. Four guards in TypeScript, a kill switch, and a Vitest test that proves the loop stops.",[147,148,149,150,13],"cloudflare","durable-objects","typescript","cost-control","https:\u002F\u002Fmedia.stufio.com\u002Fmedia\u002Fifcodes\u002Fmediagen\u002F6a\u002F6ac8709b392a85804f209fb3-0-9143ed0c.png","2026-10-09T06:09:10.127Z","2026-10-09T06:09:10.128Z",{"slug":155,"title":156,"type":24,"summary":157,"tags":158,"author":14,"cover_url":163,"published_at":164,"reading_minutes":19,"updated_at":164},"cctld-hijack-counterfeit-certs-caa-accounturi-ct-watch","Counterfeit certs via hijacked ccTLDs: CAA with accounturi and a CT watch for your domains in 15 minutes","Attackers took over the .gh, .sl and .as registries and got 12 valid certificates for Google domains. CAA would not have stopped the hijack. Here is the CAA record that limits the damage afterwards, and a CT watch script that tells you within a day.",[159,160,161,162,13],"tls","caa","certificate-transparency","dns","https:\u002F\u002Fmedia.stufio.com\u002Fmedia\u002Fifcodes\u002Fmediagen\u002F6a\u002F6ac75337392a85804f207d25-0-12f538ac.png","2026-10-08T22:47:12.408Z",{"slug":166,"title":167,"type":24,"summary":168,"tags":169,"author":14,"cover_url":174,"published_at":175,"reading_minutes":19,"updated_at":176},"embeddinggemma-2-qdrant-truncation-recall","EmbeddingGemma 2 in Qdrant: one 740M model for text, images and audio, and what truncating 768 to 128 dims costs your recall","Google's open multimodal embedder runs locally and truncates from 768 to 128 dims. Index one Qdrant collection at three sizes from a single encode pass, then measure recall@10 on your own queries instead of trusting a benchmark.",[170,171,172,173,13],"embeddings","qdrant","rag","open-models","https:\u002F\u002Fmedia.stufio.com\u002Fmedia\u002Fifcodes\u002Fmediagen\u002F6a\u002F6ac5cceedf0d655df505306e-0-d17d0fef.png","2026-10-07T07:21:20.071Z","2026-10-07T07:21:20.072Z",{"slug":178,"title":179,"type":24,"summary":180,"tags":181,"author":14,"cover_url":185,"published_at":186,"reading_minutes":64,"updated_at":187},"cloudflare-access-strict-service-token-auth-migration","Strict service token auth in Cloudflare Access: moving your scripts and CI over before it bites","Cloudflare Access now has a strict mode for service tokens: 401\u002F403 instead of a 302 to the login page, only Service Auth policies count, and no CF_Authorization cookie. New orgs get it forced on from 5 October. A 15-minute check and switch for existing orgs.",[147,182,183,184,13],"zero-trust","ci-cd","authentication","https:\u002F\u002Fmedia.stufio.com\u002Fmedia\u002Fifcodes\u002Fmediagen\u002F6a\u002F6ac4a8860956594c947bd197-0-f768b25b.png","2026-10-06T08:30:13.154Z","2026-10-06T08:30:13.155Z",{"slug":189,"title":190,"type":24,"summary":191,"tags":192,"author":14,"cover_url":196,"published_at":197,"reading_minutes":19,"updated_at":198},"cloudflare-traces-trace-rules-debug-one-customer","Why was that request blocked? Tracing one customer at 100% with Cloudflare Traces and Trace Rules","Cloudflare Traces (open beta) shows a request's path through WAF rules, transforms, cache, Workers and origin as one trace. A recipe: low baseline sampling, a 100% Trace Rule for one host or debug header, traceparent to your origin, OTLP export to your own collector, and what December pricing means.",[147,193,194,195,13],"observability","opentelemetry","tracing","https:\u002F\u002Fmedia.stufio.com\u002Fmedia\u002Fifcodes\u002Fmediagen\u002F6a\u002F6ac338052cb6b40613ac2b7c-0-2294d114.png","2026-10-05T06:22:19.055Z","2026-10-05T06:22:19.056Z",{"slug":200,"title":201,"type":24,"summary":202,"tags":203,"author":14,"cover_url":206,"published_at":207,"reading_minutes":64,"updated_at":207},"copyescape-cve-2026-17106-patch-docker-cp","CopyEscape (CVE-2026-17106): patch docker cp, and stop copying out of running containers","A race in docker cp lets a malicious container write files anywhere the copying process can write on the host. That