*Node metrics:* Currently we're container-only (docker stats/logs), so yes - we'd miss noisy neighbors or node-level memory pressure. Prometheus integration is on the roadmap to correlate container events with node/cluster metrics. Right now we catch the obvious cases: "this container OOMKilled at its 512MB limit."

*Permissions:* Funny story - I built this while working with OpenClaw (an AI assistant framework). OpenClaw has broad system access by design, but I wanted to explore: what if we made a micro-agent with the minimum permissions needed?

So OnCallMate offers two modes: 1. *Direct socket* (if you trust it / testing): bind /var/run/docker.sock 2. *docker-socket-proxy* (production): read-only layer, no exec/restart/POST

The proxy approach: - Agent connects via TCP, never touches the socket directly - Whitelist: containers, logs, stats, inspect (GET only) - Blacklist: exec, restart, swarm, secrets - Even if AI hallucinates "docker restart nginx", it physically can't

All tool calls are logged for audit trails.

You're right that we should emphasize this more in the README. Principle: treat AI agents like untrusted input.

Have you seen other patterns for safely exposing Docker APIs to automation?

What it does: - Single YAML config for all service links (Git-based, version-controlled) - Real-time HTTP health checks (no more clicking 404s) - Multi-environment support (prod/staging/dev) - Smart filtering and search - Self-hosted, Docker-ready

Key differentiator: It's NOT a service catalog or monitoring tool. It's just a clean dashboard for links you already have, with health checks to catch stale URLs.

Built with React + TypeScript, works on both amd64 and arm64 (Apple Silicon Macs).

Would love your feedback! What features would make this more useful for your team?

GitHub: https://github.com/ismailperim/directo

Comments URL: https://news.ycombinator.com/item?id=47261970

Points: 1

# Comments: 0

OnCallMate is an autonomous AI agent that: - Monitors your Docker containers (proactive scheduler) - Detects anomalies (crashes, OOM, restarts) - Autonomously investigates using OpenAI function calling - Performs RCA and suggests fixes

Example workflow: User: "any issues?" → AI calls docker_list, docker_inspect (4x), docker_stats (3x), docker_logs → Returns: " CRITICAL nginx - OOMKilled. Memory hit 512MB limit. Recommend: docker update --memory=1g nginx"

Security-first design: - not SaaS/self-hosted - Docker socket proxy (read-only by default, no direct socket exposure) - Admin-only access (Telegram ID allowlist)

AI provider options: - OpenAI/Claude API (you choose what to send) - OpenRouter free tier (cost-effective) - Bring your own model (extensible architecture)

Built in 3 days using: - OpenAI function calling (multi-turn tool loops) - Universal tool architecture (Docker now, K8s and cloud providers later) - TypeScript + Dockerode + Telegram (Slack etc. later)

Open source (MIT), runs entirely in your network.

GitHub: https://github.com/ismailperim/oncallmate

What features would make this more useful for you?

Comments URL: https://news.ycombinator.com/item?id=47223689

Points: 1

# Comments: 2

  Why I made it:  
  - I wanted a simple way to track service disruptions across providers in one place  
  - Official status pages are useful but fragmented  
  - I needed quick, actionable notifications  

  What Upti does:  
  - Scrapes provider status/incident pages  
  - Sends outage/incident alerts  
  - Keeps the experience lightweight and fast  

  I’d love feedback on:  
  - Which providers/services I should prioritize next  
  - Alert quality (too noisy vs too late)  
  - What would make this genuinely useful for SRE/DevOps workflows  

  Happy to share implementation details if useful.

Comments URL: https://news.ycombinator.com/item?id=47113886

Points: 2

# Comments: 0

I'm a DevOps engineer with 15+ years of experience, and I got tired of manually tracking SSL certificate expirations across dozens of domains — both my own and my clients'. Missed renewals causing downtime is a pain nobody needs.

So I built CertWarden — a simple iOS app that monitors your SSL/TLS certificates and alerts you before they expire. The free tier covers up to 5 certificates, and Pro unlocks unlimited tracking.

Tech stack: • Native iOS (Swift) • Backend running on Cloudflare Workers • Freemium model (5 certs free, Pro for more)

What's next: • Web portal/dashboard • Webhook & notification integrations (Slack, Discord, etc.) • Bug fixes based on early user feedback

I'd love to hear your thoughts, feedback, and feature requests. Happy to answer any questions!

Comments URL: https://news.ycombinator.com/item?id=47060129

Points: 2

# Comments: 0