• 0 Posts
  • 30 Comments
Joined 1 year ago
cake
Cake day: June 22nd, 2023

help-circle








  • It can be in git even if you’re not doing ‘config as code’ or ‘infrastructure as code’ yet/ever.
    Even just a text file with notes in markdown is better than nothing. Can usually be rendered, tracked, versionned.
    You can also add some relevant files as needed too.

    Like, even if your stuff isn’t fully automated CI/CD magic, a copy of that one important file you just modified can be added as necessary.


  • Alright, so, the original rule 1 that was referenced in the first modlog when you posted this to /c/worldnews refers to the community rules for /c/worldnews :

    Rule 1: posts have the following requirements:
        Post news articles only
        Video links are NOT articles and will be removed.
        Title must match the article headline
        Not United States Internal News
        Recent (Past 30 Days)
        Screenshots/links to other social media sites (Twitter/X/Facebook/Youtube/reddit, etc.) are explicitly forbidden, as are link shorteners
    

    You then broke rule 2 on /c/technology, which I think a mod explained well.

    On /c/youshouldknow, you were also breaking rule 1, which is a different rule 1 than before becaise it’s a different community.

    /c/youshouldknow community’s rule 1:

    Rule 1- All posts must begin with YSK
    

    Like… every community has their own rules.
    Here, you lucked out and don’t break any obvious rules whether you read them or not.











  • I run a private CA for client SSL.
    For traditional server SSL I just use let’s encrypt, although I already have the domain (less than $10 a year) for my public facing stuff, and just use a subdomain of that one for my homelab.

    I have a container with openssl for the private CA and generating user certs as well as renewing the let’s encrypt ones. I just use openssl without anything fancy.
    The output folder is only mounted rw in that one container
    I only ever mount the subfolders in read-only in other containers that need those certs.
    All these containers are running on the same server so I don’t even have to copy anything around, the containers don’t even need connectivity between them, it’s just mounted where needed.