matters for CI runners and AI-agent sandboxes that copy results out. Check your versions, patch, and change copy-out jobs to stop the container first.",[38,52,204,205,13],"cve","ci","https:\u002F\u002Fmedia.stufio.com\u002Fmedia\u002Fifcodes\u002Fmediagen\u002F6a\u002F6ac218ebfd770659725abe68-0-eee7c8f7.png","2026-10-04T23:51:14.689Z",{"slug":209,"title":210,"type":24,"summary":211,"tags":212,"author":14,"cover_url":215,"published_at":216,"reading_minutes":120,"updated_at":217},"protected-quick-tunnels-vs-tailscale-funnel","Share localhost with three named people: Cloudflare's Protected Quick Tunnels vs Tailscale Funnel","cloudflared 2026.9.3 adds --allowed-mail: your quick tunnel now sits behind an email one-time PIN, checked against an allow-list on your own machine, free and without a Cloudflare account. The commands, what it protects, and when Tailscale Serve or Funnel is the better fit.",[147,213,214,52,13],"tailscale","tunnels","https:\u002F\u002Fmedia.stufio.com\u002Fmedia\u002Fifcodes\u002Fmediagen\u002F6a\u002F6ac218d8fd770659725abe3a-0-40f8cb2e.png","2026-10-04T23:19:14.764Z","2026-10-04T23:19:14.765Z",{"slug":219,"title":220,"type":24,"summary":221,"tags":222,"author":14,"cover_url":228,"published_at":229,"reading_minutes":19,"updated_at":230},"si-domains-super-intelligence-data",".si after 'Super Intelligence': did one UN speech move a ccTLD?","Trump renamed AI 'super intelligence' at the UN on 22 September 2026 and Slovenia's .si went from about 190,000 names to almost 276,000 in a month. Registry numbers, prices, and 87 WHOIS checks: the obvious AI names were gone years ago; the compounds went in days.",[223,224,225,226,227,13],"domains","si","tld","data","ai","https:\u002F\u002Fmedia.stufio.com\u002Fmedia\u002Fifcodes\u002Fmediagen\u002F6a\u002F6abaaee53e21d5cbd14d442d-0-d6243bc5.png","2026-10-04T22:36:14.598Z","2026-10-04T22:36:14.599Z",{"slug":232,"title":233,"type":24,"summary":234,"tags":235,"author":14,"cover_url":241,"published_at":242,"reading_minutes":243,"updated_at":244},"palantir-agent-stack-python","Steal Palantir's agent stack: typed tools, one LLM gateway, swappable models","An X thread boils Palantir's AIP docs down to four agent patterns. We check each one against the docs, then build them in one stdlib-only Python file: typed business-object tools, a gateway that masks PII, caches and retries, a model set in config, and schedule\u002Fevent\u002FAPI triggers.",[236,237,238,239,240,13],"ai-agents","llm","python","architecture","palantir","https:\u002F\u002Fmedia.stufio.com\u002Fmedia\u002Fifcodes\u002Fmediagen\u002F6a\u002F6abd88f9c951ea7137fa3872-0-48eb7eee.png","2026-10-01T23:05:10.531Z",10,"2026-10-01T23:05:10.532Z",{"slug":246,"title":247,"type":24,"summary":248,"tags":249,"author":14,"cover_url":251,"published_at":252,"reading_minutes":253,"updated_at":254},"claude-code-effort-levels","Effort levels in Claude Code: when max effort pays off and when it just burns tokens","Anthropic's effort deep dive (Terminal-Bench 3.0 plus three builds) shows higher effort mostly buys verification and edge-case testing, not smarter code. A rule of thumb per task type, the commands to set effort, and a script to measure cost vs pass rate on your own repo.",[72,250,237,74,13],"ai-coding","https:\u002F\u002Fmedia.stufio.com\u002Fmedia\u002Fifcodes\u002Fmediagen\u002F6a\u002F6abd88edc951ea7137fa3804-0-2716005a.png","2026-10-01T22:32:14.139Z",9,"2026-10-02T04:44:58.001Z",{"slug":256,"title":257,"type":24,"summary":258,"tags":259,"author":14,"cover_url":262,"published_at":263,"reading_minutes":264,"updated_at":265},"agentic-inbox-cloudflare-setup","Self-host an AI email agent on Cloudflare Workers: agentic-inbox set up and costed","Cloudflare's open-source agentic-inbox runs a full email client on Workers, with one SQLite Durable Object per mailbox and a Kimi K2.5 agent that drafts replies. Covers the post-deploy steps people miss (Access, sending, routing, mailbox first) and the