renk

no profile record

comments

2 years agodiscuss

Flexibility sure is one of Traefik's strengths and the CLI arguments seem to be a point of convergence for the more seasoned people on their forums, so that's what I made out to be the happy path. That being said, I think you are spot on that its operation requires awareness of too much nuance and quirks, making it brittle in the long run. I don't get that feeling using Caddy, for example. Also, the "transpilation" problem between everyone's config snippets truly can be a timesink.

2 years agodiscuss

Similar: https://git.deuxfleurs.fr/Deuxfleurs/tricot

2 years agodiscuss

Yes. If you don't need all of the service discovery and auto-scaling shenanigans (or are willing to script it yourself), you can gleefully skip Traefik, Docker Swarm, Kubernetes etc. and just use Caddy! It can really do most things and it does them well.

2 years agodiscuss

The documentation split is unfortunate and the GUI really just a status page. The other points are a strength. A pattern that works well: Put all Traefik config in your Docker container definitions, as command line flags and labels, plus the dynamic config provided as a volume. That gives you all the flexibility and only one or two places to look for the config (e.g. a Docker compose file and the dynamic config file)

2 years agodiscuss

Glad you finally made the switch.

2 years agodiscuss

Good to know.

2 years agodiscuss

If you know what you're doing, XMPP is as secure and more reliable/efficient than Matrix. Really snappy in comparison. Other messengers build on it (Kik for example but also in enterprises). If you're working in security, chances are you're still on XMPP somewhere. That being said, the protocol with its extensions is a bit of a monstrosity, and that also shows in the codebases of available servers. It's no wonder, since XMPP does many things similar to SMTP (federated, based on DNS etc.). I would love if there was a modern, all in one XMPP server written in Go or Rust that includes all the protocol features in a sensible, opinionated package that is straightforward to deploy.. Until then, you'll find me fixing my Prosody instance..

2 years agodiscuss

Indeed. Moral depravedness is supposedly modeled by law. There is an uncanny overlap of scammers and normal economic activity though. That needs to change.

2 years agodiscuss

That was the moment I started browsing „freebsd desktop“ forum posts…

2 years agodiscuss

Is that you? yt/@gertop6402 Just guessing.. anywho, your nick signals SEO knowledge and reasons to hide.

2 years agodiscuss

Their IPs and emails might tell a different story and this could also be a threat. But to what end?

2 years agodiscuss

Since you are othering the parties concerned, mind sharing more info on the attacker?

2 years agodiscuss

Well, for now the payload delivery relies on things like x86, glibc.. still enough.

2 years agodiscuss

https://github.com/angristan/openvpn-install or if you want to be free from your distro's OpenSSL version: https://github.com/ix-ai/openvpn (recommended, just rebuild the container if it becomes outdated)

2 years agodiscuss

That performance regression could also be a way to identify compromised systems.

2 years agodiscuss

Maybe we need to up our game then. That could very well be mergekit and clever prompting. Their comment history bends in the direction of content engineering and will get less discernible the more accounts are doing it.