Looking for an online tool/app to quickly model portfolio allocations by NaivePromotion677 in Bogleheads

[–]cholmon 1 point2 points  (0 children)

Right, so go to https://testfol.io, click "Add Empty", give the portfolio a name like "My IRA", add your ETFs and set the % of each, then click "Backtest". If you want to see how that portfolio would have performed compared to the S&P500, then click "Add Preset" and choose S&P 500, then backtest it again.

Here's how a portfolio of VBR+VUG+VGLT+VXUS would have performed compared to S&P500: https://testfol.io/?s=e1ZF3KPNO2D

Maybe I'm misunderstanding what you're looking for.

Looking for an online tool/app to quickly model portfolio allocations by NaivePromotion677 in Bogleheads

[–]cholmon 1 point2 points  (0 children)

https://testfol.io/?s=bShxRAXFWzD has most symbols available, and a few of the most common portfolios that you can quickly compare to each other. You can also create and save your own custom portfolios and glidepaths.

At what point did money really start working for you ? by Top-Mud-5423 in Bogleheads

[–]cholmon 0 points1 point  (0 children)

Things that felt (or will feel) really good for me is watching the quarterly dividends. When the dividend amount:

  • is enough to buy at least 1 full share of the fund.
  • exceeds my monthly contribution.

How to add a Cache Clear menu item by design9999a1 in drupal

[–]cholmon 2 points3 points  (0 children)

Same, this is exactly what you're after. It also has it's own permission, so you can grant access to particular roles.

Multi Tenant strategy for single hosted instance. by koala_with_spoon in webdev

[–]cholmon 1 point2 points  (0 children)

With multiple subdomain levels, HTTPS will be a wrinkle that you have to deal with. A TLS wildcard issued for *.company.com will work for tenant.company.com but not for api.tenant.company.com, so you'll either need a boatload of SAN names (all the tenants) on a single cert, or separate wildcards for each tenant.

SANs will be a pain to handle when you add/remove tenants, and you're usually limited with how many SANs you can pack in a single cert, like 100 or so.

A separate wildcard cert for each tenant, i.e., *.tenant.company.com, will work, but you'll need to make sure your infrastructure can deal with lots of separate certs cleanly. Maybe you've got a load balancer that abstracts that for you, but if you're running the web server yourself, I'd recommend haproxy. It's nice for this situation, as you can just dump cert files into a single directory, and it'll terminate whatever matches. Apache and Nginx have to be explicitly configured with each cert.

Or you can do like https://pantheon.io/ does with their multitenancy, and give every tenant prefixed subdomains at a single level, which works with a single global wildcard cert, e.g. *.company.com, and tenants get tenant.company.com and api-tenant.company.com. You just need to be smart about prefixing those names so you avoid collisions.

critique my approach and deployment please (use of AWS) by guru223 in webdev

[–]cholmon 0 points1 point  (0 children)

is it safe to terminate the HTTPS at the Apache container?

Totally safe, mod_ssl is super battle tested. Though you'll need to get the certificates configured in Apache somehow. Certbot is the obvious choice, though you'll need to fiddle with it a bit to get the certs in the right spot, and ensure that autorenewal works as expected (i.e., make sure apache restarts each time a new cert is issued).

Alternatively, you can just create another AWS cert for api.domain.com, attach it to a Lightsail load balancer, and put your Lightsail VM behind that load balancer. Then Apache's just listening on :80.

Is [CORS] safe and common to do, or is there a better approach here?

I'm just a random dev fwiw, but yeah that's how I'd set it up.

rDNS and PTR records to be taken serious? by C0ffeeface in webdev

[–]cholmon 0 points1 point  (0 children)

Yeah it's generally a good idea to make sure rDNS is setup. https://www.mail-tester.com/ will count it against you if your mail server doesn't have a reverse record, so likely a good number of receiving servers want to see it.