cost.",[147,260,236,261,10,13],"workers","email","https:\u002F\u002Fmedia.stufio.com\u002Fmedia\u002Fifcodes\u002Fmediagen\u002F6a\u002F6abd88dac951ea7137fa378b-0-5b0ec96d.png","2026-10-01T08:17:18.646Z",8,"2026-10-05T05:56:11.919Z",{"slug":267,"title":268,"type":24,"summary":269,"tags":270,"author":14,"cover_url":274,"published_at":275,"reading_minutes":264,"updated_at":276},"audit-ai-agent-public-traces","Nearly a million leaked links: auditing what your AI agents leave on the public web","OpenAI's agent swarm left almost a million public shortener URLs holding credentials. Here's a tested shell + gitleaks audit to find the shortlinks, pastes and webhooks your own agents created, scan them for secrets and close the channels.",[52,271,272,273,237,13],"agents","secrets","gitleaks","https:\u002F\u002Fmedia.stufio.com\u002Fmedia\u002Fifcodes\u002Fmediagen\u002F6a\u002F6abaad873e21d5cbd14d4397-0-0f4f51f7.png","2026-10-01T07:43:19.642Z","2026-10-01T08:44:43.041Z",{"slug":278,"title":279,"type":24,"summary":280,"tags":281,"author":14,"cover_url":285,"published_at":286,"reading_minutes":264,"updated_at":287},"mikrotrick-check-patch-mikrotik","MikroTrick: check and patch your MikroTik in 15 minutes","Two chained RouterOS bugs give anyone who can reach SSH full admin, no password needed, and attacks started before the patch. Find exposed SSH, check the version, grep for the published IoCs, patch and move management behind WireGuard.",[52,282,283,284,10,13],"mikrotik","routeros","ssh","https:\u002F\u002Fmedia.stufio.com\u002Fmedia\u002Fifcodes\u002Fmediagen\u002F6a\u002F6abcd9c0838b650cb96b3d10-0-6cd107e0.png","2026-10-01T07:02:15.03Z","2026-10-01T08:44:41.391Z",{"slug":289,"title":290,"type":24,"summary":291,"tags":292,"author":14,"cover_url":293,"published_at":294,"reading_minutes":264,"updated_at":295},"agent-sandbox-dns-egress-lockdown","Your agent sandbox leaks through DNS: lock down egress in 15 minutes","An OpenAI model escaped its sandbox by tunnelling questions through DNS. Here is a tested Docker Compose setup for coding agents: a DNS allowlist, a logging egress proxy and a kill switch that actually fires.",[52,38,271,162,10,13],"https:\u002F\u002Fmedia.stufio.com\u002Fmedia\u002Fifcodes\u002Fmediagen\u002F6a\u002F6abaaca13e21d5cbd14d4306-0-cb93fe1b.png","2026-10-01T03:00:15.943Z","2026-10-01T08:44:43.165Z",{"slug":297,"title":298,"type":24,"summary":299,"tags":300,"author":14,"cover_url":304,"published_at":305,"reading_minutes":77,"updated_at":306},"who-blocks-ai-crawlers-robots-txt","Who blocks AI crawlers? robots.txt vs the network edge, with numbers","I scanned robots.txt on the top 300 sites: 33 of 138 block GPTBot, 14 block training but allow AI search. What each AI bot directive controls, why robots.txt is only a request, and a copy-paste policy plus nginx rule for small SaaS sites.",[227,301,302,147,303,13],"robots-txt","seo","saas","https:\u002F\u002Fmedia.stufio.com\u002Fmedia\u002Fifcodes\u002Fmediagen\u002F6a\u002F6abcd9c1838b650cb96b3d1b-0-11f94198.png","2026-09-30T21:00:20.673Z","2026-10-01T20:47:34.092Z",{"slug":308,"title":309,"type":24,"summary":310,"tags":311,"author":14,"cover_url":315,"published_at":316,"reading_minutes":120,"updated_at":317},"bullet-time-with-first-last-frame-video","Bullet time with first\u002Flast-frame video: orbiting a frozen moment from three stills","A freeze-frame camera orbit built from generated stills: one action shot, two camera-move angles, two first\u002Flast-frame clips between them, stitched and ping-ponged. The pipeline, the seams, and where the model re-imagines the water.",[227,312,313,314],"comfyui","video-generation","flowdsl","https:\u002F\u002Fmedia.stufio.com\u002Fmedia\u002Fifcodes\u002Fmediagen\u002F6a\u002F6abae46c45201648bfd477a7-0-6f4d036e.png","2026-09-28T22:42:41Z","2026-09-28T22:42:41.6Z",{"slug":319,"title":320,"type":24,"summary":321,"tags":322,"author":14,"cover_url":324,"published_at":325,"reading_minutes":77,"updated_at":326},"an-ai-media-pipeline-that-shows-its-work","An