Live data from Hacker News

Ask HN: How do you deploy your side-projects?

news.ycombinator.com

41–50 of 82 posts

Re: Ask HN: How do you deploy your side-projects?

#42
post #14

Hetzner 5€ vps with nginx as reverse proxy

devs don't want to work with nginx

Really? First I've heard of this. All the devs I know love nginx and it has been my go to tool for almost a decade. Although I recently switched jobs and haven't worked with anything web or deployment related for over 6 months now, so my information might be out of date.

Re: Ask HN: How do you deploy your side-projects?

#43
I self-host on a 3-node Kubernetes cluster in my basement. It runs on three off-lease HP DL360 1U servers that I bought for about $120 each. I work heavily with Kubernetes in my day job, so this also gives me a playground for things that I may need to know about for work, or also things I'll _never_ need in my day job, but are good learning opportunities anyway.

I have an overspecced solar install on my roof that make the electricity used by the cluster essentially free to me, so the only recurring cost is business-class Internet service.

Re: Ask HN: How do you deploy your side-projects?

#44
nearly everything on "classic" server / VM based systems based on (debian) linux

* setup of the system itself via ansible

deployment depends on the kind of project

* rsync for simple (static) webpages on vhosts

* docker-compose (docker) or helm/tanka (k8s) for container-based stuff

* and again ansible for everything else :)

Re: Ask HN: How do you deploy your side-projects?

#46
A mix of docker-compose for static solutions with containerrr/watchtower for updates.

For deployments of actual project I've built myself I've built a stack myself, which deploys on kubernetes via. flux2. I use a stack on top of dagger via. drone for ci, and a again a custom releaser for moving stuff from ci into flux.

I am using wireguard to communicate with the clusters, and mostly caddy on the frontend for tls provisioning.

It is not really a fit for other people, but you can find open source solutions for all my custom bits.

Re: Ask HN: How do you deploy your side-projects?

#47
post #23

I deploy to actual VPCs, the old way. No containers. No PaaS. Just get a Linux machine with a static IP and install. I use ansible to automate the deployment. If I need some storage of undefined quantity, in the case of say image uploads, I might bring in S3 (or equivalent) service. But other than that, just a VPC.

Great to hear some people still follow the KISS method. I've done the same for years and this very simple setup can scale to tens of millions of (database intensive) requests per week.

Re: Ask HN: How do you deploy your side-projects?

#48

Digital Ocean's managed Kubernetes offering has been great for me. There's lots of potential complexity to K8s, but if you're not managing the cluster and you have simple workloads the ratio of "stuff you have to learn" to "benefits you get" is pretty high. You can deploy anything that runs in a container, so it's really good for experimenting and not being tied down to one language or platform. I can add a new servi…

What's your approach for ensuring that you've sufficiently secured your Kubernetes cluster?

I'd go down the same road as you, but I'm worried that I leave my cluster vulnerable as I don't know much about hardening Kubernetes. For example, I know I shouldn't run my apps under privileged user in Docker, but overall I'm not familiar with a managed Kubernetes attack vector.

Re: Ask HN: How do you deploy your side-projects?

#49

Digital Ocean's managed Kubernetes offering has been great for me. There's lots of potential complexity to K8s, but if you're not managing the cluster and you have simple workloads the ratio of "stuff you have to learn" to "benefits you get" is pretty high. You can deploy anything that runs in a container, so it's really good for experimenting and not being tied down to one language or platform. I can add a new servi…

What's your approach for ensuring that you've sufficiently secured your Kubernetes cluster? I'd go down the same road as you, but I'm worried that I leave my cluster vulnerable as I don't know much about hardening Kubernetes. For example, I know I shouldn't run my apps under privileged user in Docker, but overall I'm not familiar with a managed Kubernetes attack vector.

First step if you're hosting it at home is separating your home connection from your business connection, physically. If you don't have that, do at least two VLANs.

Second step, don't expose anything unless you explicitly know what it's for. Start with everything 100% locked down, and only open things up you know want to be open. If you're just hosting a "home" cloud, nothing have to be exposed externally, so expose nothing. Otherwise go service/port by service/port to expose things.

Re: Ask HN: How do you deploy your side-projects?

#50
post #14

Hetzner 5€ vps with nginx as reverse proxy

devs don't want to work with nginx

who cares? most devs don't want to work with anything else than their "beloved" $IDE and $LANGUAGE on $OS

imho. this was the reason, why the DevOps movement was founded in the first place - until it got "yet another" buzzword for plain/old system-administration ...

Post reply on HN