My audio plugin is backed by CloudRun https://signalsandsorcery.org
Ask HN: How do you deploy your side-projects?
41–50 of 82 posts
Re: Ask HN: How do you deploy your side-projects?
#42Hetzner 5€ vps with nginx as reverse proxy
devs don't want to work with nginx
Re: Ask HN: How do you deploy your side-projects?
#43I have an overspecced solar install on my roof that make the electricity used by the cluster essentially free to me, so the only recurring cost is business-class Internet service.
Re: Ask HN: How do you deploy your side-projects?
#44* setup of the system itself via ansible
deployment depends on the kind of project
* rsync for simple (static) webpages on vhosts
* docker-compose (docker) or helm/tanka (k8s) for container-based stuff
* and again ansible for everything else :)
Re: Ask HN: How do you deploy your side-projects?
#45Re: Ask HN: How do you deploy your side-projects?
#46For deployments of actual project I've built myself I've built a stack myself, which deploys on kubernetes via. flux2. I use a stack on top of dagger via. drone for ci, and a again a custom releaser for moving stuff from ci into flux.
I am using wireguard to communicate with the clusters, and mostly caddy on the frontend for tls provisioning.
It is not really a fit for other people, but you can find open source solutions for all my custom bits.
Re: Ask HN: How do you deploy your side-projects?
#47I deploy to actual VPCs, the old way. No containers. No PaaS. Just get a Linux machine with a static IP and install. I use ansible to automate the deployment. If I need some storage of undefined quantity, in the case of say image uploads, I might bring in S3 (or equivalent) service. But other than that, just a VPC.
Re: Ask HN: How do you deploy your side-projects?
#48Digital Ocean's managed Kubernetes offering has been great for me. There's lots of potential complexity to K8s, but if you're not managing the cluster and you have simple workloads the ratio of "stuff you have to learn" to "benefits you get" is pretty high. You can deploy anything that runs in a container, so it's really good for experimenting and not being tied down to one language or platform. I can add a new servi…
I'd go down the same road as you, but I'm worried that I leave my cluster vulnerable as I don't know much about hardening Kubernetes. For example, I know I shouldn't run my apps under privileged user in Docker, but overall I'm not familiar with a managed Kubernetes attack vector.
Re: Ask HN: How do you deploy your side-projects?
#49Digital Ocean's managed Kubernetes offering has been great for me. There's lots of potential complexity to K8s, but if you're not managing the cluster and you have simple workloads the ratio of "stuff you have to learn" to "benefits you get" is pretty high. You can deploy anything that runs in a container, so it's really good for experimenting and not being tied down to one language or platform. I can add a new servi…
What's your approach for ensuring that you've sufficiently secured your Kubernetes cluster? I'd go down the same road as you, but I'm worried that I leave my cluster vulnerable as I don't know much about hardening Kubernetes. For example, I know I shouldn't run my apps under privileged user in Docker, but overall I'm not familiar with a managed Kubernetes attack vector.
Second step, don't expose anything unless you explicitly know what it's for. Start with everything 100% locked down, and only open things up you know want to be open. If you're just hosting a "home" cloud, nothing have to be exposed externally, so expose nothing. Otherwise go service/port by service/port to expose things.
Re: Ask HN: How do you deploy your side-projects?
#50Hetzner 5€ vps with nginx as reverse proxy
devs don't want to work with nginx
imho. this was the reason, why the DevOps movement was founded in the first place - until it got "yet another" buzzword for plain/old system-administration ...