AI media pipeline that shows its work: ComfyUI presets, FlowDSL routing and the misses","How the images on my sites are generated: four ComfyUI presets behind one Go module, job rows as state, FlowDSL flows for routing, per-post media in the admin — and the bugs and model misses I hit shipping it. This post's own images were made the same way.",[227,314,312,323],"image-generation","https:\u002F\u002Fmedia.stufio.com\u002Fmedia\u002Fifcodes\u002Fmediagen\u002F6a\u002F6aba8ba317ceba3543925be4-0-2f6b8a5c.png","2026-09-28T15:57:50Z","2026-10-01T20:47:34.327Z",{"slug":328,"title":329,"type":24,"summary":330,"tags":331,"author":14,"cover_url":333,"published_at":334,"reading_minutes":335,"updated_at":336},"openai-embeddings-python-mongodb","Transforming Text into Vectors: OpenAI Embeddings in Python","Learn how to generate text embeddings with the OpenAI API in Python to power semantic search, recommendations, and more. Includes practical examples with MongoDB integration and cost analysis.",[27,227,238,332],"mongodb","https:\u002F\u002Fmedia.stufio.com\u002Fmedia\u002Fifcodes\u002Fmediagen\u002F6a\u002F6abad0fa45201648bfd46c2d-0-2e60b732.png","2024-11-23T00:00:00Z",3,"2026-09-28T22:31:01.385Z",{"slug":338,"title":339,"type":24,"summary":340,"tags":341,"author":14,"cover_url":343,"published_at":344,"reading_minutes":345,"updated_at":346},"check-pricing-availability-ing-domains","Last Chance to Grab Short .ING Domains: The Extended List Part II","Welcome back to the second part of our exciting exploration into the .ING domain zone! This time, I've expanded our horizons to bring you an even larger selection of .ING domain names. List of over 24,000 domain names inside.",[223,342],"business","https:\u002F\u002Fmedia.stufio.com\u002Fmedia\u002Fifcodes\u002Fmediagen\u002F6a\u002F6abad0fa45201648bfd46c38-0-c55f4c8d.png","2023-12-14T00:00:00Z",1,"2026-09-28T22:31:01.453Z",{"slug":348,"title":349,"type":24,"summary":350,"tags":351,"author":14,"cover_url":352,"published_at":353,"reading_minutes":354,"updated_at":355},"impressive-ing-domains","Unveiling the Impressive .ING Domains","Discover the vast potential of the new .ING domain zone in my latest blog post! I've used AI and a Python script to unearth a treasure trove of available domain names. From budget-friendly picks to exclusive premium domains, there's something for every ambition. Plus, a special list of unique, lesser-known domains awaits.",[223,342],"https:\u002F\u002Fmedia.stufio.com\u002Fmedia\u002Fifcodes\u002Fmediagen\u002F6a\u002F6abad0fa45201648bfd46c43-0-03be24b7.png","2023-12-11T00:00:00Z",2,"2026-09-28T22:31:01.527Z",{"slug":357,"title":358,"type":24,"summary":359,"tags":360,"author":14,"cover_url":362,"published_at":363,"reading_minutes":335,"updated_at":364},"secured-web-server-in-5-minutes","Fortify Web Server Security in 5 Minutes with Tailscale","Tailscale revolutionizes secure networking with its user-friendly approach, effortlessly connecting devices across diverse networks.",[128,213,361],"webserver","https:\u002F\u002Fmedia.stufio.com\u002Fmedia\u002Fifcodes\u002Fmediagen\u002F6a\u002F6abad0fa45201648bfd46c4e-0-eae6f62d.png","2023-11-03T00:00:00Z","2026-09-28T22:31:01.597Z",{"slug":366,"title":367,"type":24,"summary":368,"tags":369,"author":14,"cover_url":372,"published_at":373,"reading_minutes":19,"updated_at":374},"lets-encrypt-free-ssl","How to Secure Your Website with Free SSL Certificates for a Lifetime","Let’s Encrypt certificates have revolutionized internet security by providing free, automated, and widely trusted SSL\u002FTLS certificates. The non-profit Certificate Authority (CA) has significantly contributed to a more secure web environment by simplifying the process of securing websites with HTTPS.",[370,371,361],"ssl","https","https:\u002F\u002Fmedia.stufio.com\u002Fmedia\u002Fifcodes\u002Fmediagen\u002F6a\u002F6abad0fa45201648bfd46c59-0-bf2a9a0a.png","2023-11-01T00:00:00Z","2026-09-28T22:39:13.555Z"]