DEV Community: Upsun

Automated AI news summaries: Deploying an RSS Digest on Upsun 🤖

Flora Brandão — Fri, 12 Jun 2026 17:00:00 +0000

Manually monitoring industry RSS feeds and consolidating updates into actionable insights takes up valuable engineering time. Building a custom automation script fixes this, but managing the underlying cron infrastructure and API keys adds unnecessary overhead.

Here is how you can build a self-contained automation service on Upsun:

The problem:
Writing automation scripts is simple, but configuring reliable cron daemons, securing OpenAI credentials, and keeping the service running smoothly in production often requires separate infrastructure management.

The fix:
This tutorial builds a Node.js service using LangChain and OpenAI that automatically triggers via native Upsun cron tasks to parse feeds, extract key narratives, and structure summaries.

Why it matters:
You can define your application logic, dependencies, and execution schedules directly within your project configuration files. The platform handles the orchestration, giving you a secure, hands-off AI digest engine without external server stacks.

Ready to see the configuration files and implement your own automated workflow?

Check out the full technical write-up here 👉

Building a news digest with workers on Upsun - Upsun Developer

Build an AI news digest with a Node.js frontend and Python worker communicating through Redis.

developer.upsun.com

Why your AI Agent needs a sandbox, not a blank check 🛡️

Flora Brandão — Fri, 12 Jun 2026 14:00:00 +0000

Giving production API tokens to a hallucinating LLM is like giving a toddler a flamethrower and hoping for the best. We would never give a junior developer root access on day one. Yet, teams are handing over production access to models that are statistically guaranteed to hallucinate.

The problem:

Handing production tokens to LLMs creates massive reliability and security risks.
An agent does not need to be malicious to cause a production outage.
It just needs to mistake a resource limit or a service binding.The Fix - Move governance directly into your platform layer.
Use isolated, production perfect preview environments to create a secure loop.
Let agents test and validate their logic in a byte level clone of production before touching the live environment.

Why it matters:

It reduces the blast radius of innovation without slowing down your development speed.
It eliminates the chaos of vibe coding by enforcing deterministic governance.
Your AI becomes infrastructure literate while staying strictly governed inside a safe sandbox.

Secure your AI agents with zero-trust sandboxes | Upsun

Protect your cloud from AI hallucinations. Upsun provides isolated, production-perfect preview environments for safe agentic engineering and testing.

upsun.com

[Tutorial] Hosting OpenCode AI Agents on Upsun 🤖

Flora Brandão — Fri, 12 Jun 2026 10:54:40 +0000

Setting up and deploying an AI coding agent can feel like a complex puzzle. Juggling configuration files, persistent storage, LLM API keys, and remote MCP server integration usually takes too much time and effort.

Deploying an OpenCode AI coding agent on Upsun simplifies this entire process down to a single git push. Here is how it streamlines your development workflow:

Automates project setup and Upsun configuration
Manages OpenCode configurations seamlessly
Handles persistent storage and environment variables for your API keys
Integrates remote MCP servers without the usual headache

Check out the full technical write-up to see how to deploy your own agent:

How to Host OpenCode on Upsun - Upsun Developer

Deploy an OpenCode AI coding agent on Upsun with a single git push. This tutorial covers configuration, persistent storage, LLM API keys, and remote MCP server integration.

developer.upsun.com

Taming the hidden cost of AI Scrapers 🤖

Flora Brandão — Thu, 11 Jun 2026 11:09:37 +0000

AI scrapers are driving up your hosting costs and making real users wait while bots crawl every deep link and faceted listing. This creates millions of unnecessary URLs and puts immense pressure on your infrastructure.

You can take the pressure off your application by implementing a few technical fixes:

Use robots.txt to guide bot behavior
Implement cache normalization with sorted keys
Set sane application limits to protect resourcesManaging these bots is the new normal for developers.

Check out the full technical write-up to see how to implement these fixes and keep your hosting costs under control:

The (not so) hidden cost of AI scrapers - Upsun Developer

AI scrapers drive up your hosting cost while real users wait. Use robots.txt, cache normalization, and sane application limits to take the pressure off.

developer.upsun.com

[Event] Heading to Orchestration day? Let's connect! 🇫🇷

Flora Brandão — Wed, 10 Jun 2026 14:00:00 +0000

The Ibexa community in France is one of the most engaged in the martech space, and we are excited to be heading to Orchestration Day 2026 in Paris on June 17 as a silver sponsor.

We will be at Châteauform' 3 Mazarium for a full day of sessions, workshops, and conversations around the future of customer experience orchestration and AI-driven marketing.

If you are a developer, architect, or digital experience professional building on Ibexa DXP or working with martech platforms at scale, we would love to connect and swap notes. 🚀

Are you attending Orchestration Day 2026? We would love to catch up! ☕

ibexa.co

Securing the AI supply chain 🛡️

Flora Brandão — Wed, 10 Jun 2026 10:36:29 +0000

AI agents are reading code and dependencies at scale. This changes how we think about supply chain risk and the security of our builds.

Adding security checks during the build process is essential for modern development. Here is how you can use Snyk and Upsun to protect your workflow:

Implement Snyk to scan dependencies for vulnerabilities
Add automated scans directly to your build hook
Capture risks at build time before they reach production
Understand exactly what automated scanning can and cannot catch

Check out the full technical write-up to see how to implement these build time fixes:

Supply chain attacks in the AI era, and what to do about them - Upsun Developer

AI agents are reading code at scale, including your dependencies. Why supply chain risk just changed, plus a build-time fix to add on Upsun.

developer.upsun.com

Why blank sandboxes are failing your AI agents 🛠️

Flora Brandão — Tue, 09 Jun 2026 10:05:05 +0000

If you are tired of senior engineers wasting time on the operational glue of managing custom sandboxes, you are not alone. Asking an AI agent to optimize a database in an empty environment often leads to hallucinations because it lacks real world context.

