Viewing profile — antoniomika

We added SSH certificates support to pico.sh [1] and it's been great. Utilizing principals gave us the ability to implement a RBAC like system for specific parts of the pico.sh eco…

Currently, you can either provide the `BORG_REPO_PERMISSIONS` env var to borg [0] or `--permissions` flag to `borg serve` [1]. You can then enforce this as part of your `authorized…

This has been replaced with a permissions feature that still provides both delete and overwrite protections. The difference is the underlying store needs to implement it rather tha…

Check out sysbox[0], it's a runc based runtime that allows you to run "system" containers without privilege. [0]: https://github.com/nestybox/sysbox

Yep! tuns would be the service you want since it can support forwarding arbitrary backends: https://pico.sh/tuns#custom-domains

We’re actually using Unix sockets as the underlying transport layer for this. We’re also not using sshd, we custom wrote our own daemon that’s entire job is tunneling. If you’re cu…

We're actually fully open source and all development occurs in the open! Here's the repo https://github.com/picosh/pico and you can find us on Libera IRC

Hrm that's odd! Just tested and everything looks fine. Any logs or errors you can share?

Our host keys are published here and are durable: https://pico.sh/host-keys

Ashburn, VA and Nuremberg, DE!

Woops! Delete is supported, will update that as well

Correct! The tunnels are protected using ssh auth as well, so you can ensure that only the users you want to access it can.

I'd actually highly recommend taking a look at vaxis ( https://github.com/rockorager/vaxis ). We've moved away from wish/bubbletea and have really enjoyed working with vaxis!

Sorry, this is a focus issue with a tui which we'll fix up soon! Should just need to hit until OK is highlighted and then press enter

We recently changed our tui framework and the functionality for focus is a bit different. You might have to hit until `ADD` is highlighted. You can also rsync/scp/sftp an authorize…

And we're still free! Just added some payments to help keep things running smoothly and allow us to invest in more infrastructure. pgs (static sites) and tuns (tunneling) are both …

And we'd be happy for you too! All of our code/tools are open source and available here: https://github.com/picosh/pico

Honestly never had a chance to merge it/review it. Once the company wound down, I had to move onto other things (find a new job, work on other priorities, etc) and lost access to b…

I wrote a system that did this >5 years ago (luckily was able to open source it before the startup went under[0]). The bastion would record ssh sessions in asciicast v2 format and …

Nope! I utilize env files for all of my password/privileged settings. In the command entry for docker-compose.yml, you can then use a non-templated env var (one that docker-compose…

Thanks for the feedback and trying things out! - We like the "ssh to create an account" idea too. Makes it easy to confirm a user's identity which is nice and uses tried and true a…

We do use Caddy, but just for reverse proxying and handing TLS. We utilize custom http/ssh servers on the backend to handle everything. All of our work is open source and we do dev…

Most of the services we've developed at https://pico.sh are more-so geared to "power users". It was difficult to quantify that in a single word so hackers is where we landed. Being…