tok1

7 ms·

1.
by tok1 1y ago
True for API but you can do DynDNS updates (RFC 2136), TSIG-authenticated on a per-zone basis. [1] Can even be controlled quite granularly with a Lua-based updatepolicy, if you want e.g. restricting to only the ACME TXT records. [2] [1] ht
2.
by tok1 1y ago
Thank you!
3.
by tok1 1y ago
Not only that: Dovecot 2.4 will also remove the functionalities of dsync, replicator and director [1]. This is frustrating and a big loss as these enabled e.g. very simple and reliable two-node (active-active) redundant setups, which will n
4.
by tok1 1y ago
I think what you are asking falls into "cluster member evacuation and re-balancing" [0], combined with live migration [1] with minimal downtime. [0] https://linuxcontainers.org/incus/docs/main/howto&
5.
by tok1 1y ago
Fun fact, Incus is being used as underlying infrastructure for the NorthSec CTF, i.e. in an "as hostile as it can get" environment. If you have close to a hundred teams of hackers on your systems trying to break stuff, I think it
6.
by tok1 1y ago
> Instead, its documented approach to running as some other account is to add some of the superuser's privileges to Kea [...] Not disagreeing, just want to mention that Kea can run fine without privileges, which is also documented
7.
by tok1 2y ago
Running a router built with systemd-networkd and kea myself, and I quite like both, even though I have not integrated them with each other. Would you be willing to share some details on how you use these components? Especially corerad as I
8.
by tok1 2y ago
I am not familiar with Firehol, so I might be missing something, but isn't this already solved in a (potentially) more powerful, mature and standardized way by DNS RPZ (Response Policy Zones, [1])? Well-established resolvers like Unbou
9.
by tok1 2y ago
One could almost wonder if the explosion of gTLDs in the 2010s has been pushed by registrars as they were seeing Big Money. In (my personal) retrospective, the value for Internet users and their actual usage is vanishingly small--compared t
10.
by tok1 2y ago
This "trust aspect" implied (or assured?) by certain TLDs, or for the non-US world by second-level domains under ccTLDs, has been, interestingly, completely missed by several countries in the early Internet days, including fairly
11.
by tok1 4y ago
As stated, I am only focused on employment, not freelancing. See also parallel discussion with challenges of contractor vs employee and false self-employment.
12.
by tok1 4y ago
I don't want to sound negative but with current tax legislation in most EU countries, this is far more complicated than it may sound, at least to do it lawfully. Not impossible but in many cases, it requires a legal entity in your home
13.
by tok1 4y ago
No disagreement in general, but to your point of infrastructure routers (assuming you refer to ISP and Internet backbone infrastructure): Having worked in ISP security, IMHO a years-long uptime of such critical components is nothing to be p
14.
by tok1 5y ago
Absolutely love syncthing, and migrated to it after using Seafile for several years. I also have quite some personal/business experience with iCloud and OneDrive, and syncthing is (mostly) superior. My wishlist for syncthing though, in