Blank sandboxes work for isolated scripts but fail enterprise workflows.
Upsun provides byte level clones of apps and services for better validation.
Standardized isolation replaces the complexity tax of manual sandbox management.
Production like previews help humans trust and approve agent output faster.

Bridging the context gap is how we move from simple prompts to reliable autonomous agents.

Read it for more details:

Stateful AI sandboxes for reliable validation | Upsun

Move beyond simple code execution. Upsun provides stateful, production-like environments to validate AI agent workflows with real data and infrastructure context

upsun.com

The 8 stages of AI engineering maturity: a framework for teams ✍️

Flora Brandão — Tue, 09 Jun 2026 02:30:00 +0000

Most engineering teams have at least some AI in their workflow. The harder question is whether the whole org is moving together, or just a few fast movers pulling ahead while everyone else holds the line.

Our Chief Product and Technology Officer, Fabien Potencier, maps out 8 stages of AI engineering maturity, from the moment leadership hasn't taken a position yet, to agents running recurring tasks on shared infrastructure overnight.

The discomfort at each stage is intentional. It's what builds the foundation for the next one.

See where your team stands:

8 Stages of AI Engineering Maturity for Teams | Upsun

Most teams already use AI. The question is whether your org is moving together. A framework for taking your whole team from chaos to autonomous agents.

upsun.com

[Tutorial] Efficient RAG Pipelines with Qdrant on Upsun 🧠

Flora Brandão — Mon, 08 Jun 2026 14:27:13 +0000

Context stuffing is a massive drain on resources and increases your cost per query. It is a messy way to handle large datasets when you need fast and relevant answers.

Vector search with Qdrant offers a more technical and cost effective alternative. By building a proper retrieval pipeline, you can get better results without the overhead. Here is what this workflow covers:

Moving from context stuffing to vector search for 25x lower costs
Implementing chunking strategies that actually work for your data
Setting up embedding scripts and retrieval logic
Using a debug panel for local testing and deployment

Check out the full technical write-up to see how to deploy this pipeline on Upsun:

Building a RAG pipeline with Qdrant on Upsun - Upsun Developer

Replace context stuffing with vector search using Qdrant for 25x lower cost per query.

developer.upsun.com

Ending the "It works on my machine" era 🛠️

Flora Brandão — Fri, 05 Jun 2026 08:51:59 +0000

Debugging environment differences shouldn't take more time than writing your actual code. If you are still battling the repro gap between your laptop and production, your platform is not doing its job.

The manual grind of environment management is just adding to your technical debt. Here is how to fix it:

Use a single declarative manifest to define your entire stack
Treat every environment as an ephemeral and repeatable unit
Branch your infrastructure alongside your code for automatic parity
Clone production data byte for byte to catch failures before deployment

Eliminating drift means you get to spend your time on product development instead of infrastructure maintenance.

Check out the full technical breakdown here:

Eliminate the "repro gap" with environment parity | Upsun

Stop debugging infrastructure drift. Use a single configuration to ensure every environment is identical, from local dev to production, and ship with confidence

upsun.com

[Tutorial] Building a Secure LangChain Chatbot on Upsun 🤖

Flora Brandão — Thu, 04 Jun 2026 15:22:40 +0000

Chatbots are surprisingly easy to trick. Moving an LLM application past prototyping means wrestling with security issues like prompt injection, token cost overhead, and strict infrastructure constraints.

Here is how you can build and deploy a protected version on Upsun:

The problem: Simple context stuffing (loading documentation directly into the prompt) makes your LLM vulnerable to malicious user overrides and sudden token cost spikes.

The fix: This tutorial builds a Node.js app using LangChain and OpenAI, pairing it with immediate input validation, rate limiting, and output filtering to keep the model in its lane.

Why it matters: You get a secure, web-accessible chat interface with streaming responses that deploys directly to Upsun with a single push, stripping out the deployment complexity.

Ready to implement prompt injection defense and see the full code walkthrough?

Check out the full tutorial here 👉

Building a LangChain chatbot on Upsun - Upsun Developer

Build a documentation chatbot with Node.js, LangChain, and OpenAI, with prompt injection defense and streaming responses.

developer.upsun.com

Rate limiting Rails Apps without a reverse proxy 🛡️

Flora Brandão — Thu, 04 Jun 2026 09:18:34 +0000

When you cannot put Varnish in front of your application, the edge is no longer yours. You have to handle rate limiting from inside the app itself to protect your quality of service.

Rails 8 now simplifies this by shipping rate limiting features out of the box. Using rack-attack, you can manage traffic before the application even wakes up. Here is what you need to know about implementing this:

Handle rate limiting at the middleware layer
Configure your limits using plain Ruby
Decide where to store your counters for performance
Apply caps to both anonymous and authenticated traffic
Choose the specific layer that fits your unique constraints

Check out the full technical write-up to see how to implement these internal controls in your Rails environment.

Rate limiting Rails apps when you can't put Varnish in front - Upsun Developer

When the edge isn't yours, rate limit from inside the application. How rack-attack works, why limits are about quality of service, and what Rails 8 changed.

developer.upsun.com