5 ms·
This is a great project, and exactly what I was looking for. Now doing manual cert renewal and looked into using jwilder's docker-gen to automate, but that was
by rapnie 8y ago
This is a great project, and exactly what I was looking for. Now doing manual cert renewal and looked into using jwilder's docker-gen to automate, but that was an involved process. This brings it all together. Thank you!
- twovarsishard 8y agoSetting a few labels on a docker container is hard? Good god we set the bar low these days.
- SquareWheel 8y agoI've flagged this comment. Creating a throwaawy just to mock somebody is not appropriate.
- nothrabannosir 8y agoAgreed, and thanks for mentioning it. This type of comment gives everyone a bad name.
- dvfjsdhgfv 8y agoWhile I don't appreciate the form and agree there is no place for it on HN, there is some merit in that that comment.
- thecatspaw 8y agoit could be written in a non-inflamatory tone however
- Sohcahtoa82 8y agoI'd call it cowardly.
- bovermyer 8y agoIt should also be punishable by more than just flagging a comment. Is there a way to ban IPs?
- dspillett 8y agoIP blocking is ineffective[1] and can have noticeable collateral damage[2]. As has been discussed at length in discussions about tracking people for copyright protection/enforcement reasons, IP addresses are not a suitable method of identifying/locating/tracking people. [1] they could just connect from somewhere else next time: mobile instead of home network, coffee shop wireless, day-job guest wireless, train/bus wireless, friend's wireless, tethered to friends' mobile connection, ... - in fact the poster may have used an alternate location this time just-in-case[3]. [2] if a public address/range is blocked, or a range used by a large employer or educational establishment, that could affect many innocent users while not affecting the problem user. [3] people determined enough to be dicks that they take time to sign up for a throwaway account, are likely determined enough to post from another location and dickish enough not care if other people using that location get blocked because of their action.
- throwaway8879 8y agoThey didn't say it was hard, they said "involved process", which I agree with.
- rapnie 8y agoThank you. My case involves more than the few labels. But you may enlighten others with your solution and help raise the bar again.
- dvfjsdhgfv 8y agoI'm sorry, I really don't get it. What do you need Docker for? Let's Encrypt and Nginx give you practically full cert automation. Maybe there's some crucial bit of information I'm missing here?
- rapnie 8y agoI am running RancherOS and Rancher where I have everything as docker images. Easily manageable and updateable. Using docker-compose automation, but in my setup with nginx as reverse proxy I have a lot of configuration options, and am a programmer at heart, not a DevOps guy. Don't know yet if I can use this out-of-the-box, but it will certainly save me a lot of time having it all together.
- sureaboutthis 8y agoI don't get it either even if one uses Docker. I use jails on FreeBSD but, otherwise, I have the same set up that does the same thing by just configuring what comes with all that so I don't understand the point of this.
- aaaaaaaaaab 8y agoCan you have a self-contained pre-built FreeBSD jail that you can fire up without doing additional setup? Like a prebuilt Docker container with all the necessary stuff already installed.
- sureaboutthis 8y agoI'm a professional. I don't need someone else to configure my system tools for me.