EasyRunner Mid-June 2026 Update
Progress update since the May post: encrypted control-plane backup and restore, stronger Next.js self-hosting, smoother secret access, audit logs, app secret sync, and more.
Progress update since the May post: encrypted control-plane backup and restore, stronger Next.js self-hosting, smoother secret access, audit logs, app secret sync, and more.
Progress update since the April post: a private WireGuard mesh VPN with SSH lockdown, a unified doctor diagnostics surface, a new er server status, clearer compose labels and more.
Progress update covering everything new since Dec 2025. Deploy from registries, app secrets, first-run setup and more.
An experiment deploying OpenClaw to a Hetzner server managed by EasyRunner.
Progress update for Nov 2025. Intrusion prevention, DNS auto setup and more.
A slightly opinionated guide to turning a small Hetzner VPS into a clean base host for self-hosted apps. In this first part we will create the server, point a domain at it, install Podman and Caddy, and get a test app online over HTTPS.
In Part 1 we built the base host: Ubuntu, Podman, Caddy, and a domain serving traffic over HTTPS. In this part we will automate deployments so a merge to main pushes your latest code onto the server and restarts the app.
Every aspect of EasyRunner is designed with security in mind. While it's impossible for anybody to guarantee of being 100% secure, making security a first class design requirement goes a long way to significantly reducing the risk. A web host server has multiple vectors that needs to be secured. Here's how networking of a host server get's configured with network security in mind.