markuman123

Three layer of defense on default Port here.

1. ufw limit ssh.

2. Ansible devsec.hardening.ssh_hardening

3. fail2ban

Energyconsumption is a reason for a CPU update.

Energyconsumption is nowaday the reason for a CPU Update.

I store my TOTP secrets in the Gnome Keyring

      totp() {
        TOKEN=$(keyring get totp $1)
        oathtool -b --totp $TOKEN | xclip
      }

    - name: set TOTP in keyring
      with_items: "{{ TOTP }}"
      community.general.keyring:
        service: totp
        username: "{{ item }}"
        password: "{{ TOTP[item] }}"
        keyring_password: "{{ keyring_password }}"

Surface Go

maybe the certificate crew is laid off?

expired two days ago (3/22/2023) and no one cares

russia? shut down a service and halt the productivity of most companies in the west...because most companies moved to azure ad and teams.

No.

Passwords for nextcloud

no valid https ...

raspberry pi (some low energy home computer) serving nextcloud, offline wikipedia and OSM.

it's super easy to integrate in every ci/cd pipeline

I always wonder why people are investing so much energy and time to invent New tools instead oft using existing tools that already solve the same issues. Just use ansible for that.

with ansible

using s3 as a cdn is a complete different thing than leaking intentionally credentials.

Sorry, I cannot follow.

To be clear, I'm no aws advocate.

Nope, because you just get a 404, even on public buckets, because you have no access to the kms key.

that's the reason why should always use aws:kms encryption on s3.

but the budget alert is delayed...I bet you're ruined when you've noticed the alert.

AWS_PROFILE=broken aws s3 ls s3://deltars/simple/

14kb in your bucket and you pay for outgoing traffic. means, while you're sleeping, I can ruin your aws bill.

In any case, committing credentials is always wrong and you cannot justify it.

Depending on your ci tool (e.g. gitlab-runner, drone-ci ... ) there are other and better ways to provide credentials for a git project in CI/CD pipeline.

nextcloud with onlyoffice

https://docs.ansible.com/ansible/devel/roadmap/COLLECTIONS_2...

2020-09-22: ansible-2.10 GA release date.

no no no, it's alpha9, not stable yet!

Use what you're most comfort with, not what others are.

Postgres and MySQL (MariaDB/Percona) are both big players with a huge community.

Maybe consider to use Mariadb or Percona instead of MySQL to avoid oracle vendor lock in.