<story><title>11 years of hosting a SaaS</title><url>https://ghiculescu.substack.com/p/11-years-of-hosting-a-saas</url></story><parent_chain><item><author>speedgoose</author><text>I&amp;#x27;m looking at the ansible playbooks to setup my favourite beefy baremetal Hetzner server (128GB ram, Ryzen 9 5950X 16-Core, 450Gb fast NVME SSD, 3.5TB x2 NVME SSDs,  155€&amp;#x2F;month):&lt;p&gt;- Install Debian 11 while booted in rescue mode.&lt;p&gt;- Setup the root file system encryption using cryptsetup and dropbear (to enter the key during the boot through SSH). Involves chroot and some fun commands.&lt;p&gt;- Setup ZFS encrypted mirror filesystem for the two additional SSDs.&lt;p&gt;- OpenSSH hardening and Teleport installation.&lt;p&gt;- Kubernetes installation (K3S)&lt;p&gt;- Connecting kubernetes to my Argo CD instance or an existing Kubernetes cluster.&lt;p&gt;And then through GitOps:&lt;p&gt;- Installation of openebs-zfspv&lt;p&gt;- Installation of kube-prometheus-stack helm chart&lt;p&gt;- Installation of (many) postgresql instances and other craps&lt;p&gt;I have been playing with Linux servers for 20 years and I find this fun and rewarding. But I do understand people saying that baremetal Hetzner is not for everyone. Especially if you start to have requirements such as &amp;quot;data must be encrypted at rest&amp;quot;.</text></item><item><author>Radim</author><text>It may be a generational thing, a matter of familiarity with computing and computers. For someone who&amp;#x27;s lived through the 80s, &amp;quot;handrolling postgres&amp;quot; doesn&amp;#x27;t sound nearly as scary as you imagine.&lt;p&gt;I expect the cost&amp;#x2F;benefit analysis of &amp;quot;handrolling postgres on a beefy Hetzner server&amp;quot; vs &amp;quot;navigating the menus and options of AWS services&amp;quot; would be different for different teams.</text></item><item><author>rozenmd</author><text>&amp;gt; Use managed services for as long as possible&lt;p&gt;Big agree here.&lt;p&gt;Yes, you can save stupid money by handrolling postgres on an extremely beefy Hetzner server, or you can pay someone else and keep building your product: &lt;a href=&quot;https:&amp;#x2F;&amp;#x2F;onlineornot.com&amp;#x2F;self-hosting-vs-managed-services-deciding-how-host-your-database#benefits-of-managed-services&quot; rel=&quot;nofollow noreferrer&quot;&gt;https:&amp;#x2F;&amp;#x2F;onlineornot.com&amp;#x2F;self-hosting-vs-managed-services-dec...&lt;/a&gt;&lt;p&gt;This isn&amp;#x27;t to say, &amp;quot;don&amp;#x27;t bother learning how to do it yourself&amp;quot;, but more &amp;quot;learn to pick your battles&amp;quot;.</text></item></parent_chain><comment><author>maccard</author><text>Our terraform config for RDS is about 50 lines of configuration. We get a much smaller instance for our money, but ultimately figuring out all of what you posted isn&amp;#x27;t a good use of my time (yet).</text></comment>
<story><title>11 years of hosting a SaaS</title><url>https://ghiculescu.substack.com/p/11-years-of-hosting-a-saas</url></story><parent_chain><item><author>speedgoose</author><text>I&amp;#x27;m looking at the ansible playbooks to setup my favourite beefy baremetal Hetzner server (128GB ram, Ryzen 9 5950X 16-Core, 450Gb fast NVME SSD, 3.5TB x2 NVME SSDs,  155€&amp;#x2F;month):&lt;p&gt;- Install Debian 11 while booted in rescue mode.&lt;p&gt;- Setup the root file system encryption using cryptsetup and dropbear (to enter the key during the boot through SSH). Involves chroot and some fun commands.&lt;p&gt;- Setup ZFS encrypted mirror filesystem for the two additional SSDs.&lt;p&gt;- OpenSSH hardening and Teleport installation.&lt;p&gt;- Kubernetes installation (K3S)&lt;p&gt;- Connecting kubernetes to my Argo CD instance or an existing Kubernetes cluster.&lt;p&gt;And then through GitOps:&lt;p&gt;- Installation of openebs-zfspv&lt;p&gt;- Installation of kube-prometheus-stack helm chart&lt;p&gt;- Installation of (many) postgresql instances and other craps&lt;p&gt;I have been playing with Linux servers for 20 years and I find this fun and rewarding. But I do understand people saying that baremetal Hetzner is not for everyone. Especially if you start to have requirements such as &amp;quot;data must be encrypted at rest&amp;quot;.</text></item><item><author>Radim</author><text>It may be a generational thing, a matter of familiarity with computing and computers. For someone who&amp;#x27;s lived through the 80s, &amp;quot;handrolling postgres&amp;quot; doesn&amp;#x27;t sound nearly as scary as you imagine.&lt;p&gt;I expect the cost&amp;#x2F;benefit analysis of &amp;quot;handrolling postgres on a beefy Hetzner server&amp;quot; vs &amp;quot;navigating the menus and options of AWS services&amp;quot; would be different for different teams.</text></item><item><author>rozenmd</author><text>&amp;gt; Use managed services for as long as possible&lt;p&gt;Big agree here.&lt;p&gt;Yes, you can save stupid money by handrolling postgres on an extremely beefy Hetzner server, or you can pay someone else and keep building your product: &lt;a href=&quot;https:&amp;#x2F;&amp;#x2F;onlineornot.com&amp;#x2F;self-hosting-vs-managed-services-deciding-how-host-your-database#benefits-of-managed-services&quot; rel=&quot;nofollow noreferrer&quot;&gt;https:&amp;#x2F;&amp;#x2F;onlineornot.com&amp;#x2F;self-hosting-vs-managed-services-dec...&lt;/a&gt;&lt;p&gt;This isn&amp;#x27;t to say, &amp;quot;don&amp;#x27;t bother learning how to do it yourself&amp;quot;, but more &amp;quot;learn to pick your battles&amp;quot;.</text></item></parent_chain><comment><author>gog</author><text>If you skip Kubernetes the setup is not that complicated.</text></comment>