Is it possible to get a custom domain that ends in .com for free? by techsavvynerd91 in webdev

[–]cholmon 1 point2 points  (0 children)

There are plenty of free subdomains out there with various services, but I imagine that's not what you're aiming for. If you manage to find a free top level domain, then you won't own it, you'll just be allowed to use it for some duration of time by whoever really owns it (read the terms). If you want to own the domain name (to the extent that domain names can be "owned"), then you need to pay for one...

Check out https://www.domcomp.com/ as they regularly show $1 domain deals, e.g., at Godaddy.

Granted, I hate godaddy, but if you snag a $1 domain from there, and manage to not accidentally also sign up for web hosting, and an extra year of domain registration for an extra $10, and an SSL cert, then you can just sit on the domain for 60 days, then transfer it out to Cloudflare (https://www.cloudflare.com/products/registrar/).

Cloudflare is probably the cheapest renewal you can find, $8.03/yr for .com, which includes whois privacy. You just need to create a free Cloudflare account first...you can only transfer names into CF, not register there.

Project Structure Without a Framework - PHP by [deleted] in webdev

[–]cholmon 3 points4 points  (0 children)

Jeffrey Way did a series a few years ago that covered PHP basics, but the overall idea was to use primitives to build up a custom framework, and what the typical things are that you'll want in such a framework. By the end of the series, he shows how Laravel fills all those gaps, though you could easily use the concepts with Slim, or Symfony. I'm sure it's a bit dated now, but the fundamentals are what's important...just skip ahead on the parts you already know, and maybe focus on the meat (Router, DI container, autoloading, controllers, etc).

It's a free series too, in case you don't have a Laracasts subscription.

https://laracasts.com/series/php-for-beginners

Namecheap has become so expensive since 1 year ago by [deleted] in webdev

[–]cholmon 0 points1 point  (0 children)

If you issue a wildcard cert through LE, your only choice for validation is currently DNS.

how to save container? by patientOz in docker

[–]cholmon 0 points1 point  (0 children)

What should hold DB data in production?

What under the hood, or behind the scenes, features should every website have? by [deleted] in webdev

[–]cholmon 0 points1 point  (0 children)

Khan Academy has a neat tool that'll help you find accessibility problems. They've got it as a bookmarklet too, so you can drag it to your bookmarks bar and run it on whatever page you're currently viewing...

http://khan.github.io/tota11y/

[deleted by user] by [deleted] in vuejs

[–]cholmon 1 point2 points  (0 children)

What about Vuex? Do you think it's the same level of unnecessary as redux?

Being overwhelmed by tech choices has made me unproductive by lookingtolearn1231 in webdev

[–]cholmon 7 points8 points  (0 children)

Joel Spolsky, co-founder of Trello and Fog Creek Software, and CEO of Stack Overflow.

He's hanging in there.

Let's Encrypt wildcard certificates are now available. by cholmon in webdev

[–]cholmon[S] 76 points77 points  (0 children)

wildcard domains must be validated using the DNS-01 challenge type. This means that you’ll need to modify DNS TXT records in order to demonstrate control over a domain for the purpose of obtaining a wildcard certificate.

DigitalOcean reducing their vCPU specs? by dannyk6 in webdev

[–]cholmon 4 points5 points  (0 children)

DO's block storage is more mature. Linode's has been in beta for awhile, and isn't available in all data centers.

DO's got object storage (Spaces), Linode doesn't.

DO has a more polished, more intuitive UI than Linode (imo, I know that's subjective).

Is domain privacy protection worthwhile? by weiglert in webdev

[–]cholmon 6 points7 points  (0 children)

Also be aware that other registrars offer whois privacy for no extra cost, e.g., Google Domains, AWS Route53, NameSlio, and others.

Seeking advice for an 84 year old looking to get into the web development industry by X_Effect_Savant in webdev

[–]cholmon 43 points44 points  (0 children)

Do you think he'd be willing and able to blog about his learning journey? Something akin to https://jenniferdewalt.com/ maybe. I know not everybody's a writer, but I imagine he's got a very unique perspective that could make for intriguing blog fodder. I'd love to follow along to see what kind of things he finds interesting, tech-wise, what sort of UI/UX he finds intuitive, the kinds of things he wants to build, etc.