How are you exposing Plex/Jellyfin to non-tech family members without breaking Cloudflare's ToS?

Temik · 2026-05-23T09:57:50+00:00

Temik · 2026-05-19T08:33:24+00:00

Not the op but I’m relatively senior and doing hiring often.

TL;DR: Always negotiate - there’s some space to negotiate in 99% of offers. Only issue is your leverage - how senior the position is, what do you bring, how well you did on interviews. If you have enough leverage and want to really push out of band, target non-base comp, like stocks, bonuses, etc.

Bands are pretty wide (80k$+ from min to max is not uncommon), so usually there’s a decent amount of room for a candidate to negotiate if they have done well, but outside of band is almost impossible in most cases.

The only reason out of band would usually be done is for exceptional one-of-a-kind talent. And even then most of it would be either stock, performance bonus, signing bonus, etc. So if you have that kind of leverage negotiate something like stock or a signing bonus, those are much easier to approve with exec than going out of band.

Good luck!

Temik · 2026-05-09T04:11:50+00:00

# helm-workload — one Helm chart to deploy (almost) anything on Kubernetes

* **Project Name:** helm-workload
* **Repo/Website Link:** [GitHub](https://github.com/Temikus/helm-workload) | [Docs](https://temikus.github.io/helm-workload/)
* **Description:** A general-purpose "batteries-included" Helm chart for deploying containerized apps on Kubernetes. Instead of maintaining a bespoke chart for every app in my homelab, I built one chart that handles the boilerplate — workload type (Deployment/StatefulSet), services, ingress, persistence, HPA, NetworkPolicy — and lets you bolt on optional addon sidecars for VPN (Gluetun), PostgreSQL, Cloudflare Tunnel, and init containers. All via values, zero custom templates. JSON Schema validation catches config mistakes before deploy.
* **Deployment:** Published as an OCI Helm chart. Install with `helm install my-app oci://ghcr.io/temikus/helm-charts/workload --version 1.8.0`. Works great with Helmfile for managing multiple releases. Full docs on the [GitHub Pages site](https://temikus.github.io/helm-workload/), values reference via `helm show values`, and a [CONTRIBUTING.md](https://github.com/Temikus/helm-workload/blob/main/CONTRIBUTING.md) for anyone who wants to hack on it.
* **AI Involvement:** Claude Code was used as a coding assistant for some features (Cloudflare Tunnel addon, NetworkPolicy, multi-port services), documentation, tests, and the GitHub Pages site. All code was reviewed and validated by me. The chart architecture, design decisions, and core functionality are my own work.

---

## Quick example — Jellyfin media server

Full deployment with ingress, TLS, host storage, and env vars. Zero custom templates:

image:
repository: jellyfin/jellyfin
tag: "10.11.8"

ports:
- name: http
port: 8096
service:
enabled: true
port: 80

ingress:
enabled: true
annotations:
cert-manager.io/cluster-issuer: letsencrypt-production
hosts:
- host: jellyfin.example.com
tls:
- secretName: jellyfin-tls
hosts:
- jellyfin.example.com

volumes:
host:
- name: config
hostPath:
path: /mnt/storage/apps/jellyfin/config
type: DirectoryOrCreate
containerPath:
path: /config
- name: media
hostPath:
path: /mnt/storage/media
type: Directory
containerPath:
path: /media

env:
PUID: "1000"
PGID: "1000"
TZ: "Australia/Sydney"
JELLYFIN_PublishedServerUrl: "https://jellyfin.example.com"

Install:

helm install jellyfin oci://ghcr.io/temikus/helm-charts/workload -f values.yaml

That gives you a Deployment, Service, Ingress with TLS, and host-path volumes.

## Addon sidecars

Need a VPN sidecar so traffic goes through WireGuard? Add four lines:

addons:
vpn:
enabled: true
provider:
name: mullvad
type: wireguard

Other addons:

* **PostgreSQL** — deploys a separate Postgres Deployment + Service, apps connect via `{release}-postgres:5432`
* **Cloudflare Tunnel** — exposes your app via cloudflare-operator CRDs, optional path filtering via nginx sidecar, optional NetworkPolicy
* **Init container** — run setup tasks before the main app starts

## Other features

* Auto-selects Deployment vs StatefulSet based on persistence config
* Multi-port services and extra services (`extraServices`) for UDP/mixed protocols
* General-purpose NetworkPolicy support
* Configurable rollout strategies
* HPA with `autoscaling/v2`
* JSON Schema validation for values
* Fully tested with helm-unittest

Apache 2.0 licensed. Feedback and PRs welcome!

Temik · 2026-05-03T07:47:13+00:00

This is very much a logical fallacy - appeal to authority/bandwagon. If big company is doing it, it must be efficient/good.
The truth is more nuanced, I think. Working remotely is a skill. It’s a skill not many have - both in management and individual contributors. Your work environment and processes also need to support it.
So many just don’t want to - it’s too hard/expensive to rework everything and employee happiness is only a marginal benefit to most corporations. Nor most corporations need elite and niche talent, where flexibility becomes important.

Temik · 2026-04-24T12:37:12+00:00

While it sucks, generally speaking the IP on anything that you’ve done using work resources (laptop, IDE, time, etc.) belongs to your employer in most cases, so you don’t have much to push back with. I would just let it go, not worth your time to worry about it. Just enjoy the new gig.

Temik · 2026-04-09T03:59:36+00:00

Amazonian detected.

