M. Hamzah Khan @mhamzahkhan@intahnet.co.uk

Hmm people who run #K8S at home, do you bother to run two ingresses? one for internal services, one for external?

For example, I don't want Pi-Hole's admin console or UniFI controller to be accessible from the internet.

At the moment, I'm running two and using the ingress class annotation to dictate which ingress should handle the ingress route, but I'm trying to decide if it's worth it.

Trying to get my head around Hashicorp Vault, at 2AM isn't going so well tbh

is there a way to make sops stop changing indentation? It's making yamllint fail :(

Yay, I got it back! 😆
I had a backup of my /home/ directory, which had a backup of Gnome Keyrings (.local/share/keyrings/). So I copied that back to my machine, and it still had the stored password!

Remember to keep backups!

It was only the password for a sub key, so it's not the end of the world, but I had used that key with SOPS to encrypt secrets. Luckily there aren't too many, and they can all be recovered. But still a pretty dumb mistake on my part 😔🤷‍♂️

Dumb dumb over here forgot his GPG password. Gnome Keyring was remembering it for me, but for some reason, it has been forgotten. 😓

I hate the CCP so frigging much. The world has basically abandoned the #Uyghur people.
https://www.bbc.co.uk/news/extra/85qihtvw6e/the-faces-from-chinas-uyghur-detention-camps

I think I find docker images with a crap load of layers more annoying than large images with only a few layers.

@sheogorath Are you still using OpenShift for your K8S cluster?

Migrated my crappy blog from WordPress to hugo. 😀

It took a while, but I'm happy I no longer have to worry about wordpress.

Hmm in the past I used to be excited when there was a new #RHEL major release, but I'm not excited for EL9 at all. 😅
I think it's partially because at work, I doubt we will deploy it any time soon, and in my #homelab I've mainly switched to Fedora or FCOS.

Nevermind. I'm being an idiot.
Apparently, Nginx will cache the response if there is a Cache-Control header, even if the original request has an Authorization header.

I thought it doesn't, but for some reason, it is for me :\

By default, would #nginx cache a response if the Authorization header is present in the request?

🤦Running into this bug.
https://github.com/containers/buildah/issues/3806
I've been looking in the wrong place for the last hour or so.
Time to disable systemd-resolved

I stole bits of @sheogorath's gitlab-ci pipeline for his blog 🙄

Spent most of today figuring out how #hugo works, and converting my Wordpress blog to Hugo.

This is the first time I've really used a static site generator. So far, I like it. I want to get rid of Wordpress ASAP.

Time to upgrade to #Fedora 36. I hope it goes well.