What should your agent operate?

Operate a minimal NetBird Agent Network demo on Vultr or DigitalOcean with a keyless, policy-gated LLM endpoint and a network-isolated agent running headless Claude Code.

Operate a NetBird Agent Network demo on DigitalOcean Kubernetes with a keyless, policy-gated LLM endpoint. Its two-pod application pairs a NetBird client in netstack/SOCKS5 mode with a network-isolated agent running headless Claude Code.

Operate a NetBird Agent Network demo on Vultr Kubernetes Engine with a keyless, policy-gated LLM endpoint. Its two-pod application pairs a NetBird client in netstack/SOCKS5 mode with a network-isolated agent running headless Claude Code.

Operate a production Apache Airflow server with Postgres, backups, authenticated TLS, and GitHub-based DAG delivery.

Operate a private Transmission server on one DigitalOcean droplet through an SSH tunnel. Sync completed downloads to a local directory, verify the copy, and delete the droplet.

Three-node AutoMQ with object storage, SASL_SSL, SCRAM and ACLs on Vultr, AWS or Google Cloud. OCI storage probes passed; VM allocation failed.

Operate a private replicated ClickHouse cluster with Keeper, Metabase, PostgreSQL, WireGuard, and dbt. Shared compute supports multiple cloud providers with R2 or S3 state.

Operate ClickStack on one cloud VM with ClickHouse, MongoDB, and the HyperDX OpenTelemetry collector and UI.

Operate a single-machine DBOS TypeScript durable-workflow service with private PostgreSQL, Cloudflare HTTPS, and R2 backups. Shared compute supports eight cloud providers.

Render, compare, and install a managed Ubuntu or macOS dotfiles profile in a local home directory.

Operate a single-host GitHub organization warehouse with ClickHouse, dbt, and Lightdash analytics.

Operate a single-node K3s server on one cloud VM, continuously reconciled from Git with Flux. Shared compute supports eight cloud providers.

Operate a two-node kubeadm Kubernetes cluster on DigitalOcean with Flux, DNS, TLS, and acceptance checks.

Operate self-hosted Langfuse v4 on six AWS or Vultr machines in one VPC, with a Neon storage tier for Postgres, Redis, three ClickHouse replicas with Keeper, and an application host behind Caddy and Cloudflare. Amazon S3 or Cloudflare R2 stores events, media, Neon layers and WAL, and backups with a restore-and-boot rehearsal.

Operate a 3-node MySQL 8.4 Group Replication cluster with automated Floating VIP failover, Cloudflare DNS, and continuous binary log point-in-time recovery to Cloudflare R2 on DigitalOcean.

Operate a 3-node MySQL 8.0 Group Replication cluster with a reserved-IP endpoint claimed by the primary, Cloudflare DNS, and continuous binary log point-in-time recovery with a daily verified restore to Cloudflare R2 on DigitalOcean.

Operate self-hosted n8n on one Vultr or AWS EC2 instance with an external task runner and Caddy TLS. A colocated Neon database stores its Postgres layers and WAL in Cloudflare R2 or Amazon S3.

Operate self-hosted Neon serverless Postgres on one loopback-only Vultr instance reached over an SSH tunnel. The storage broker, pageserver, safekeeper, and Postgres 17 compute node use Cloudflare R2 for layers and WAL.

Operate self-hosted Neon on five AWS machines with separate compute and pageserver roles, three safekeepers, native PostgreSQL TLS, and managed S3 storage.

Operate a self-hosted NetBird control plane on Vultr with Traefik, the combined netbird-server, the dashboard, and Authentik as its identity provider.

Operate a personal PaaS on one VPS with Docker application hosting, DNS, outgoing mail, TLS, and GitHub deployments.

Operate a 3-node PostgreSQL 17 failover cluster with Patroni, colocated etcd v3, HAProxy client routing, Cloudflare DNS, and pgBackRest continuous WAL backups to Cloudflare R2. Compute uses a cloud provider supported by the shared compute library.

Operate a 3-node PostgreSQL 17 failover cluster with Patroni, colocated etcd, quorum synchronous commit, HAProxy client routing on every node, Cloudflare DNS, and pgBackRest continuous WAL backups with a daily verified restore to Cloudflare R2. Compute uses a cloud provider supported by the shared compute library.

