Category
Tools we use daily: setups, tricks and battle-tested automations.
After fourteen months testing AI-integrated DevOps tools across several teams, the stack that stays is small: Claude Code, Cursor, and Aider for code; PagerDuty AIOps, Datadog Bits AI, and Grafana Assistant for alert triage; and OpenTofu with OPA for infrastructure generation bounded by policy rules.
Dokku lleva más de una década como el PaaS mínimo de código abierto preferido por quien quiere la experiencia Heroku sin la factura. En 2025, con Heroku renaciendo bajo Salesforce y con Kubernetes dominando, sigue ocupando un nicho sorprendentemente saludable.
Fly.io has spent years selling the idea that deploying an application across several regions should be almost as simple as pushing an image and writing one config line. After several real projects on the platform, here is an honest read on what it delivers, what is missing, and who it is worth choosing over more classic options.
Coolify delivers a Vercel- or Heroku-like experience on your own servers: automatic HTTPS, managed databases, and branch previews without per-build or bandwidth fees. After several months using it on production VPS, here is where it shines, where it still has rough edges, and which teams will genuinely benefit from it.
A home lab is a self-hosted services lab, at home or on a VPS, where you practice real system administration: reverse proxy, centralized authentication, monitoring with Prometheus and Grafana, and backups verified with Restic. A second-hand mini PC with 16 GB of RAM is enough for thirty or forty containers, and what you learn transfers directly to professional work.
Two years running AI-assisted code review in a real team leave a clear balance: AI catches mechanical oversights well and writes useful pull-request summaries, but it struggles with architectural judgment and produces many false positives on subtle bugs. The single decision that helped the most was not blocking merges on its automated comments.
Vector is the Datadog observability agent, written in Rust with its own transformation language VRL. Typically 30-100 MB memory, handling logs, metrics, and traces from dozens of sources. The right choice when pipelines are too complex for Fluent Bit and a modern alternative to Logstash.
Docker Scout continuously scans container images against CVE databases including NVD and ecosystem-specific advisories, and recommends base-image changes to remove vulnerabilities. Built into Docker Desktop and Hub, it competes with Trivy, Grype and Snyk. Best fit for teams already running end-to-end on the Docker ecosystem.
Grafana Beyla is an eBPF agent that automatically instruments existing applications without touching their code: it observes kernel syscalls and generates OpenTelemetry traces and RED metrics for services written in Go, Java, Python, Node, and Rust. It gives broad, immediate coverage, but it does not replace the manual SDK for business metrics and internal logic.
Ansible and Pulumi solve different problems and are not competitors: Ansible manages configuration inside a server (packages, users, services); Pulumi defines, with real code in TypeScript, Python, Go or .NET, which cloud infrastructure exists (VPCs, instances, databases). Combining them, with Pulumi's dynamic inventory feeding Ansible, is the most productive pattern for automating a stack that includes servers in the cloud.
Fluent Bit is the CNCF's lightweight log collector: a ~1.5 MB C binary that rarely tops 30 MB of memory in production. It beats Promtail, Vector, and Filebeat when several destinations or resource-constrained nodes are in play, thanks to a pipeline of inputs, parsers, filters, and outputs that stays easy to reason about and debug.
Semaphore is the open-source Ansible web UI that solves the four scaling problems: audit trails, role-based permissions, execution history, and centralised secrets. It consumes ~500 MB versus AWX at ~4 GB. The pragmatic choice for mid-size teams that have outgrown running playbooks from a shared terminal.
Traefik is the default reverse proxy for Docker Swarm: automatic service discovery via labels, Let's Encrypt certificates with DNS challenge, and reusable middleware chains. This guide covers the overlay network, static and dynamic configuration, certificate storage for multi-manager setups, and the production decisions that actually matter.
Cuando una aplicación habla con dos o más proveedores de LLM, antes o después aparece un proxy entre medias. LiteLLM propone uno concreto, y esta es la lectura honesta de qué gana y qué cuesta.
Zed is the editor built by Atom's creators, rebuilt in Rust with a native GPU-rendering UI framework and no Electron. It delivers ~8 ms latency, real-time collaboration with integrated voice and shared cursors, and an open license (GPL v3 + Apache 2.0). A serious VS Code alternative for pairs and small teams.
Cursor is a VS Code fork that puts artificial intelligence at the core of the editor instead of bolting it on as a plugin. It offers inline completion, a chat that understands full project context, and Composer, multi-file editing from a short brief. The Pro plan costs $20 a month and it competes directly with GitHub Copilot.
Retool and Appsmith cut internal tool development time from weeks to days. Retool leads the commercial SaaS market with polished components and enterprise permissions; Appsmith brings open source self-hosting at low or zero cost. Low-code works for dashboards, forms, and simple workflows, and breaks on complex logic or highly custom interfaces.
Flux CD and ArgoCD are the two CNCF-graduated GitOps tools for deploying to Kubernetes with Git as the source of truth. ArgoCD offers a centralised visual UI that manages several clusters from one instance, while Flux is a set of Kubernetes-native controllers with built-in image automation. Neither choice is wrong: it depends on your team and use case.
Podman is the Docker alternative with no central daemon and no root privileges required. Each container runs as a direct child process of the launching user, with rootless support since version 1.0 in 2019. If a container escapes, it does not gain host root. When Podman makes sense and what real differences to expect.
Trivy and Grype are the two leading open-source tools for container image scanning in CI/CD pipelines. Both detect CVEs in OS packages and language dependencies with less than 5% coverage difference. Trivy stands out for IaC scanning; Grype natively integrates the SBOM workflow with Syft.
The Grafana stack combines three open source projects: Loki for logs, Tempo for traces, and Mimir for metrics. All three keep data in object storage (S3/GCS) with a minimal index instead of indexing everything like Elasticsearch, which cuts cost sharply at high volume and lets you correlate metric, log, and trace from a single Grafana panel.
nerdctl is a Docker-compatible CLI that talks directly to containerd, the standard Kubernetes runtime since dockershim was removed in 2022. It adds rootless support by default, encrypted images with ocicrypt, lazy-pulling, and native CNI. It fits best where containerd already runs, though Docker Engine still wins on advanced Compose and Swarm.
Stable Diffusion XL marks a leap in open-licence image generation quality. What changes versus SD 1.5/2.1, the hardware requirements, and when to pick SDXL over Midjourney or DALL-E 3 for your workflow.
Cómo Figma pasó de ser una herramienta de diseño a convertirse en el lenguaje común entre diseño, producto e ingeniería.
