2000swebgeek

6 ms·

1. 1.▲
   by 2000swebgeek 11mo ago

   block the IPs or setup an WAF on AWS if you cannot be on Cloudflare.
2. 2.▲
   by 2000swebgeek 2y ago

   I think its right time for AWS to buy. AWS shut down their service, if AWS can "easily" integrate with Gitlab, I see a lot of potential on the deployment side to increase AWS revenue.
3. 3.▲
   by 2000swebgeek 2y ago

   pg_flo looks like a very interesting project we might end up using. I like the archival to s3 and cheap versions of tools that get done at lower scale like GBs instead of TBs worth of data (Which is what I think Debezium does and something
4. 4.▲
   by 2000swebgeek 2y ago

   better yet, see if bots access /robots.txt, find them from there. no human looks at robots.txt :) add a captcha by limiting IP requests or return 429 to rate limit by IP. Using popular solutions like cloudflare could help reduce the lo
5. 5.▲
   by 2000swebgeek 2y ago

   ENV variables having the names with PASSWORD or SECRET should be ignored by logging and monitoring systems. Most of the web has been built on trust of following conventions. common secrets used on server side - `JWT_SECRET`, `DATABASE_PASSW