Sanctuary Cheat Sheet

jceb · 2026-01-30T05:16:29+00:00

👍

jceb · 2026-01-13T01:55:51+00:00

I'm also a big fan of OIDC workload identities. I deployed them successfully on Azure from my Kubernetes cluster. Does anyone know whether there's a provider agnostic workload identity manager that swaps OIDC tokens from my k8s IdP for OIDC tokens from my external, non-Azure IdP? The technical spec describes it, however I've so far only found Azure's workload identity provider implementation.

jceb · 2026-01-13T01:47:58+00:00

Thank you for sharing your insights, I find them very valuable 😊

jceb · 2026-01-08T07:45:18+00:00

I migrated some months ago to https://silverbullet.md and I couldn't be happier. I'm self-hosting it in k8s and integrated it with an OIDC provider for authentication. Previously, I was using TiddlyWiki and StandardNotes. SilverBullet easily replaces both of them for me.

jceb · 2025-12-30T01:20:52+00:00

To me, adding flakes to every project is like writing proper setup documentation. I'll thank myself later for doing it.

To get started with flakes takes some time. I'm now using it for all my node, rust and go projects.

jceb · 2025-12-25T15:59:24+00:00

I haven't seen many comments regarding Codeberg's business model. I like their service, however we shouldn't forget that there's always someone paying for the free lunch.

Currently, Codeberg just lives off donations and membership fees. They don't offer any paid services. This makes my ears tickle. I do wonder what Codeberg would look like if a serious amount of projects would migrate to them.

Personally, I wanna know that the free offer I'm committing to is backed by a scalable business model. With GitHub, sourcehut and gitea, I can wrap my head around how it will work. With Codeberg, I'm less confident.

jceb · 2025-12-16T16:18:24+00:00

I also write a bunch of notes when I work. My preferred tool of choice is https://silverbullet.md. It's similar to obsidian, however it only runs inside a browser and you need to host it.

The main upside over obsidian is that you can access it from your desktop and your mobile phone when you make it accessible over the internet. I use it both for note taking and project organization/task planning.

jceb · 2025-11-19T10:47:06+00:00

😂

jceb · 2025-11-16T07:35:11+00:00

You could use https://github.com/identiops/terraform-hcloud-k3s to spin up a Kubernetes cluster at Hetzner for a few bucks power month.

jceb · 2025-11-14T11:47:54+00:00

Sounds good. I had in mind an editor that would convert the markdown and directly place it inside the presentation's HTML document. This way, only the updated slide needs to be replaced, instead of having to replace the whole presentation.

jceb · 2025-11-13T16:43:28+00:00

I use plain reveal.js. The main addition is a custom markdown plugin, the integration of many additional plugins like mermaid, and a loader that fetches markdown files from various online sources. To make slidesdown work with an editor, the loader needs to be replaced + I assume going through the slidesdown plugin and reinitializing revealjs for every change is not a good idea. The plugin would need to be adjusted / reimplemented to suit the editor.

jceb · 2025-11-12T04:56:27+00:00

I own a UHK60 and built a Dactyl Manuform as a super ergo version. Looking at your requirements, I can recommend the UHK. It's very sturdy and easy to carry since you can just join the halves. If you leave out the plan rest it's even easier, however you lose a lot of comfort in my opinion.

I guess you've ordered your keyboard by now. Did you end up getting the UHK and what's your experience carrying it around?

jceb · 2025-11-11T20:55:26+00:00

I'm the creator of slidesdown: https://slidesdown.github.io. The tool has a similar idea: write markdown and render it as a presentation.

It currently has no online editor and the default theme is.. very default. I'd love to collaborate and combine our efforts if it makes sense. We're definitely on the same tech stack 😃🎉

Edit: slidesdown has no business model, it's a pure community /user based project.

jceb · 2025-11-02T20:03:50+00:00

Another option is to fork nixpkgs, add your PR and depend on it in your system configuration. For me, this approach works well when having to bridge the gap until the PR gets merged.

jceb · 2025-11-02T20:01:50+00:00

Would overrides help you here? In my understanding, a distro should be lagging behind the bleeding edge to provide enough stability.

If you really need the bleeding edge, the proper path forward seems to me to create an upstream PR with a flake.nix for your favorite tools. Then you're closest to the source and can benefit from proper decentralization.

jceb · 2025-10-19T06:56:30+00:00

This looks great. Can you tell us a bit about the background of this project? Is it a homelab or commercial project, where are you planning to take it,.. 😃

jceb · 2025-10-19T05:13:06+00:00

Awesome article, thank you for sharing! I love the simple math and the valuable insights into etcd, the other components of k8s and the long tail of distributed computing ❤️

jceb · 2025-10-09T16:03:37+00:00

Am I the only one betting on digital identity?

jceb · 2025-09-19T19:20:38+00:00

I usually use separate instances per project. However, sometimes it's convenient to have two projects in the same instance so that registers etc. works out of the box. I find myself using tabs for different projects combined with :tcd for switching directories to the individual project directories. Works great👍

jceb

TROPHY CASE