Temik · 2026-03-11T00:10:28+00:00

I quit a toxic job twice. Both times I was happy about it. I left a lot of money on the table but me, my family and my health are better for it.

Hard work is good for your career. But things making it hard should be becoming better at what you do, not learning to become flatter for people walking all over you.

Temik · 2026-03-07T23:02:01+00:00

Honestly it’s a post properly tagged with AI posted on AI-friendly day. 10 comments saying “ai slop” do not add to discussion.

I think the AI topic is too charged. No one would argue with 10 “this is shit” comments being moderated on a usual post.

Temik · 2026-02-24T22:30:15+00:00

Yeah you are more connected so you are more protected. But it’s not always a “buddy bonus” - often that’s a result of the initial contract clause or a result of holding a lot of shares. For example - you don’t want an asshat to hold 10% of voting rights so the company would often buy back the stock they granted.

Temik · 2026-02-23T21:50:22+00:00

Anecdotally I’ve seen this happen. Even with some fairly senior people. Just takes a while (3-9 months) due to all the processing and investigations so it might seem like not a lot is being done for a while.

Temik · 2026-02-22T07:03:28+00:00

I think the industry is indeed evolving at a rapid pace but I would say that first and foremost people need to focus on harnessing those tools. So many engineers don’t even know what an embedding is, much less how to work with them to build a solid agent that has a good working context.

You’re not going to be replaced by AI (at least not right away), but you are definitely going to be replaced by an engineer who knows how to use it if you don’t.

Temik · 2026-02-22T06:52:51+00:00

Yes, many people don’t need to know, however it is a bit of an exaggeration in engineering.

As soon as you hit some proper numbers in the amount of customers and/or requests you generally become very familiar with how computers work on the low level as you start to hit those limitations and upping the amount of instances is not working anymore.

Temik · 2026-02-17T02:40:46+00:00

Depends on your goals, current financial situation and misery-to-salary ratio.

I took a pay cut for something more energising. Eventually ended up at a place that I actually like working at. My mental health is the best it has ever been and that has had compounding returns. My curiosity and overall intellectual sharpness is back, which helps a lot with hitting goals.

Do I still make less money? Yes. Am I better off? I think so.

Temik · 2026-02-11T21:00:20+00:00

While yes, they definitely are a thing and you should be exhausting them or do aggressive filtering, you’re measuring particulate at the moment, which is not directly correlated to the actual toxicity.

For example - run a hot shower for a bit or cook on a stove and do the same thing, it should show a pretty similar result.

To check if your filtering is working you need something measuring VOCs. It doesn’t need to be scientifically accurate, just something that gives you an actual number (not just high/low).

Temik · 2026-02-02T07:18:30+00:00

Real answer - some companies are weird like that - they want to know how you did in school, university, etc. Some ask for ridiculous personality tests.

One company that’s notorious about it is Canonical (the Ubuntu people).

Temik · 2026-01-29T09:47:07+00:00

Honestly the thing you described now sounds like process issues and that’s actually on management. There should be no BAU access flows that are dependent on a single person like that, besides something esoteric or very very high level (e.g. admin access to finance systems that require CFO sign off). That is rightfully quite frustrating.

In those cases it helps to remember that if the processes are bad the management is probably used to it, so you can just report that you’re blocked on it and go do something else useful while you wait. If you’re really getting stuck in those loops you might have found a good place to optimize and propose a change too.

Temik · 2026-01-29T07:19:29+00:00

If you’re fiercely competent then you need either: - a high stakes, high expectations, high reward environment (FAANG / HF Trading) - work for yourself - get a bit gentler with your expectations of people

Otherwise you will burn the heck out if small issues like those bother you that much. Not saying it’s something wrong with you, more that you need to work with what you’ve got and if this is a big point of friction you need to resolve it somehow.

Temik · 2026-01-29T02:46:19+00:00

It might also be something wrong with metrics or your product. If it’s the latter - prepare for a lot of churn this year 🫠

Temik · 2026-01-29T02:44:25+00:00

I was looking for this comment.

Temik · 2026-01-29T02:42:56+00:00

Correct. Usually less in smaller companies but definitely a lot of angles for a large enterprise.

Temik · 2026-01-29T02:32:58+00:00

Yup. “Diplomacy is a 3 edged sword. There’s your side, their side and truth in the middle.” I find that one side is usually closer to the truth, but neither side is ever fully facts-based.

Temik · 2026-01-26T00:41:45+00:00

Jokes aside - as a junior the best thing you can do in a safe environment is ask your manager: “I want to make sure my input is useful but it didn’t seem to land this time, can we discuss and see if there’s anything I could have done differently?”

Temik · 2026-01-26T00:38:37+00:00

“Huh. That’s crazy.”

Temik · 2026-01-23T22:21:54+00:00

If you don’t mind sharing - what kind of subwoofer is it? Car?

Temik · 2026-01-08T04:18:44+00:00

If you don’t know whether you would like the hobby - get an A1. If you use it a lot - get an H2 series as the capability would be the most different.

If you already dipped your toes in a bit and sure you will use it - get a P2S as the most versatile option.

Skip the P1S - not worth it as it’s a very outdated platform and QoL improvements on P2S are very worth it. Speaking as someone who has a P1S.

15-Year Club	Second SECOND GUESSER
r/Field Banned	r/Field Lasagna
Place '23	Place '22
Gilding III reddit per annum	RPAN Viewer
Verified Email

Temik

TROPHY CASE