jsmith12673

7 ms·

31.
by jsmith12673 6y ago
Don't have an article on hand :/ just something that I've played around over with over time. Which part is confusing? Maybe I can try to clarify/give examples where helpful.
32.
by jsmith12673 6y ago
You create a Root Self Signed Certificate, and then deploy leaf certs signed by that root to your API. Then deploy your client apps with the certificate of your self signed root. Assuming that your root is safe, no attacker will be able to
33.
by jsmith12673 6y ago
Economics noob here: the paper concludes that past automation is predicted by 2 key factors: pay and employment. What does that mean exactly? Are they saying that higher a job pays, the more likely it is to get automated? Or the other way a
34.
by jsmith12673 6y ago
Interesting, thanks for sharing! I'm assuming your team is using vault for PKI, but is there a similarly happy path for issuing certs without Vault. I started off just using `openssl` but it all felt very janky, and I didn't reall
35.
by jsmith12673 6y ago
Thanks for reaching out! Since I have the chance I'll add - Nomad is pretty awesome, and I love the work your team is doing. My org looked at Nomad at a time when there was a lot of pressure from above to deliver something as soon as p
36.
by jsmith12673 6y ago
I got a bit disillusioned with k8s and looked at Nomad as an alternative. As a relatively noob sysadmin, I liked it a lot. Easy to deploy and easy to maintain. We've got a lot of mixed rented hardware + cloud VPS, and having one layer
37.
by jsmith12673 6y ago
They were using ECB mode before
38.
by jsmith12673 7y ago
Indeed. For example, I can ping 8.8.8.8, or I can directly curl an IP for a webpage. It's just the DNS portion that doesn't get through.
39.
by jsmith12673 7y ago
Just tried going through this tutorial. I can get traffic to forward through the server just fine, but for some reason, DNS refuses to resolve. I've tried: - Having no DNS explicitly specified - Having unbound DNS server run locally -