Operate a single-node PostHog product analytics suite on one cloud VM with PostgreSQL 17, ClickHouse with embedded Keeper, Redis 7.2, Kafka, Temporal, a Rust capture service, and Caddy.

Operate a private Rama distributed computing cluster with ZooKeeper, WireGuard, optional DNS, and mail.

Operate Redis 7.2 on one Vultr, DigitalOcean, or AWS EC2 instance, with loopback-only access through an SSH tunnel and append-only persistence. Store RDB backup sets in Cloudflare R2 or a deployment-owned S3 bucket, and verify them with a restore rehearsal.

Operate a single-node Restate durable execution service on one cloud VM with a TypeScript reference workflow.

Operate a single-node Rybbit analytics service pairing PostgreSQL for metadata with ClickHouse for columnar events, behind Caddy TLS.

Operate a single-node SigNoz observability stack on one cloud VM with ClickHouse, ClickHouse Keeper, a Postgres metastore, the SigNoz application, an OpenTelemetry collector, and Caddy.

Operate a production-oriented Temporal server with PostgreSQL, durable workflow verification, TLS, backups, and restart recovery.

Operate a single-node Umami web analytics service with PostgreSQL, Caddy TLS, and restore-verified backups to R2.

Operate Vaultwarden on a personal PaaS with email, off-server SQLite replication, and recovery checks.

Operate a remote development machine with managed SSH access and a declared development environment. Stop and start its power through the provider API on OCI or Vultr.

Operate a public WaveHouse analytics demo with ClickHouse and a live GitHub stats dashboard on Vultr.

Verified traps, API contract, and acceptance doctrine for single-node NetBird Agent Network deployments, distilled from a live adversarially reviewed build.

Verified traps and acceptance doctrine for NetBird Agent Network on DigitalOcean Kubernetes, distilled from a live DOKS build - platform-allocated subnets that are not the documented 10.244.0.0/16 default, DOCR's account-scoped adopt-or-create registries with registry-wide credentials, and the Ready-versus-gateway-reachable timing traps.

Verified traps and acceptance doctrine for NetBird Agent Network on Kubernetes, distilled from a live VKE build - the unprivileged netstack/SOCKS5 client the flags will not configure, the embedded proxy peer whose overlay address churns, and isolation probed from both sides of the listener.

AutoMQ traps verified on Vultr, AWS and Google Cloud, plus OCI storage probes and failed VM allocation. Covers SCRAM genesis, bucket ownership, conditional writes and targeted failover gates.

Verified configuration, S3 backups, restore rehearsals, grants, and replica-loss checks for three ClickHouse nodes with embedded Keeper. Covers Vultr firewalls and AWS WireGuard MTU failures, stale outage probes, rehearsal-table checks, and managed S3 cleanup.

Verified topology, the Langfuse v4 events_only write-mode contract (OTLP in, Observations API v2 out, events_full in ClickHouse), the Prisma P3005 trap a Neon-provisioned database springs, ClickHouse cluster and s3_plain backup traps, the restore-time pairing rule, and a rehearsed restore-and-boot for self-hosted Langfuse on six machines.

Verified n8n 2.x configuration, first-boot encryption keys, credential-decryption checks, and acceptance gates on Vultr and AWS. Covers Cloudflare authentication failures, backup-scope checks, repeated S3 encryption plans, and backups without sudo.

Verified Neon TLS, quorum recovery and guarded cleanup, with native Red/Blue runtime handoff and offline subprocess and cold-install traps.

Verified topology, compute-spec auth contract, Cloudflare R2 remote-storage traps, honestly measured single-node RPO, and rehearsed recovery doctrine for self-hosted Neon serverless Postgres on one machine.

Verified ten-container topology, ClickHouse Keeper and named-collections configuration, converge ordering, and a ~30-entry failure catalogue for self-hosted single-node PostHog.

Verified network exposure, redis-cli response checks, RDB backup sets, and restore rehearsals with AOF disabled for single-node Redis 7 on Docker Compose. Covers Vultr and AWS deployments, Cloudflare R2 and S3 backups, OpenTofu state failures, AMI login permissions, and storage cleanup.

Verified six-container topology, provider-independent converge seam, restore-proven ClickHouse backups, and a 30-entry failure catalogue for self-hosted single-node Rybbit analytics.