• 2 Posts
  • 1.59K Comments
Joined 2 years ago
cake
Cake day: June 30th, 2023

help-circle


  • towerfultoSelfhosted@lemmy.worldHelp with domain
    link
    fedilink
    English
    arrow-up
    5
    ·
    2 days ago

    DNS and domains are just human-friendly IP addresses.

    You only have 1 public IP address.
    So, to access different services you need to use different ports.
    Or run a service on a single port in front of the other services that can understand the connections and forward the connections to the actual services - known as a reverse proxy. In the case of http/https, there are plenty of reverse proxies that can direct requests based on all sorts of parameters, subdomains being one of them.

    If you are just starting out, I’d recommend a docker compose stack and Nginx Proxy Manager.
    Learning containers & docker makes everything easier.
    NPM is a very easy to use reverse proxy with a nice GUI, so you don’t have to configure CertBot/ACME or learn the specific config language of Nginx.

    If you are unsure of domains and all that, you can try it out for free.
    Your computer has a hosts file (/etc/hosts on Linux, I think it’s in system32 on windows). This allows you to tell the computer “for the domain example.com use the IP 10.0.0.200” or whatever you want. You need a hosts file entry for each subdomain.
    What this means is that you can run up a docker compose stack on your computer and point a bunch of sub domains to 127.0.0.1, use self-signed certs, and play around with nginx proxy manager and docker.
    No money spent, no records published, no traffic leaving your computer.
    Zero risk.

    There are loads of tutorials out there on NPM and docker compose stacks. Probably some close to your specific requirements.



  • Not a lawyer.
    But how to “cover your ass”.

    If pressured to still send a quote with it included, ask your manager to email over the details - ie get it in writing.
    You are looking for them to tell you to include this unprovidable service in the quote as part of the details/instructions.
    IE your manager to tell you to do the unethical thing in writing.
    And respond back along the lines of “as discussed, we can’t provide this service and can’t procure it from the upstream provider. However I will do as instructed and email the quote to the customer with this service included”.
    This is indicating that you have discussed it (ideally save any other emails about this subject).
    If your boss emails back “we haven’t discussed this”, then raise the issue in writing and don’t send the quote until it is resolved by email (if your boss talks to you in person, feel free to send a “follow up” email outlining what you discussed and ask for clarification).
    If your boss emails back “do as you are told”, then do as you are told.
    Save all the emails.

    BCC to a personal account will be seen in server logs. Better to export backups or take screenshots and put them on a USB. Or ZIP them with a password and find a way to exfil them without raising red flags if USB devices are restricted. There are many ways to do this, I’m sure I can suggest some.

    Generally, working under instruction where your pushback might lead to termination generally results in unfair dismissal and settlements.
    Especially if you can prove that you have raised the issue, and still been told to proceed.

    It doesn’t sound like this is a risk-to-life or risk-to-public scenario, so I don’t think “whistle blower” procedures are needed.










  • towerfultoProgrammer HumorContainers Explained
    link
    fedilink
    arrow-up
    1
    ·
    6 days ago

    I was aware of kubernetes 6 months ago, but had never used it.
    I got a 3 node cluster running in a day, and was learning kubernetes.
    The only issues I’ve had were due to hardware failure causing etcd instability, and misconfigured operators generating terabytes of logs leading to pod eviction.

    I don’t know what would signify it being production ready. It had all the levers and knobs I needed. I haven’t yet needed to run a sysadmin debug container to poke around the host OS.
    It’s also great for learning. If you make a mistake, it’s very easy to wipe and reinstall and get back to where you were.






  • towerfulOPtoProgramming.dev MetaHow is funding?
    link
    fedilink
    arrow-up
    7
    ·
    edit-2
    9 days ago

    Thanks.

    I would like to have some help with server and maintenance costs. Currently the site costs about $2,100 USD a year to run, but a large portion of that was for the initial domain name purchase which was around $580 USD.

    Thankfully we’ve grown pretty slowly so it hasn’t cost so much so far, but it will begin to add up soon. @snowe2010

    @snowe2010’s goal is to earn $200 per month

    58% towards $200 per month goal

    Can only sponsor through GitHub?



  • Some do?

    https://www.itv.com/news/2024-11-20/why-is-the-use-of-anti-personnel-mines-in-ukraine-so-controversial

    Some mines are designed to have a time limit on them and become inactive after a set period of time.

    However, other mines can remain active and dangerous for many years after the conflict has ended.

    According my linked article:

    US officials says the mines they send Ukraine will be “non-persistent”, meaning they have an internal mechanism to shorten the lifespan of the trigger.

    The mines are designed to become inert after a set period of time ranging from as little as four hours to two weeks, officials said.

    They say the mines use an electrical fuse that requires a battery, and the mine becomes inert when the battery runs out.

    The US intends for Kyiv to use the anti-personnel mines in the eastern part of the country, US officials said, where Russian troops have made slow and steady progress against Ukrainian defensive lines.

    Ukraine has also made assurances they will try to limit the risk to civilians.