Viewing profile — nicolast

Exactly: a non-blacklisted IP with good reputation, correct mailname and valid PTR record is the foundation, ideally augmented with SPF. I've been running an e-mail service without…

I am indeed. Feel free to reach out, would be happy to learn from the approach you took.

You may be interested in https://discourse.haskell.org/t/towards-an-actor-framework-f... , then!

For this kind of decisions, why not simply keep notes as comments in the code? These can easily be added later, even 14+ years after the code was written. Then, when someone dives …

GoPro would like a word.

There's also 'AX_APPEND_COMPILE_FLAGS' [1] (and its dependency 'AX_CHECK_COMPILE_FLAG' [2]), next to many other (related or unrelated) macros in the autoconf archive. [1] https://w…

An 'easy' way to deploy a cluster could be using kubeadm. Then you'll need a CNI like Calico to get Pod networking up-and-running. However, you'll want to install a bunch of other …

> first of all with k3s keeping a production cluster running is still pretty easy. Fair enough. I'll admit I have no direct experience with K3s. There are, however, many K8s deploy…

My comment above did not come out of the blue, but based on real-world experience ;-) You may be interested in our MetalK8s project [1] which seems related to yours. [1] https://gi…

> Getting Kubernetes up and running isn't really the issue anymore, that's pretty easy to do. The tricky part is long term maintenance and storage. This times 100. Deploying basic …

> How to distribute secrets if not by env? (which I agree! Honest question) You'll want to use BuildKit (`docker buildx`), see https://docs.docker.com/develop/develop-images/build_…

Not an Arrow expert at all, so I may be missing something, but I fail to understand the "The Science of Reading/Writing Data" section, or rather, its relevance to the article (and …

Not all services exposed to the outside are HTTP(S).

Cases like this seem to confirm the approach LetsEncrypt took of only issuing certificates of a somewhat-short lifetime, which kind-of forces a user to fully automate the handling …

There's https://github.com/openstack/ansible-hardening and https://github.com/dev-sec/ansible-os-hardening

> If you verify that your hardware is unstable, how can you expect the software not to fail and corrupt data? No such thing as 'stable hardware' at scale.

I'm not involved in the Phippy 'project' in any way (only got a copy of the books and some plastic version of the animals as a speaker here at KubeCon :-D). I agree the wording may…