Inspired by uv's use of rkyv, snapconfig compiles JSON/YAML/TOML/INI/env files to a binary cache, then memory-maps them for zero-copy reads. Cold loads are slower than Python's json module, but cached loads are 10-1000x faster. Benchmark results are available on github repo.

Perfect for Celery workers, serverless functions, AI workflows, or any setup where multiple processes read the same config.

Comments URL: https://news.ycombinator.com/item?id=46500053

Points: 2

# Comments: 0

Free and seamless setup!

You can poke me on my website vikashbajaj.com

Remote: Yes (US/EU timezone)

Willing to relocate: No

Technologies: Python, Golang, React, DevOps, Kubernetes, Security

Resume/CV: https://vikashbajaj.com/resume.pdf

Email: contact+hn@vikashbajaj.com

-----------------------------------------

Details:

- 11+ years full-stack development, DevOps, and security experience with a Masters in Computer Science from the US.

- Built a cross border Neo-bank (fintech) and a global e-com platform in the recent years.

- Looking for full-time senior IC or leadership roles. Comfortable owning end-to-end product development and building teams from scratch.

- I self-host 15+ apps on bare-metal/VPS using docker cluster (password management, VPN, AI orchestration, analytics, web apps etc.).

- Extensive experience with AWS, Kubernetes, Docker, Terraform, Ansible, Jenkins, CI/CD.

What does this mean in context of downloadable desktop apps?

Since it’s open source and based on GitHub workspaces, it’s free and works very smoothly.

Recently I gave Catnip a try and it works very smoothly. It works on web via GitHub workspaces and also has mobile app. https://github.com/wandb/catnip

How is this different?

> After bringing features of Supermaven to Cursor Tab, we now recommend any existing VS Code users to migrate to Cursor.

Supermaven was acquired by Cursor and sunset after 1 year.

That plus the ability to provide customized solutions that stitch together data extraction and business logics such as reconciliations for vendor payments or sales.

I think both these reasons are what's keeping all the OCR based companies going.

My only advice would be to figure out more USPs before native models eat your lunch. Like Nanonets has its own native OCR model.

Congrats on the launch.

I am already seeing this trend in the recent releases of the native models (such as Opus 4.5, Gemini 3, and especially Gemini 3 flash).

It's only going to get better from here.

Another thing to note is, there are over 5 startups right now in YC portfolio doing the same thing and going after a similar/overlapping target market if I remember correctly.

- Hetzner firewall (because ufw doesn't work well with docker) to only allow public access to 443.

- Self-hosted OpenVPN to access all private ports. I also self-host an additional Wireguard instance as a backup VPN.

- Cloudflare Access to protect `*.coolifydomain.com` by default. This would have helped protect the OP's Umami setup since only the OP can access the Umami dashboard. Bypass rules can be created in Cloudflare Access to allow access to other systems that need access using IP or domain.

- Cloudflare Access rules to only allow access to internal admin path such as /wp-admin/ through my VPN IP (or via email OTP to specified email ids).

- Traefik labels on docker-compose files in Coolify to add basic auth to internal services which can't be behind Cloudflare Access such as self-hosted Prefect. This would have also added a login screen before an attacker would see Umami's app.

- I host frontends only on Vercel or Cloudflare workers and host the backend API on the Coolify server. Both of these are confirmed to never have been affected, due to decoupling of application routing.

- Finally a bash cron script running on server every 5 minutes that monitors the resources and sends me an alert via Pushover when the usages are above the defined thresholds. We need monitoring and alert as well, security measures alone are not enough.

Even with all these steps, there will always be edge cases. That's the caveat of self-hosting but at the same time it's very liberating.

Bait and switch once the adoption happens has become way too common in the industry.