sksjvsla

7 ms·

31.
by sksjvsla 1y ago
Yes, bootstraped for our own money. It makes a difference. If I generalize, I see two kinds of groups for whom this reduction of cost does not matter. The first group are VC-funded, and the second group are in charge of +million AWS bill. W
32.
by sksjvsla 1y ago
Exactly our insight having maintained the same app both places.
33.
by sksjvsla 1y ago
We use cloudflare as the WAF and loadbalancer, which makes traefik less relevant and Certbort easier to couple.
34.
by sksjvsla 1y ago
https://news.ycombinator.com/item?id=44335920#44336757
35.
by sksjvsla 1y ago
> Cost of DIY and support: You’re absolutely right that 24x7 ops could eat up any savings if you built everything from scratch without automation or if you needed dedicated staff watching dashboards all night. In our case: • We heavily i
36.
by sksjvsla 1y ago
Without making it too political and speculating on things I don't know, I, like many other Europeans, have seen plenty of cases of Russia ruining infrastructure projects in Europe, everything from internet cables on the ocean bed, telc
37.
by sksjvsla 1y ago
Great question. Technically speaking I might not need both, but I have a gut feeling that one of these cloud providers might not be as hardened as the hyperscalers, and that Russia is just waiting to put one of these two services down. So f
38.
by sksjvsla 1y ago
The Medium post is more of a high-level case study for a mixed audience (including non-technical decision makers). I intentionally kept the details lighter there, partly to avoid overwhelming readers and partly because the real “meat” (like
39.
by sksjvsla 1y ago
Thanks for the compliment. We used AWS EKS in the old days and we never liked the extreme complexity of it. With two Spring Boot apps, a database and Redis running across Ubuntu servers, we found simpler tools to distribute and scale worklo
40.
by sksjvsla 1y ago
Depends on the use case, right? I don’t accept traffic from random Hetzner IPs — only Cloudflare’s IPs are allowed. The only potential indirect risks is if your Hetzner VPS IP range gets blacklisted (because some Hetzner clients abuse it
41.
by sksjvsla 1y ago
Yes, it would be nice. Given Cloudflare's dev-friendly branding for some reason, I did not mind keeping it.
42.
by sksjvsla 1y ago
A good alternatives for Loki is Victoria. Popular, way more performant and reputable but we went with Loki because of the relative size and diversity of maintainers between the two projects. Your points are super valid and we worked around
43.
by sksjvsla 1y ago
Pollution: We front everything user-facing through Cloudflare, so external users (and bots) don’t interact directly with our Hetzner/OVH IPs. We lock down our IPs at the firewall (ufw + Cloudflare IP allowlisting) so only trusted sourc
44.
We moved from AWS to Hetzner, saved 90%, kept ISO 27001 with Ansible(medium.com)
300 points by sksjvsla 1y ago|194 comments