• 0 Posts
  • 165 Comments
Joined 1 year ago
cake
Cake day: January 27th, 2025

help-circle

  • I get writing boilerplate and unit tests can probably be done by software well enough, at least when supervised.

    Ill be honest, that’s not even my real issue.

    My real issue is that programming, devops, systems administration. All of these things are art forms, every bit of them. From high-level application architecture down to the tiniest details of implementation.

    Like how much of a library you choose to include, what you name your variables, what type of loops you use to iterate through data. How you choose to format and comment your code.

    Giving these choices to the machine is like the painter giving their brush to it.

    Just like images generated by stable diffusion will never be worth their fully-human painted equivalent. So too will LLM-developed programs fail to hold that value.

    For what its worth, this isnt new. I’ve held contempt for VC-worshipping developers who see programming as a means to an end far longer than LLMs have been used for serious work.








  • Doing routing/firewall in software is a lot more flexible, and easier to patch when vulnerabilities come out. Especially when software is integral to the routing (looking at you wireguard/openvpn).

    Keep in mind those edgerouters look like they have dual core embedded MIPS CPUs.

    My dell power edge is a full blown rack-mount server that could run a small plex instance. You could stick a 1060 in this thing and get Witcher 3 to play at a reasonable framerate.

    That’s what makes up for the lack of dedicated asics.

    As for the four NICs they are as follows:

    • 1gb - wan (to modem)
    • 1gb - config (to config vlan on switch)
    • 10gbps - main lan trunk to LAN switch
    • 10gbps - trunk line to public server VM host (DMZ’d from rest of lan, each VM has its own vlan/subnet/firewall ruleset)

    They don’t act as a switch because it handles packets, not frames, allowing/dropping/denying them based on rules set in software.


  • Tell that to the poweredge r210 ii in my closet running PFsense with its CPU barely getting touched despite four NICS, two of them 10gbps.

    You’re thinking of switching hardware.

    That being said I might go hit up mikrotik while I still can for switches. Shame cuz I was hoping to wait until they got PoE versions of the CRS310-8G+2S+IN, but I think they wanna get rid of the crusty old stock of CRS112-8P-4S-IN. They made a similiar newer switch but it only runs swos instead of router is which is bunk.

    Ubiquiti stuff can still be flashed with openwrt so I’m good on APs I think once my dlink dies, even if it’ll be overpriced.

    Worst case I just buy em like I do my FPV flight controllers: from Ali Express








  • You can lead a horse to water but you can’t make it drink, especially not when you barely have time in the day to take a drink yourself.

    If someone doesn’t have time or will to put privacy over convenience that’s kind of their gig. It sucks but like I can’t fuckin’ change their life schedule/priorities.

    I spend enough time documenting and working in my homelab, I don’t need other people’s too. I’ll be happy to point people towards information and documentation, but that’s about it.

    However if you’re not willing to:

    1. bury your nose in multiple wikis
    2. change out the OS on nearly every general purpose computing device you own
    3. Live most of your online life anonymously/pseudononymously
    4. Run a homelab (technically not required but makes life nicer)

    You should stop while you’re ahead.

    If you have kids I have no fucking clue how you’d even begin.

    At that point you’re installing rootkit anticheat just to get little johnny playing games with their friends, fucking nightmare scenario.




  • For webapp stuff for sure, but when you want to login as the same user with the same perms across all your VMS and baremetal servers at the os, it’s nice.

    I use virtualization over containerization because i have the hardware resource so I might as well take advantage of improved isolation and security VMS provide. Plus I use Linux on my desktop/laptop, and have a separate dedicated storage host.

    Its nice to have everything managed by one service with global accounts and permissions.

    Looking at authentik it seems to provide some but not all of that. Def something to keep an eye on if freeipa decides to stop being so free.

    If you’re running a docker-based environment, and especially if your personal workstation/laptop doesn’t run Linux, I totally get it.

    I think freeIPA could use an openid provider packed in for sure. I also kinda trust api keys more than creating the service accounts for software that needs to auth.

    Outta curiosity how do you handle SSO and File Storage? I like being able to make samba shares that require SSO authentication over something like nextcloud because I can directly mount the disk. Not sure if theres a good option there.