ehou · HackerTrans

4 tahun yang laludiscuss

+1 for more restrictions on DNS API tokens. Ways to mitigate the riscs:

    - Separate account per domain .. which is a lot of work, see acceptation process in other comments

    - Use a NS record for _acme-challenge.domain.tld when having the DNS hosted elsewhere and point this to the Hetzner DNS servers

ehou

4 tahun yang laludiscuss

I like to wash some things (a good knife or an aluminum pan) by hand - meditative yes - and let my dishwasher handle the rest.

ehou

5 tahun yang laludiscuss

Not OP. My servers get this:

    $ apt install unattended-upgrades

    # /etc/apt/apt.conf.d/99unattended-upgrades-custom
    Unattended-Upgrade::Sender "Root at servername.domain.tld <[email protected]>";
    Unattended-Upgrade::Mail "[email protected]";
    Unattended-Upgrade::MailReport "on-change";
    Unattended-Upgrade::Automatic-Reboot "true";
    Unattended-Upgrade::Automatic-Reboot-Time "05:00";
    
    $ sudo systemctl edit apt-daily.timer
    # Opens a new file /etc/systemd/system/apt-daily.timer.d/override.conf, paste this content:
    
    [Timer]
    # Reset the system calendar config first
    Set a new calendar timer with a 60 minute threshold
    03:00
    RandomizedDelaySec=30m
    
    $ sudo systemctl edit apt-daily-upgrade.timer
    # Opens a new file /etc/systemd/system/apt-daily-upgrade.timer.d/override.conf, paste this content:
    
    [Timer]
    # Reset the system calendar config first
    Set a new calendar timer with a 60 minute threshold
    04:00
    RandomizedDelaySec=30m

.. and are auto-updated. When a reboot is needed after an update, it gets rebooted automatically.

ehou

5 tahun yang laludiscuss

In theory you are right. In practice this part of the system is having problems too:

    - people who used to move on to a larger house stay because of the increased costs
    - older houses are broken down and are replaced by newer ones … but due to building regulations fewer are build at the same place
    - due to stagnation in outflow and decreased number of houses the waiting time for getting a “social house” is increased by a ridiculous amount. In Eindhoven it is more than 10 years - in theory. But due to rules about preferred placement it’s often way more.

ehou

5 tahun yang laludiscuss

> If pip-compile would support dev and production requirements it would still be my way to go I think.

Can you elaborate on this? I use pip-compile development.in and pip-compile production.in and both use -r base.in for shared dependencies