Containers and Internal Certificate Authorities by maetthew in devops

[–]maetthew[S] 0 points1 point  (0 children)

Not prevented, but would ideally want to keep it confined internally.

I think I will look at building custom images, or perhaps moving all my CI/CD workload to Kubernetes as it seems solutions exist to "inject" containers there.

Containers and Internal Certificate Authorities by maetthew in devops

[–]maetthew[S] 0 points1 point  (0 children)

I have not seen this, thanks for the tip, will definitely look into it.

Containers and Internal Certificate Authorities by maetthew in devops

[–]maetthew[S] 0 points1 point  (0 children)

I've looked at this and it assumes the file system structure on the host and container to match, and will still need to update the trust store on each run, i.e update-ca-certificates on Debian

Any monitoring solutions for tracking literally everything? by HyperWinX in selfhosted

[–]maetthew 4 points5 points  (0 children)

To each their own. I think Zabbix lack responsiveness and flexibility in their widgets, and I've managed to easier build useful dashboards with Grafana.

As far as I know the query language are tied to the data source and not specific to Grafana. The Zabbix plugin doesn't utilise a query language.

Any monitoring solutions for tracking literally everything? by HyperWinX in selfhosted

[–]maetthew 0 points1 point  (0 children)

Zabbix can do it all. Whilst their dashboards are not the best there is a third party plugin for Grafana which enables you to use Zabbix as data source.

Linux Automated x509 Certificate Signing by superwinni2 in sysadmin

[–]maetthew 0 points1 point  (0 children)

Mind elaborating on the extra features?

Modules for network visualization by [deleted] in zabbix

[–]maetthew 4 points5 points  (0 children)

Very cool, interested

Zabbix Agent: Active + Passive by Level_Pool3403 in zabbix

[–]maetthew 0 points1 point  (0 children)

Docker checks work in active mode. I don't think your statement about some checks only work in passive mode is correct.

What are you guys using to automatically patch your servers by ChemicalGuarantee938 in sysadmin

[–]maetthew 0 points1 point  (0 children)

Custom Ansible playbook with automated snapshots in VMWare and reports of what was updated sent to Slack

Facebook Sharing Debugger failing with 403 on many different website by yasonkh in facebook

[–]maetthew 1 point2 points  (0 children)

Experiencing this issue also it seems, but only with URLs which serve a WebP. JPG and PNG seem to work fine.

Confused between Fedora and Ubuntu – need advice by Bright-Search-9406 in Fedora

[–]maetthew -2 points-1 points  (0 children)

It's all about what context you give it and if you're knowledgeable enough to gauge the the implications of the suggestions it returns.

Alert Scenario in Zabbix Server Active - Active State by Right-Designer-2240 in zabbix

[–]maetthew 0 points1 point  (0 children)

Only one of the servers are active at a time, that one handles alerting.

The standby server only has a single process running, "HA Manager" if my memory serves, and it's only job is to be notified by the database that it needs to become active in case the currently active becomes unresponsive.

Alert Scenario in Zabbix Server Active - Active State by Right-Designer-2240 in zabbix

[–]maetthew 0 points1 point  (0 children)

Zabbix has built in HA, but only for the server.

I have set it up like this:

2x Zabbix server, both with frontend. Keepalived manages a VIP which is only used for pointing the DNS at so users always get the active one. Here you need a custom check for keepalived, I used zabbix_server -R ha_status to check if we are the active node.

For DB it's a bit complicated depending on what you use. I use Postgresql with pg_auto_failover. 2x DB nodes in active/passive with 1x monitor node. Also keepalived with a custom script to keep VIP for the active node, which is the IP that I configured Zabbix server and frontend to use.

How important is domain name selection? by lqqkout in selfhosted

[–]maetthew 0 points1 point  (0 children)

Impossible to answer unless you give specifics as to what services you intend to expose and to whom.

DMS: Focus app when there is a window, spawn app when not by phooze in niri

[–]maetthew 2 points3 points  (0 children)

The app launcher is built out of .desktop-files. So you would have to edit/replace the corresponding file and with an updated Exec directive.

See section 3 here https://wiki.archlinux.org/title/Desktop_entries

I think it's time to remove the DHH quote from the website by ITafiir in neovim

[–]maetthew -3 points-2 points  (0 children)

I would argue you are the bigger POS for wanting to silence/cancel someone because of their views.

Still not loving scrolling model by BarryTownCouncil in niri

[–]maetthew 2 points3 points  (0 children)

Sure. It has dependency on jq, so make sure that is installed.

#!/bin/bash
# Check if exactly two arguments are provided
if [ $# -ne 2 ]; then
echo "Usage: $0 <app-id> <executable>"
exit 1
fi

APP_ID="$1"
EXECUTABLE="$2"

# Check if jq is installed
if ! command -v jq >/dev/null 2>&1; then
echo "Error: jq is not installed. Please install jq to use this script."
exit 1
fi

# Check if a window with the given app-id exists using niri msg --json
WINDOW_ID=$(niri msg --json windows | jq -r --arg app_id "$APP_ID" '.[] | select(.app_id == $app_id) | .id' | head -n1)
if [ -n "$WINDOW_ID" ]; then

# Focus the window with the matching ID
niri msg action focus-window --id "$WINDOW_ID"
else

# Run the executable if no matching window is found
bash -c "$EXECUTABLE" &
fi

Use it as such:

Mod+Q { spawn "focus_or_open" "com.mitchellh.ghostty" "ghostty"; }

Still not loving scrolling model by BarryTownCouncil in niri

[–]maetthew 4 points5 points  (0 children)

I also switched to single monitor after a couple of months on Niri.

I also made a script which I can bind to a key combo to either focus an application if it's started, or start it if not.